Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa
File:                     AS28094.roa (raw, json)
Hash identifier:          wlupb8b8Dh1stv2DtmS56QAgkg/CI4IbUCbk9nffpvU=
Subject key identifier:   2F:E2:D2:7F:55:DB:98:41:71:6A:E1:FF:D4:E3:59:89:FB:7E:29:B0
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       7EF050853E0D7B92F342A8531F86C680E9ACC550
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa
Signing time:             Tue 01 Jul 2025 17:24:21 +0000
ROA not before:           Tue 01 Jul 2025 17:19:21 +0000
ROA not after:            Tue 30 Jun 2026 17:24:21 +0000
asID:                     28094
IP address blocks:        190.242.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f0:50:85:3e:0d:7b:92:f3:42:a8:53:1f:86:c6:80:e9:ac:c5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul  1 17:19:21 2025 GMT
            Not After : Jun 30 17:24:21 2026 GMT
        Subject: CN=2FE2D27F55DB9841716AE1FFD4E35989FB7E29B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:eb:9c:4e:79:3d:3e:a6:c2:4e:2d:0d:52:
                    4d:5a:80:ed:1f:24:90:e9:28:72:f7:0b:9b:fa:50:
                    cf:85:45:98:f9:de:cb:1e:aa:73:0a:5b:b0:84:a4:
                    19:21:5f:bd:b6:c6:ad:6d:2b:0a:c5:23:9c:7f:34:
                    40:2d:ce:2c:6d:11:ee:91:3d:b3:b5:c6:9c:56:e1:
                    96:92:62:56:a0:64:bc:06:e1:6e:25:42:99:42:ca:
                    aa:47:76:8e:da:81:a1:00:4f:ea:d9:20:6b:b3:14:
                    06:1c:be:28:b5:39:35:8d:56:b2:9e:65:64:d0:6e:
                    b1:35:b1:0b:00:2e:ea:3d:e4:52:bd:56:e0:9c:1f:
                    c3:15:bd:58:e1:7f:54:0a:e3:09:45:fc:2a:9c:40:
                    b6:8a:79:cc:81:15:b8:72:08:d9:aa:e1:ed:fe:83:
                    71:34:82:f7:d5:f1:06:51:05:fe:72:1b:e8:c5:68:
                    cb:8a:c3:58:b7:93:50:f2:a6:d4:d2:a0:c8:43:34:
                    16:ab:76:92:de:ca:c9:a2:1d:76:d2:19:ee:29:e9:
                    51:e2:aa:1b:da:67:05:16:8b:4c:f2:d3:5f:cc:01:
                    73:92:b6:b8:46:b4:1b:b2:e1:7e:81:49:1b:7e:a4:
                    b6:ab:39:fa:81:05:da:2f:91:3b:a0:8c:e9:ae:ad:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E2:D2:7F:55:DB:98:41:71:6A:E1:FF:D4:E3:59:89:FB:7E:29:B0
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:0b:a0:3c:b6:ca:c5:37:5d:cc:9a:38:c5:62:55:d1:23:
         84:ea:85:69:6d:fc:2b:3a:80:ef:c5:3a:ea:b7:bd:2e:8b:3c:
         78:f8:ff:33:65:6c:7a:fa:62:ca:96:0d:e7:59:b5:0a:fe:99:
         0b:9e:df:b4:58:5d:d0:5f:c9:59:dd:c8:0d:91:5f:39:3c:38:
         f8:10:60:63:59:e8:c3:20:6b:a6:52:ce:10:c1:fb:65:7a:15:
         ab:b2:c9:59:69:4b:0a:63:73:fa:60:c1:41:ad:d0:a6:cd:35:
         25:23:77:61:6f:d8:08:c5:4a:00:19:cf:0c:c3:5f:e6:93:29:
         27:30:07:ce:d1:8a:63:33:3f:52:55:20:0e:8f:08:9f:ce:88:
         c3:f2:ad:2a:af:4f:c2:b2:e3:6c:86:d9:f4:3f:83:c5:6a:1f:
         19:bf:74:b5:0a:50:bd:2c:d7:0e:7a:c4:53:dc:95:1d:83:3b:
         ab:23:d3:94:bf:e3:c2:7c:3e:ea:a4:a3:dd:92:e5:63:35:2e:
         a2:6b:89:7b:73:cc:b6:57:dd:82:78:c3:ea:c3:2e:97:8a:3e:
         d4:ad:d0:66:b6:f6:29:41:e8:6f:3c:dc:bc:c4:ba:8a:fd:4b:
         ee:0e:64:8c:80:6b:61:5b:13:8f:84:6f:19:a1:a2:e9:a8:3e:
         91:e5:04:ba
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUfvBQhT4Ne5LzQqhTH4bGgOmsxVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE
QjBEQjc4NDAeFw0yNTA3MDExNzE5MjFaFw0yNjA2MzAxNzI0MjFaMDMxMTAvBgNV
BAMTKDJGRTJEMjdGNTVEQjk4NDE3MTZBRTFGRkQ0RTM1OTg5RkI3RTI5QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5+ucTnk9PqbCTi0NUk1agO0f
JJDpKHL3C5v6UM+FRZj53sseqnMKW7CEpBkhX722xq1tKwrFI5x/NEAtzixtEe6R
PbO1xpxW4ZaSYlagZLwG4W4lQplCyqpHdo7agaEAT+rZIGuzFAYcvii1OTWNVrKe
ZWTQbrE1sQsALuo95FK9VuCcH8MVvVjhf1QK4wlF/CqcQLaKecyBFbhyCNmq4e3+
g3E0gvfV8QZRBf5yG+jFaMuKw1i3k1DyptTSoMhDNBardpLeysmiHXbSGe4p6VHi
qhvaZwUWi0zy01/MAXOStrhGtBuy4X6BSRt+pLarOfqBBdovkTugjOmurd2TAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUL+LSf1XbmEFxauH/1ONZift+KbAwHwYDVR0j
BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD
NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0
NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE
QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVDNUE0MDNEOEU0
QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvQVMyODA5NC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr7yIDAN
BgkqhkiG9w0BAQsFAAOCAQEASPELoDy2ysU3XcyaOMViVdEjhOqFaW38KzqA78U6
6re9Los8ePj/M2VsevpiypYN51m1Cv6ZC57ftFhd0F/JWd3IDZFfOTw4+BBgY1no
wyBrplLOEMH7ZXoVq7LJWWlLCmNz+mDBQa3Qps01JSN3YW/YCMVKABnPDMNf5pMp
JzAHztGKYzM/UlUgDo8In86Iw/KtKq9PwrLjbIbZ9D+DxWofGb90tQpQvSzXDnrE
U9yVHYM7qyPTlL/jwnw+6qSj3ZLlYzUuomuJe3PMtlfdgnjD6sMul4o+1K3QZrb2
KUHobzzcvMS6iv1L7g5kjIBrYVsTj4RvGaGi6ag+keUEug==
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:53:52 2025 by rpki-client