Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa
File:                     AS28414.roa (raw, json)
Hash identifier:          oLB6f9LZPceeei3hsyIsrm72NY62QAbK78fW/F63gaU=
Subject key identifier:   E7:F1:0D:D7:02:03:54:51:41:A4:37:90:B8:36:F0:53:FF:91:5D:CE
Certificate issuer:       /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Certificate serial:       21C381E02C974C998C1379B6A1F07A0FEECA75D6
Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa
Signing time:             Thu 09 Oct 2025 02:49:51 +0000
ROA not before:           Thu 09 Oct 2025 02:44:51 +0000
ROA not after:            Thu 08 Oct 2026 02:49:51 +0000
asID:                     28414
IP address blocks:        187.188.110.0/24 maxlen: 24
                          187.251.197.0/24 maxlen: 24
                          187.251.236.0/24 maxlen: 24
                          189.203.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 08:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c3:81:e0:2c:97:4c:99:8c:13:79:b6:a1:f0:7a:0f:ee:ca:75:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
        Validity
            Not Before: Oct  9 02:44:51 2025 GMT
            Not After : Oct  8 02:49:51 2026 GMT
        Subject: CN=E7F10DD70203545141A43790B836F053FF915DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9b:d1:0e:51:52:bd:85:82:47:5d:6e:dc:ac:
                    ab:71:67:57:09:b9:94:e0:a9:67:d6:3f:6d:4b:87:
                    28:51:20:1f:bc:fb:97:7f:20:62:a8:45:56:8f:f5:
                    7e:ab:99:c4:f9:ce:ec:f1:4f:de:15:73:ee:03:73:
                    94:bb:56:37:2a:50:5e:9f:f6:07:bf:be:2d:f6:00:
                    b7:00:3b:9b:ba:bc:37:79:84:9d:32:ff:83:94:a3:
                    27:a5:1d:98:c6:c6:dc:2e:f8:bb:2a:96:02:c6:23:
                    5c:62:ce:a7:25:bc:44:e6:a7:82:76:53:2b:06:81:
                    b1:cf:e7:2c:24:0f:2f:18:96:cf:c7:e4:7a:74:94:
                    87:b8:fa:17:ae:68:9e:e3:9d:87:6d:ec:db:1c:9f:
                    28:5b:47:2c:a8:35:ce:24:e9:e0:ee:09:ef:9d:70:
                    a9:42:46:ce:9f:69:19:3a:89:a4:21:09:40:42:ab:
                    a7:29:e6:e7:3e:a0:19:d0:cb:9f:b2:89:4d:ce:b6:
                    f9:4a:2e:50:bd:13:23:60:98:e5:dc:91:25:11:a0:
                    c8:09:db:69:73:6e:5d:24:af:82:e6:96:95:ae:bd:
                    19:0b:a5:36:3c:e4:0a:de:5f:63:41:40:3c:2b:75:
                    09:d1:73:26:74:68:92:64:0e:31:77:45:e1:a4:ca:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F1:0D:D7:02:03:54:51:41:A4:37:90:B8:36:F0:53:FF:91:5D:CE
            X509v3 Authority Key Identifier:
                keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.110.0/24
                  187.251.197.0/24
                  187.251.236.0/24
                  189.203.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:9f:50:df:50:b0:db:bb:5c:43:d9:63:a8:46:b4:38:b6:
         70:2b:30:9d:ac:c3:1c:32:72:68:c0:7d:2c:f3:93:0a:48:f1:
         08:46:3b:a5:bc:4d:bc:bd:cc:47:6e:da:80:84:ff:03:d9:8a:
         9b:3a:67:4e:04:73:b9:b4:24:fc:ff:35:c2:56:ef:3a:05:23:
         cb:9c:c8:1d:a2:38:8c:cc:2a:b2:40:5e:71:69:58:e5:6d:1d:
         ba:aa:a7:41:7f:e8:6a:5c:d2:3d:16:c5:3e:62:84:0a:b8:fc:
         11:4a:57:d1:74:a9:fc:9f:0e:9e:08:c9:d5:f1:e6:7d:ec:e0:
         51:40:6d:d0:ad:67:bc:fd:c0:11:9b:60:1b:ab:52:01:5f:08:
         5b:7f:7d:8f:29:2e:11:42:94:3d:05:6a:1f:68:ad:6f:22:0d:
         1b:32:8f:95:39:0e:58:d4:a7:23:97:03:f7:01:f8:56:66:fe:
         9c:f6:c9:a0:bd:b5:b3:f5:56:26:eb:5a:71:d9:82:ed:73:18:
         1c:49:1b:00:3f:2d:ee:2e:34:ca:dd:15:b8:0d:b3:58:fe:36:
         59:ff:7d:a9:0e:92:1a:80:6e:93:18:fa:84:98:2b:53:b2:9f:
         b8:58:3a:b2:b3:db:2f:20:25:1a:45:9d:fa:3a:6b:a6:dc:4a:
         22:28:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:12 2025 by rpki-client