Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32382e302f32322d3232203d3e20323635373833.roa
File:                     3138312e3139312e32382e302f32322d3232203d3e20323635373833.roa (raw, json)
Hash identifier:          rbaxOC5BQ/rVhN5Te5q+Y2/VEUODo1YtSww24a/HcPc=
Subject key identifier:   E7:F4:C5:0F:9F:44:BD:A9:A1:E2:41:50:6B:75:5C:3B:DE:6A:2D:97
Certificate issuer:       /CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
Certificate serial:       086BB90F5165AD3A3F79A3D97A4CE34A5349B7FD
Authority key identifier: 93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32382e302f32322d3232203d3e20323635373833.roa
Signing time:             Mon 06 Oct 2025 15:55:01 +0000
ROA not before:           Mon 06 Oct 2025 15:50:01 +0000
ROA not after:            Mon 05 Oct 2026 15:55:01 +0000
asID:                     265783
IP address blocks:        181.191.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 12:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6b:b9:0f:51:65:ad:3a:3f:79:a3:d9:7a:4c:e3:4a:53:49:b7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
        Validity
            Not Before: Oct  6 15:50:01 2025 GMT
            Not After : Oct  5 15:55:01 2026 GMT
        Subject: CN=E7F4C50F9F44BDA9A1E241506B755C3BDE6A2D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:d1:b3:c7:e4:be:17:d8:0e:7b:b6:d7:9a:
                    88:40:b1:2e:d4:28:cd:0a:cc:1e:46:e5:25:c7:ed:
                    a6:0c:36:47:9a:65:17:1d:2d:5f:21:93:8c:05:c6:
                    13:6f:c1:bc:25:dc:f2:32:c2:cb:ac:26:b7:c2:02:
                    9c:c7:b5:bb:ef:3a:48:cb:28:96:9e:d6:8a:15:a0:
                    33:77:8c:48:e1:df:5d:2e:f1:ac:0a:d2:8c:6c:bf:
                    87:54:4d:6c:1b:d1:aa:cc:99:93:d7:0c:c5:68:79:
                    9d:4f:7c:ff:61:db:b5:a8:42:6d:f4:9d:ef:48:21:
                    22:cf:3c:4a:6a:54:96:75:03:e9:bc:0e:c5:9c:07:
                    72:2b:9b:a5:c4:a9:6d:5d:b8:8d:ae:76:b4:e6:cc:
                    1d:fa:b9:ae:bd:ac:54:99:f7:c6:d2:6c:90:54:bf:
                    6e:06:e3:eb:09:cd:f1:de:94:aa:f3:d2:53:51:a1:
                    23:34:c8:4d:2e:49:82:af:71:da:21:10:75:e4:f6:
                    ee:e6:50:2a:48:27:48:62:5c:81:10:8c:e0:dd:21:
                    3f:7a:de:e0:60:ba:f6:d5:71:9a:49:4f:10:18:4c:
                    12:a9:ec:8b:63:0c:9d:76:9f:46:fa:8b:95:a1:47:
                    2b:ac:03:71:3b:fe:54:a3:bc:f8:56:fa:ea:8d:98:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:C5:0F:9F:44:BD:A9:A1:E2:41:50:6B:75:5C:3B:DE:6A:2D:97
            X509v3 Authority Key Identifier:
                keyid:93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32382e302f32322d3232203d3e20323635373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:21:20:de:d4:8c:ce:58:b2:b7:62:aa:83:c6:7a:16:0f:97:
         93:7c:1b:46:6d:ba:87:51:73:a3:ca:4e:b8:dc:2b:fa:27:93:
         aa:2a:26:b1:92:96:d6:6a:b8:6b:e9:4c:02:f7:26:5b:ed:a9:
         7d:67:d7:49:85:73:4e:78:e0:35:ef:f3:e7:2d:46:42:3e:d1:
         73:d2:d7:bc:57:4a:c1:57:89:8c:80:a6:4d:b4:3b:4f:98:85:
         5b:d1:5f:79:2e:de:ec:fd:29:b0:2a:b9:bb:a2:2b:1f:b6:e1:
         21:91:4c:5a:ec:46:75:ec:27:60:86:89:06:3c:0c:ca:e7:1d:
         77:5b:df:93:fd:ab:0b:a6:a0:40:e0:24:bf:e7:d6:b4:1e:e7:
         e7:be:42:54:89:62:5c:e9:28:e0:fe:89:cb:bf:66:75:91:7f:
         73:cc:7f:4a:07:de:fa:5a:a7:78:7e:7d:3b:41:50:f3:51:70:
         2f:c4:e0:a9:47:d9:40:95:df:b5:f8:6e:6d:e2:5e:d6:7b:be:
         d2:2a:da:b0:0e:3b:23:94:1c:35:95:be:8f:41:fc:a9:b2:b1:
         33:12:5f:2b:ba:b6:b2:33:74:98:ee:c4:46:32:1b:51:89:2b:
         71:41:12:4e:a4:db:9c:1e:0c:0e:f7:a2:12:da:62:d2:60:6d:
         ad:2c:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:02 2025 by rpki-client