Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3139322e302f31382d3234203d3e2037303439.roa
File:                     3138362e302e3139322e302f31382d3234203d3e2037303439.roa (raw, json)
Hash identifier:          3YzBpZAzDxVRlKzddhwWc2wUi9h9bZiwGPfZPMmPMJs=
Subject key identifier:   7E:6B:22:53:02:65:28:95:8E:3E:0E:AD:78:5E:46:14:7E:62:20:78
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       71689CB8162BEF0B7AF6CC7ECA0EE3D8F5D7C002
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3139322e302f31382d3234203d3e2037303439.roa
Signing time:             Tue 06 Jan 2026 20:51:26 +0000
ROA not before:           Tue 06 Jan 2026 20:46:26 +0000
ROA not after:            Tue 05 Jan 2027 20:51:26 +0000
asID:                     7049
IP address blocks:        186.0.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:9c:b8:16:2b:ef:0b:7a:f6:cc:7e:ca:0e:e3:d8:f5:d7:c0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Jan  6 20:46:26 2026 GMT
            Not After : Jan  5 20:51:26 2027 GMT
        Subject: CN=7E6B2253026528958E3E0EAD785E46147E622078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:72:8d:c4:04:09:7c:73:13:20:8b:a8:82:
                    4d:1e:14:1c:01:73:74:38:d5:71:79:bf:3c:ca:a3:
                    30:a2:42:50:3b:e7:bb:a5:e8:21:99:4f:da:52:17:
                    23:ae:f5:4c:ce:f5:41:08:a6:30:0e:80:e4:f6:88:
                    b1:d0:f6:cd:49:e9:f7:a1:48:77:66:25:76:83:f0:
                    ec:ff:a2:50:74:39:4a:1b:44:e2:3d:97:22:3e:49:
                    e3:56:38:a8:af:73:ff:72:2a:31:57:ea:cd:1c:59:
                    ea:f0:d5:38:97:7e:6d:23:9a:48:4b:72:79:41:4b:
                    f5:be:35:18:87:9a:5c:fa:15:c2:75:4f:cc:ac:54:
                    92:dc:1c:32:7c:dd:77:36:ba:67:f0:48:de:75:ea:
                    ff:4a:10:9f:c5:74:aa:ff:09:3c:45:8a:a8:b8:d6:
                    c0:cf:6c:44:34:cb:c5:2d:26:67:d8:f0:86:19:c9:
                    92:93:bb:66:2a:ab:ea:d9:c1:0e:71:e4:df:c6:f2:
                    cb:45:f8:4d:16:37:30:b1:12:16:8f:11:00:3f:c0:
                    dd:bd:eb:0d:eb:69:0d:a1:a7:58:8f:4f:67:7f:23:
                    aa:c5:4f:c4:01:ae:2a:c9:f7:ed:b7:77:21:b2:a0:
                    4d:23:8a:3e:9e:09:ac:b4:40:25:ff:4a:75:c9:eb:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:22:53:02:65:28:95:8E:3E:0E:AD:78:5E:46:14:7E:62:20:78
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3139322e302f31382d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:ce:26:fb:eb:3f:b8:68:8b:50:0d:8e:49:2d:48:dd:61:
         64:7a:30:0e:f6:11:80:a1:77:7e:bb:f8:c5:3f:85:8d:a2:f6:
         83:39:29:2f:76:a2:92:59:51:21:99:17:a5:e9:9c:6a:e4:3b:
         23:98:1b:51:8c:68:34:0a:2e:79:42:c7:fa:4a:01:5b:7d:cb:
         78:b6:19:26:b3:e1:5a:fb:60:f4:2c:0b:cd:ce:8b:7f:76:22:
         d3:c4:53:29:88:cf:b2:dc:84:3f:7c:c4:a9:8d:5b:d0:98:b3:
         ea:f7:6e:a4:34:36:8b:ff:eb:39:73:37:3b:5b:53:0a:92:72:
         7b:07:bc:fa:03:a1:65:c2:12:37:d7:51:15:50:b8:96:40:7b:
         2c:d4:68:3f:78:22:5d:61:ad:ac:4e:18:14:1b:40:d6:bc:03:
         cd:ab:ea:07:37:a0:8b:9f:35:39:2d:48:d3:d5:51:f5:26:e4:
         e1:51:1d:8e:87:53:3a:ac:99:7c:b5:aa:71:0e:70:ba:7d:df:
         1c:bf:cc:68:2d:ad:de:ee:a8:11:28:2f:8e:60:7e:bc:c4:62:
         42:d6:a0:b1:a2:98:77:70:52:73:e8:b7:3c:11:90:3d:68:a4:
         aa:45:d8:28:61:1c:7d:1b:06:e7:e7:c7:6a:88:e1:9d:a4:71:
         69:65:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:51:36 2026 by rpki-client