Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/3138362e302e3135362e302f32342d3234203d3e20323733313631.roa
File:                     3138362e302e3135362e302f32342d3234203d3e20323733313631.roa (raw, json)
Hash identifier:          UjV7pyDPe1Z8GOQp3Prfx9PF611O3KkEqdb9mMyPf/E=
Subject key identifier:   3B:82:83:6E:41:00:A1:D4:4B:1F:67:03:B8:82:10:1B:63:DF:7B:A0
Certificate issuer:       /CN=4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06
Certificate serial:       555CCE5B170C4024778961AAE97274AE42EDD0F8
Authority key identifier: 4A:E2:A3:6E:08:FA:04:0C:A3:A7:78:3B:41:FE:F8:67:CE:FF:CC:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/3138362e302e3135362e302f32342d3234203d3e20323733313631.roa
Signing time:             Fri 27 Mar 2026 13:30:00 +0000
ROA not before:           Fri 27 Mar 2026 13:25:00 +0000
ROA not after:            Fri 26 Mar 2027 13:30:00 +0000
asID:                     273161
IP address blocks:        186.0.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5c:ce:5b:17:0c:40:24:77:89:61:aa:e9:72:74:ae:42:ed:d0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06
        Validity
            Not Before: Mar 27 13:25:00 2026 GMT
            Not After : Mar 26 13:30:00 2027 GMT
        Subject: CN=3B82836E4100A1D44B1F6703B882101B63DF7BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:b5:c0:c2:3e:64:fa:27:01:a3:31:ac:14:
                    74:78:3f:38:3f:e3:80:e4:93:52:ab:51:f1:70:41:
                    49:a6:99:10:e1:b3:e2:af:9b:f1:43:ed:b4:d0:c7:
                    d1:01:7b:40:49:b7:5a:e7:f7:39:d2:57:8e:17:04:
                    34:a8:e7:e5:a7:7b:f5:61:4f:f4:fb:e7:40:23:a2:
                    dc:e5:9d:3a:03:47:57:51:80:f1:e6:4f:8d:a8:9f:
                    0f:67:ef:01:4f:32:0f:7e:46:b9:20:21:6a:c4:01:
                    98:4e:23:ca:a4:13:67:cf:5a:ee:67:a9:01:6e:cb:
                    c8:30:37:47:c9:5e:3a:44:24:e3:b2:eb:ad:cf:1e:
                    cc:18:75:1e:a1:3d:3b:28:83:28:8f:a7:bd:f4:ce:
                    96:a0:01:31:f7:c9:a4:58:9e:db:f2:ea:f0:14:21:
                    be:31:38:30:d9:39:4b:bd:1a:0d:84:ea:f8:a6:e6:
                    f8:8c:fb:92:41:6c:a3:e4:b7:36:86:2e:76:f5:db:
                    ee:96:c4:a7:2e:50:fb:c0:b1:83:47:85:62:b2:11:
                    6f:c6:1d:f0:a1:2d:29:1f:e3:af:f2:4a:03:b2:bb:
                    1b:66:27:1f:97:16:ba:7a:61:e9:c5:1b:8f:40:f0:
                    df:e8:d3:f6:2b:17:05:80:c1:18:69:07:ef:d1:6d:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:83:6E:41:00:A1:D4:4B:1F:67:03:B8:82:10:1B:63:DF:7B:A0
            X509v3 Authority Key Identifier:
                keyid:4A:E2:A3:6E:08:FA:04:0C:A3:A7:78:3B:41:FE:F8:67:CE:FF:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/3138362e302e3135362e302f32342d3234203d3e20323733313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:cb:c6:2a:6e:62:4d:0c:fa:e6:f6:6e:df:fa:f6:44:20:fe:
         23:15:ac:66:ae:8b:b1:5e:30:e9:6a:c8:69:7f:14:b9:a5:5e:
         8d:97:37:52:e0:f8:e9:68:f6:51:a5:33:e7:79:44:53:e2:90:
         ce:44:0c:03:2d:b3:71:b8:f7:23:59:3e:b3:2a:e1:6e:f0:f9:
         6e:c7:d5:5e:45:d7:33:18:2a:25:7b:61:ce:a6:04:13:46:50:
         cc:d8:e6:78:7d:23:7e:ee:cd:f3:17:50:69:9c:bd:c7:2e:e6:
         a2:c5:d7:38:9f:1d:08:46:54:18:62:42:e6:50:4c:fc:dc:75:
         cb:6d:c2:f4:3c:9b:e8:6b:39:8c:e7:ac:96:2c:30:59:f7:44:
         74:ee:28:6d:06:23:b4:c3:81:82:ab:21:1a:3b:a5:f8:75:bb:
         74:ee:d0:30:10:a4:49:f5:01:bb:6b:94:98:96:ec:ac:84:7e:
         f3:71:7e:14:b1:ae:f4:31:0d:51:c9:ff:f6:b2:6e:64:e4:3f:
         32:e4:f3:72:96:f4:d9:9b:e5:66:b8:65:9d:91:34:2f:03:0f:
         67:db:27:22:3a:6c:eb:5f:89:4d:a6:c8:5a:dc:59:5a:4d:26:
         a4:5f:64:72:3c:fa:42:43:37:39:8c:76:01:64:28:57:24:c0:
         cf:5a:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:59 2026 by rpki-client