Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3138362e302e3137362e302f32322d3234203d3e203631353130.roa
File:                     3138362e302e3137362e302f32322d3234203d3e203631353130.roa (raw, json)
Hash identifier:          gQTF06RjIScRXpIS3y+D6pCmsZM+O45LKabzz12DHk8=
Subject key identifier:   D8:ED:A5:40:D4:52:F7:4C:F6:BA:85:73:43:3B:7D:62:8C:4B:B1:0F
Certificate issuer:       /CN=62BBEB1D3EC7F2C414903A0A975FC18934ED1243
Certificate serial:       3E651C59365481CB3766ECF7F4B636F0D7C72F4F
Authority key identifier: 62:BB:EB:1D:3E:C7:F2:C4:14:90:3A:0A:97:5F:C1:89:34:ED:12:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3138362e302e3137362e302f32322d3234203d3e203631353130.roa
Signing time:             Thu 22 Oct 2026 14:42:17 +0000
ROA not before:           Thu 22 Oct 2026 14:37:17 +0000
ROA not after:            Thu 21 Oct 2027 14:42:17 +0000
asID:                     61510
IP address blocks:        186.0.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:65:1c:59:36:54:81:cb:37:66:ec:f7:f4:b6:36:f0:d7:c7:2f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BBEB1D3EC7F2C414903A0A975FC18934ED1243
        Validity
            Not Before: Oct 22 14:37:17 2026 GMT
            Not After : Oct 21 14:42:17 2027 GMT
        Subject: CN=D8EDA540D452F74CF6BA8573433B7D628C4BB10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:24:9d:f0:f0:5f:23:2a:fd:d9:d4:37:5e:
                    ec:48:5d:0d:68:14:e4:1e:a2:0b:fe:20:4a:f3:5d:
                    79:5d:e5:e2:8c:53:da:a1:52:cd:ff:42:ce:72:1d:
                    a4:ec:48:c9:36:45:46:6f:d1:e0:d0:d2:27:cb:e5:
                    8b:d7:93:7a:dc:77:d9:7c:ec:8c:12:c4:65:39:70:
                    48:32:62:1a:8b:dc:2e:28:10:79:c6:44:38:98:6b:
                    dc:a6:6e:92:53:9b:3e:02:ac:6d:e4:c3:a5:20:c0:
                    fa:ae:de:c1:14:15:3c:76:61:d7:33:f6:60:80:59:
                    32:a8:a2:1a:d1:59:43:a7:e8:d9:b2:2a:87:7b:90:
                    c8:b0:20:a6:52:9c:04:94:ce:eb:1e:ba:a2:fa:70:
                    ef:62:36:aa:60:ab:4e:4c:71:6c:47:35:d0:b2:19:
                    bb:9b:8c:85:d9:51:5f:66:b6:f5:c1:5c:03:5e:10:
                    d0:e4:54:ba:54:8d:03:ed:98:e3:36:e1:f7:bb:c7:
                    32:b4:9a:52:cc:d0:fb:82:26:4d:9f:e3:fd:7b:99:
                    98:f1:4c:75:54:e2:5d:3b:16:15:bc:cc:76:51:63:
                    89:4c:f4:d9:53:87:5f:94:cc:11:46:49:3a:7f:a6:
                    26:e8:b1:58:38:4b:f1:cc:35:e3:05:6f:54:93:cd:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:A5:40:D4:52:F7:4C:F6:BA:85:73:43:3B:7D:62:8C:4B:B1:0F
            X509v3 Authority Key Identifier:
                keyid:62:BB:EB:1D:3E:C7:F2:C4:14:90:3A:0A:97:5F:C1:89:34:ED:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3138362e302e3137362e302f32322d3234203d3e203631353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:50:e4:59:ae:4c:1c:36:9a:80:c8:eb:fb:bf:93:3e:d6:
