Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32332d3233203d3e20323632353839.roa
File:                     3138352e39312e3139322e302f32332d3233203d3e20323632353839.roa (raw, json)
Hash identifier:          Rf6qZayKL2N4dM66+Hl8rtv3zrfkux9nBlpNr74FDs4=
Subject key identifier:   F7:40:FA:16:AD:DE:81:9B:D5:D6:B5:7C:D4:30:CA:5C:F8:29:AB:9A
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       1FFD11D76D8203CBFA6BAA3F9BC11B4BFC831B9D
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32332d3233203d3e20323632353839.roa
Signing time:             Sat 29 Aug 2026 02:45:02 +0000
ROA not before:           Sat 29 Aug 2026 02:40:02 +0000
ROA not after:            Sat 28 Aug 2027 02:45:02 +0000
asID:                     262589
IP address blocks:        185.91.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fd:11:d7:6d:82:03:cb:fa:6b:aa:3f:9b:c1:1b:4b:fc:83:1b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:40:02 2026 GMT
            Not After : Aug 28 02:45:02 2027 GMT
        Subject: CN=F740FA16ADDE819BD5D6B57CD430CA5CF829AB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e6:bc:ae:97:69:36:05:24:12:63:4b:89:d3:
                    52:e7:55:7e:15:94:2f:85:7e:c5:8c:70:5f:df:1d:
                    17:a8:ad:db:ff:a8:9b:04:e3:25:55:08:8a:30:f6:
                    fd:57:a9:a7:1e:f8:23:df:fd:9b:16:64:ae:20:f4:
                    e0:dd:aa:0e:2e:be:e1:fa:ef:2d:14:51:03:82:47:
                    05:04:50:cd:f6:0b:4d:93:be:27:95:8d:d3:4c:81:
                    10:9c:e2:85:87:b1:ff:ec:05:dc:35:22:c2:bd:af:
                    0a:ec:4b:f5:16:c8:90:72:dc:5d:f6:36:a6:88:2d:
                    ec:0f:16:9e:d7:6a:11:aa:ff:bf:b4:22:50:60:aa:
                    9d:a7:71:76:85:5f:ed:11:e7:fb:42:75:3e:93:b5:
                    7a:13:c9:f4:c2:cf:90:33:a6:db:c0:e9:ff:e1:45:
                    1a:38:18:7d:5e:44:66:fb:6e:ca:3f:0a:7c:4c:69:
                    c8:5a:d4:be:5d:55:4c:e8:0e:5e:5d:3e:9c:67:62:
                    7f:77:8d:78:9d:7a:1c:3d:13:90:3b:ea:2b:46:00:
                    cd:e6:e2:a1:d3:41:c4:05:ce:bb:01:99:24:a6:01:
                    ee:7f:44:70:7b:58:c9:8a:36:4a:e8:b3:8c:2b:06:
                    81:19:f5:61:8a:44:ce:79:76:98:6c:c8:3a:5e:a2:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:FA:16:AD:DE:81:9B:D5:D6:B5:7C:D4:30:CA:5C:F8:29:AB:9A
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32332d3233203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:3e:40:c4:57:d6:c4:a4:fa:c6:83:57:a7:05:10:38:c9:eb:
         cb:b6:11:5f:2a:20:0f:e8:ed:2d:c4:e1:ef:0e:6c:a0:7c:6a:
         0d:77:33:06:1a:b6:05:22:21:2c:6b:46:d0:ef:bd:f2:f7:11:
         51:c6:f3:a1:bd:d0:6f:97:b8:c9:93:64:f1:92:59:b7:62:79:
         d7:51:ce:62:cb:3b:36:aa:ac:67:b7:52:50:0f:8d:d2:c0:e1:
         3c:bf:8e:7f:8f:44:e5:c1:d7:5d:ce:c0:bd:84:3e:ef:20:54:
         19:5c:6c:88:77:81:e0:03:2d:b1:a2:be:98:98:82:48:ec:96:
         49:2d:8b:0a:71:08:6b:cb:39:a8:32:6d:c6:9f:a6:d6:8b:7d:
         f7:98:12:72:be:56:26:5f:36:09:95:a8:e9:a3:35:f9:8c:23:
         9e:78:5f:4a:0b:01:62:d6:17:4b:45:59:b7:0f:6d:19:b3:a6:
         4e:82:a4:9a:9a:09:29:d8:83:d6:67:78:67:74:dc:50:49:1b:
         b3:22:d6:b3:d5:7b:40:62:87:bb:de:f3:bd:c8:67:87:8d:7b:
         56:5c:5f:d1:54:b3:2c:b1:d0:f8:a1:30:05:15:16:1e:29:67:
         a7:d2:91:b7:f2:d6:2f:72:d3:07:b0:1f:bb:67:e1:38:36:0f:
         b2:44:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:45 2026 by rpki-client