Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31382d3234203d3e2037343138.roa
File:                     3138362e34312e302e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier:          RmJTPjh9Q2DFBd/GRekcyzvAdmGz+lCzr3OeclZn8xc=
Subject key identifier:   E7:4F:2E:B4:8F:41:7E:C6:5F:08:37:02:C5:71:B4:5C:99:DB:47:4A
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       0E18EFD80A89C6DD504F86AA41B03B341B8B298C
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31382d3234203d3e2037343138.roa
Signing time:             Wed 15 Apr 2026 17:38:55 +0000
ROA not before:           Wed 15 Apr 2026 17:33:55 +0000
ROA not after:            Wed 14 Apr 2027 17:38:55 +0000
asID:                     7418
IP address blocks:        186.41.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:18:ef:d8:0a:89:c6:dd:50:4f:86:aa:41:b0:3b:34:1b:8b:29:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Apr 15 17:33:55 2026 GMT
            Not After : Apr 14 17:38:55 2027 GMT
        Subject: CN=E74F2EB48F417EC65F083702C571B45C99DB474A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:64:94:da:a4:d5:49:28:c0:84:49:8a:82:
                    1f:71:48:f0:c2:60:55:89:90:d5:ca:b1:b8:74:92:
                    3b:68:da:cb:65:0b:8a:b7:87:01:4d:2e:45:93:f3:
                    08:d5:75:a0:8e:e7:bb:66:71:71:e5:1a:02:c9:8a:
                    e2:34:13:74:c5:b5:96:b7:f0:08:98:74:4b:10:27:
                    d6:3f:d3:d2:f0:3b:8a:ab:ff:f5:fa:c2:27:84:66:
                    ec:ec:a0:fc:8d:98:7d:52:63:34:f6:f2:00:6b:74:
                    97:fc:c8:8d:b8:a5:5a:f8:67:2e:65:9e:c9:08:38:
                    bd:f5:a5:f0:28:69:68:da:19:6d:08:7f:6a:74:8e:
                    16:12:af:c6:b0:72:25:4e:d6:2e:03:6d:cf:b2:e0:
                    51:38:ea:e0:60:2c:43:40:32:16:99:1f:2d:d4:4f:
                    5e:74:0c:d6:f8:93:f9:9f:67:16:20:49:45:a4:ae:
                    cf:54:f1:6c:8a:f9:ac:2f:4e:ad:6c:1c:50:5b:f9:
                    2e:98:18:fc:f3:91:5a:17:7c:da:39:a7:15:81:c7:
                    ca:8b:59:a9:ed:1d:29:d9:04:41:df:94:1c:9c:48:
                    f8:57:3b:e6:6b:a6:1c:e4:ac:d4:5f:f3:51:49:7f:
                    58:a4:73:88:08:68:a0:4d:45:aa:c9:d1:a2:ba:db:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4F:2E:B4:8F:41:7E:C6:5F:08:37:02:C5:71:B4:5C:99:DB:47:4A
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31382d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.41.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         80:20:af:d8:b5:c5:f1:0d:5d:df:6c:a3:55:a9:ee:96:3f:c7:
         7b:7f:06:b2:3f:28:d4:23:ae:79:f2:91:80:76:a1:4b:2d:21:
         15:c7:05:01:65:9c:c0:83:69:a3:6e:fa:d8:73:10:47:36:9a:
         5a:dd:07:23:85:da:48:0e:dc:b9:bb:85:3f:1a:21:29:9a:de:
         5a:2d:77:87:c8:60:53:d3:91:9e:78:51:b7:c0:e4:e9:a9:75:
         c4:c6:05:01:a8:46:08:bb:f0:73:a2:d0:7e:91:0b:e4:df:e1:
         a1:27:c6:ae:0b:16:ee:b2:7e:3f:59:73:24:02:1e:b6:54:e4:
         71:63:09:54:16:2a:25:01:c4:84:db:2b:41:9d:2b:22:9a:a5:
         52:1d:6a:96:6d:ef:4d:0b:b9:9d:56:68:19:1b:96:7c:e0:f9:
         d9:48:e7:e4:9a:9b:80:fe:02:20:9f:b5:45:70:be:05:f5:9a:
         f1:ea:e3:32:99:54:c5:40:2c:bf:b3:d7:46:11:03:6c:c2:ca:
         00:3f:49:14:18:42:b5:03:f1:61:55:97:88:f7:40:81:e5:b1:
         e7:f4:b8:26:97:3c:eb:3a:4b:6b:e9:69:2a:d2:c0:16:17:bd:
         bb:c4:f6:a2:6c:db:29:65:d2:f3:de:b5:7c:de:e9:b8:06:15:
         72:39:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:34:10 2026 by rpki-client