         50:cf:d0:34:17:2b:aa:be:fb:9a:b3:9f:cc:f2:aa:fd:b6:3d:
         8f:43:c8:2e:16:2f:2e:3c:d3:9c:2c:2a:2d:cc:3a:8e:9d:9b:
         55:a2:22:5c:85:70:80:99:ce:2a:5b:37:65:db:4a:f9:bf:20:
         2d:45:32:e1:e9:16:9e:05:ee:12:71:c1:8b:3d:41:cf:99:78:
         42:cd:74:61:4a:34:19:a2:24:84:84:2b:10:f0:6c:56:b7:ea:
         2a:56:62:ca:31:48:00:9d:ac:2d:7a:df:5c:40:0e:0e:2b:cd:
         37:d5:e9:8d:0a:00:c9:46:31:2e:f0:bc:22:08:2e:52:d1:eb:
         8c:af:78:04:07:3b:c5:ca:09:b8:26:f7:6e:fc:fe:e4:9b:97:
         aa:08:62:5a:c0:bb:a4:2b:a5:15:42:ed:e4:f8:72:c6:fb:c0:
         7d:50:81:e2:1f:bc:da:4e:ea:bc:cc:9f:30:1a:c2:08:1b:75:
         9b:88:3b:9c:82:a1:dd:ed:5f:17:bf:a7:47:45:ff:df:fc:60:
         79:7b:35:f9:c2:d4:d7:00:25:6d:42:f1:5b:c2:d6:ad:14:a1:
         68:ca:f9:06:3c:ca:fc:82:c2:6f:19:1e:bb:70:43:7e:89:ab:
         69:77:9e:38
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUPmUcWTZUgcs3Zuz39LY28NfHL08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJCQkVCMUQzRUM3RjJDNDE0OTAzQTBBOTc1RkMxODkz
NEVEMTI0MzAeFw0yNjEwMjIxNDM3MTdaFw0yNzEwMjExNDQyMTdaMDMxMTAvBgNV
BAMTKEQ4RURBNTQwRDQ1MkY3NENGNkJBODU3MzQzM0I3RDYyOEM0QkIxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTSSd8PBfIyr92dQ3XuxIXQ1o
FOQeogv+IErzXXld5eKMU9qhUs3/Qs5yHaTsSMk2RUZv0eDQ0ifL5YvXk3rcd9l8
7IwSxGU5cEgyYhqL3C4oEHnGRDiYa9ymbpJTmz4CrG3kw6UgwPqu3sEUFTx2Ydcz
9mCAWTKoohrRWUOn6NmyKod7kMiwIKZSnASUzuseuqL6cO9iNqpgq05McWxHNdCy
GbubjIXZUV9mtvXBXANeENDkVLpUjQPtmOM24fe7xzK0mlLM0PuCJk2f4/17mZjx
THVU4l07FhW8zHZRY4lM9NlTh1+UzBFGSTp/pibosVg4S/HMNeMFb1STzX83AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU2O2lQNRS90z2uoVzQzt9YoxLsQ8wHwYDVR0j
BBgwFoAUYrvrHT7H8sQUkDoKl1/BiTTtEkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOTlBOURGNTNEQUZERTJGMThDQkQwNTU0MjIzNkE3MTQ5
OTU2MEI2NUE4REI1QkVBNTA5MUY4RDgyMjY0RDhCLzAvNjJCQkVCMUQzRUM3RjJD
NDE0OTAzQTBBOTc1RkMxODkzNEVEMTI0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MkJCRUIxRDNFQzdGMkM0MTQ5
MDNBMEE5NzVGQzE4OTM0RUQxMjQzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTk5QTlERjUzREFGREUyRjE4Q0JEMDU1NDIyMzZBNzE0OTk1NjBCNjVB
OERCNUJFQTUwOTFGOEQ4MjI2NEQ4Qi8wLzMxMzgzNjJlMzAyZTMxMzczNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEzNTMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6ALAwDQYJ
KoZIhvcNAQELBQADggEBACSjUORZrkwcNpqAyOv7v5M+1lDP0DQXK6q++5qzn8zy
qv22PY9DyC4WLy4805wsKi3MOo6dm1WiIlyFcICZzipbN2XbSvm/IC1FMuHpFp4F
7hJxwYs9Qc+ZeELNdGFKNBmiJISEKxDwbFa36ipWYsoxSACdrC1631xADg4rzTfV
6Y0KAMlGMS7wvCIILlLR64yveAQHO8XKCbgm9278/uSbl6oIYlrAu6QrpRVC7eT4
csb7wH1QgeIfvNpO6rzMnzAawggbdZuIO5yCod3tXxe/p0dF/9/8YHl7NfnC1NcA
JW1C8VvC1q0UoWjK+QY8yvyCwm8ZHrtwQ36Jq2l3njg=
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:27:06 2026 by rpki-client