Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa
File:                     AS28414.roa (raw, json)
Hash identifier:          rOU0mQOi/2elHsPXJcG80hVyfwscmcNmlJJeUC6o8fs=
Subject key identifier:   5A:CF:B1:06:32:6F:3B:76:EA:EB:CD:0C:2A:A9:15:FF:9C:B7:9A:DD
Certificate issuer:       /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Certificate serial:       6D15B9962E36535F3554E22AC6495F5CCEBF2E53
Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa
Signing time:             Thu 10 Sep 2026 03:34:51 +0000
ROA not before:           Thu 10 Sep 2026 03:29:51 +0000
ROA not after:            Thu 09 Sep 2027 03:34:51 +0000
asID:                     28414
IP address blocks:        187.188.110.0/24 maxlen: 24
                          187.251.197.0/24 maxlen: 24
                          187.251.236.0/24 maxlen: 24
                          189.203.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Oct 2026 19:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:15:b9:96:2e:36:53:5f:35:54:e2:2a:c6:49:5f:5c:ce:bf:2e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
        Validity
            Not Before: Sep 10 03:29:51 2026 GMT
            Not After : Sep  9 03:34:51 2027 GMT
        Subject: CN=5ACFB106326F3B76EAEBCD0C2AA915FF9CB79ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:7a:7e:29:4d:1c:15:23:4d:72:8d:52:ad:
                    7e:69:ad:08:b0:15:ee:0a:43:4b:21:ff:87:ba:ff:
                    26:31:86:67:47:f0:fb:98:00:88:66:e9:7b:62:df:
                    3c:3c:7c:64:44:f8:2b:34:62:d0:cf:88:43:52:d0:
                    b1:bc:6e:56:34:f1:e0:f9:29:ce:ab:92:f1:4b:3e:
                    37:07:e0:18:b7:9d:a6:59:1b:35:14:7e:6a:9a:4f:
                    9b:0f:bb:5a:e8:90:19:b3:3b:7a:20:e3:9f:15:4a:
                    70:be:b3:5a:fe:09:7d:76:7c:1d:1a:83:34:66:3f:
                    f2:cc:5a:2a:4f:15:00:7b:92:3f:8c:82:1a:a1:ff:
                    09:36:9d:02:3e:eb:76:b3:c7:69:a4:01:df:6a:02:
                    68:61:97:59:40:53:1e:66:e2:48:8e:61:14:42:80:
                    cb:60:ff:03:0b:9a:09:df:9c:39:99:4b:28:46:b0:
                    f4:a0:b6:7f:b1:1e:f2:2b:8b:5d:5e:6e:7d:2b:aa:
                    96:4f:8f:75:ed:a4:fa:11:88:cc:60:73:8b:cd:72:
                    bb:72:ca:74:a5:c6:cc:36:df:2c:4a:de:5c:4b:90:
                    ab:ff:fb:1b:4f:dc:23:06:ef:ea:b2:42:37:75:45:
                    8a:5f:45:94:e1:be:e0:d2:39:3b:e6:52:3f:1c:8b:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:B1:06:32:6F:3B:76:EA:EB:CD:0C:2A:A9:15:FF:9C:B7:9A:DD
            X509v3 Authority Key Identifier:
                keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.110.0/24
                  187.251.197.0/24
                  187.251.236.0/24
                  189.203.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:0a:0c:0d:b8:24:3a:c7:70:25:d8:ee:b0:17:13:bf:a5:
         c9:94:d1:56:f1:31:59:38:63:b8:d7:cb:7f:ce:14:9f:c7:7b:
         b2:ed:cb:81:c8:49:fc:ec:25:97:06:a6:ae:4b:28:80:e1:04:
         93:3e:b9:30:cd:cd:bd:fb:da:85:e5:44:f8:9a:09:ed:e7:2b:
         f1:98:b3:42:5b:1f:28:8e:b0:4f:ae:e6:41:84:da:23:ac:fc:
         2e:eb:f5:83:d8:39:e7:a2:44:9c:7e:d5:3d:9b:93:89:15:9f:
         7b:05:63:94:75:12:0d:7f:54:1d:28:f3:45:85:b4:55:f7:06:
         df:35:fa:a5:72:f0:ad:fc:1c:88:fd:fa:52:8f:c2:7d:04:38:
         1c:f3:9a:08:e3:d3:c3:87:2f:87:22:56:65:c5:65:56:ea:ba:
         b3:43:e9:6f:82:83:32:a5:35:53:df:04:6f:b0:60:83:50:df:
         60:37:5c:6b:02:4d:09:16:f4:76:6c:22:57:bc:6c:3a:88:9c:
         24:85:60:98:d8:ad:1c:86:87:85:e8:22:af:15:6f:0e:51:1f:
         56:b9:87:ca:5d:97:a1:17:c3:3e:b3:e1:a2:18:d9:47:f6:e4:
         c3:d6:13:52:c6:8e:65:ce:5a:0a:14:49:ec:03:6b:5a:31:7d:
         e6:43:4a:47
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIUbRW5li42U181VOIqxklfXM6/LlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1
OEFBMEJGRjAeFw0yNjA5MTAwMzI5NTFaFw0yNzA5MDkwMzM0NTFaMDMxMTAvBgNV
BAMTKDVBQ0ZCMTA2MzI2RjNCNzZFQUVCQ0QwQzJBQTkxNUZGOUNCNzlBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFI3p+KU0cFSNNco1SrX5prQiw
Fe4KQ0sh/4e6/yYxhmdH8PuYAIhm6Xti3zw8fGRE+Cs0YtDPiENS0LG8blY08eD5
Kc6rkvFLPjcH4Bi3naZZGzUUfmqaT5sPu1rokBmzO3og458VSnC+s1r+CX12fB0a
gzRmP/LMWipPFQB7kj+Mghqh/wk2nQI+63azx2mkAd9qAmhhl1lAUx5m4kiOYRRC
gMtg/wMLmgnfnDmZSyhGsPSgtn+xHvIri11ebn0rqpZPj3XtpPoRiMxgc4vNcrty
ynSlxsw23yxK3lxLkKv/+xtP3CMG7+qyQjd1RYpfRZThvuDSOTvmUj8cizT3AgMB
AAGjggKqMIICpjAdBgNVHQ4EFgQUWs+xBjJvO3bq680MKqkV/5y3mt0wHwYDVR0j
BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0
OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy
NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3
Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0OTc2MjFEMjMx
MDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvQVMyODQxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALu8bgME
ALv7xQMEALv77AMEAL3LGDANBgkqhkiG9w0BAQsFAAOCAQEATyoKDA24JDrHcCXY
7rAXE7+lyZTRVvExWThjuNfLf84Un8d7su3LgchJ/OwllwamrksogOEEkz65MM3N
vfvaheVE+JoJ7ecr8ZizQlsfKI6wT67mQYTaI6z8Luv1g9g556JEnH7VPZuTiRWf
ewVjlHUSDX9UHSjzRYW0VfcG3zX6pXLwrfwciP36Uo/CfQQ4HPOaCOPTw4cvhyJW
ZcVlVuq6s0Ppb4KDMqU1U98Eb7Bgg1DfYDdcawJNCRb0dmwiV7xsOoicJIVgmNit
HIaHhegirxVvDlEfVrmHyl2XoRfDPrPhohjZR/bkw9YTUsaOZc5aChRJ7ANrWjF9
5kNKRw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 02:34:00 2026 by rpki-client