Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31372d3234203d3e2037343138.roa
File:                     3138362e34302e302e302f31372d3234203d3e2037343138.roa (raw, json)
Hash identifier:          5/8exR3WuN447CdTVHkTkucuOx7GYzVVBTThVMOc0gU=
Subject key identifier:   BF:00:6B:8D:D3:23:48:1A:BA:C0:20:32:95:F1:88:9A:41:E9:54:46
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       51BEBDF11FCF45C094DC8496B999744A956570AE
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31372d3234203d3e2037343138.roa
Signing time:             Wed 15 Apr 2026 18:38:59 +0000
ROA not before:           Wed 15 Apr 2026 18:33:59 +0000
ROA not after:            Wed 14 Apr 2027 18:38:59 +0000
asID:                     7418
IP address blocks:        186.40.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:be:bd:f1:1f:cf:45:c0:94:dc:84:96:b9:99:74:4a:95:65:70:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Apr 15 18:33:59 2026 GMT
            Not After : Apr 14 18:38:59 2027 GMT
        Subject: CN=BF006B8DD323481ABAC0203295F1889A41E95446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:42:d1:c7:89:ec:f0:e7:a0:40:e9:a6:5b:
                    84:e1:68:1c:6f:4c:70:91:3b:89:32:ee:24:22:52:
                    fb:ca:d4:f0:23:fe:8f:18:4b:74:15:ba:b4:7a:d0:
                    ef:cf:84:10:d1:ed:3e:82:0e:2a:2c:db:10:84:5c:
                    da:49:88:70:bc:21:c4:8a:a6:c7:cb:d0:92:2b:8a:
                    9e:7a:22:1d:6e:5a:d8:97:5f:2c:01:ec:27:b7:8f:
                    52:4c:39:68:be:b8:43:ae:dc:41:45:80:60:29:4b:
                    27:15:01:20:3d:a2:cd:68:77:1c:51:aa:3e:5a:86:
                    c3:79:52:b4:a7:9d:8b:ec:72:8b:1c:9a:0f:b7:28:
                    15:5d:e1:39:bf:b9:35:25:96:48:09:40:40:bf:1b:
                    5c:64:79:de:0f:0c:22:e6:ac:55:e5:9f:43:22:1a:
                    f0:30:61:84:98:05:89:ef:65:ca:d0:61:9a:f8:90:
                    93:34:27:e0:cc:61:f4:79:e6:c3:56:55:6a:40:be:
                    bc:cf:62:a5:e8:8a:37:d8:2a:92:44:94:fa:84:12:
                    5b:6f:8c:aa:b2:f5:30:7a:3f:ab:95:2e:7e:93:35:
                    93:81:06:df:03:c9:09:1a:f1:fd:9b:b4:7f:74:05:
                    62:fe:d0:21:65:f6:9b:f8:1f:5f:64:21:1a:a8:a3:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:00:6B:8D:D3:23:48:1A:BA:C0:20:32:95:F1:88:9A:41:E9:54:46
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31372d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.40.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:25:f4:8c:e9:e2:48:a6:b4:a4:44:48:a9:fe:bf:7c:60:
         8b:00:4a:72:e0:f4:e9:13:40:23:6a:ed:94:ac:0c:f5:83:cd:
         65:f7:f0:34:f4:0c:8d:87:c6:39:47:bc:8e:c4:a4:8f:4c:6c:
         e5:42:a9:28:60:88:5e:61:df:9d:72:a1:92:da:20:05:5e:77:
         6d:20:ea:5c:51:00:c9:69:d1:b5:f7:ee:e2:06:77:6c:10:eb:
         38:a8:0e:87:8c:70:c0:20:ea:ea:29:76:cc:e7:16:a6:76:3c:
         9a:6f:c6:1e:8f:04:9c:d2:cb:0d:5b:22:6b:d7:15:e7:a8:f8:
         3d:38:11:c4:3d:cd:75:57:5d:bd:d9:1e:27:81:2f:11:c0:15:
         63:1e:24:6b:f5:39:e9:bc:86:77:01:17:70:e2:56:3b:01:47:
         5c:1a:d4:22:fd:3d:90:d8:a3:12:3e:16:06:69:f4:06:52:48:
         50:3f:85:86:ce:36:fc:07:82:67:18:9a:f2:0b:86:24:8c:8a:
         7f:14:ed:c2:03:bf:59:c8:1b:f8:5a:e5:b6:1b:ed:d7:41:1a:
         71:77:40:b8:e2:bc:c0:f5:a5:e9:6f:55:a9:75:7f:21:38:77:
         2c:e4:52:8a:bf:9b:d0:dc:5c:82:7b:a5:b5:1f:9f:e8:e3:88:
         d4:65:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:34:12 2026 by rpki-client