Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa
File:                     3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa (raw, json)
Hash identifier:          S65zV5s7QRuTlS/CcPwzLosFZLwjXEqmf5JvyJ3oaRw=
Subject key identifier:   44:EA:5B:D4:AE:F9:CB:94:5C:ED:90:D8:2D:AB:28:26:EB:1A:01:25
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       4ABE6315ACE6199875FFFCCA05AC38311C7ACDC8
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:53 +0000
ROA not before:           Fri 25 Sep 2026 14:31:53 +0000
ROA not after:            Fri 24 Sep 2027 14:36:53 +0000
asID:                     18809
IP address blocks:        186.188.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 05:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:be:63:15:ac:e6:19:98:75:ff:fc:ca:05:ac:38:31:1c:7a:cd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:53 2026 GMT
            Not After : Sep 24 14:36:53 2027 GMT
        Subject: CN=44EA5BD4AEF9CB945CED90D82DAB2826EB1A0125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:1a:c8:d1:f6:f8:9f:6f:ef:cf:a6:51:ab:
                    ff:22:9b:51:01:3f:fe:90:e9:01:76:be:a6:d4:8b:
                    a9:a5:f0:a1:e1:96:45:95:50:81:04:e1:cc:27:88:
                    19:a3:b2:70:5e:dc:56:3a:f7:1d:67:4b:be:d5:59:
                    1a:e8:27:6d:9e:10:99:21:74:96:9d:8f:12:90:d0:
                    16:45:5e:c8:bd:0b:99:fc:24:70:e0:49:26:b9:3a:
                    70:88:13:e3:38:14:1f:bb:84:2c:94:f4:1d:a1:e1:
                    da:70:8d:ff:a8:fd:0a:80:2c:c3:a4:95:20:85:6a:
                    34:04:d1:17:55:8d:c5:4c:04:1c:96:69:80:1d:11:
                    29:b9:ec:dd:06:df:6f:60:02:d3:97:bf:54:b5:0e:
                    da:78:59:2f:7d:d0:ad:be:b4:4e:d3:85:d3:aa:fe:
                    5e:d6:be:05:84:a8:d4:fa:a7:73:13:67:e2:c4:37:
                    64:63:c4:86:0d:52:9f:e5:a8:28:5e:ca:b1:70:82:
                    69:d3:e9:cc:eb:72:9b:0b:12:90:7a:c8:a4:6c:0b:
                    8d:bb:77:c5:3a:21:66:06:0b:a2:ad:ab:79:f5:b4:
                    02:27:57:6a:2e:f0:9f:bc:54:ee:2a:b0:ad:66:1b:
                    2f:d5:75:62:20:84:3e:9b:70:ef:12:66:94:52:cc:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:5B:D4:AE:F9:CB:94:5C:ED:90:D8:2D:AB:28:26:EB:1A:01:25
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.188.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:0f:5c:ee:31:b9:aa:34:21:2e:a7:c2:9b:0e:7a:26:44:
         0e:de:d4:bb:ff:aa:38:60:dc:c0:b0:aa:96:74:15:23:fb:f1:
         b0:49:db:f3:04:59:b4:70:08:38:d7:80:ee:8d:51:b4:d6:40:
         df:b1:f3:f5:3a:66:87:65:e6:cd:b4:03:7e:d2:db:3b:64:6d:
         22:31:17:98:ee:10:1f:28:15:02:92:87:b7:a9:e8:8d:e5:96:
         19:cc:10:b2:43:f3:f6:47:9f:de:16:99:ab:6a:3c:4a:4d:b2:
         21:25:33:9d:f0:28:4e:16:d6:98:1c:c8:2a:06:f6:fc:31:5a:
         a0:7d:99:be:c0:a3:c3:51:59:75:b5:22:a6:b8:d4:ec:42:23:
         0c:4a:da:3f:1a:f8:50:55:f9:2a:da:d0:84:b4:2d:7f:20:3e:
         4e:8c:15:cb:f3:ac:bb:c1:90:48:22:9d:f7:4c:fd:9b:c0:b5:
         83:e3:df:66:5f:b2:fe:c1:f6:26:92:16:93:b5:95:c5:78:20:
         d6:d6:e7:6d:d6:de:95:a5:6b:91:04:52:e4:2f:ec:81:b0:53:
         e3:f6:19:3f:d0:df:ab:73:46:25:8c:75:18:36:72:f6:7f:5e:
         86:18:9e:01:31:26:69:6b:ad:7b:f3:55:71:60:aa:8b:14:b7:
         ba:83:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:59:43 2026 by rpki-client