Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32342d3234203d3e20323632353839.roa
File:                     3138352e39312e3139322e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          uRjOsytMrhp4xopsbPKgMr3NnCCzvQ1aeYBRGVkTEsg=
Subject key identifier:   C3:C6:81:63:59:40:D3:D0:16:6D:FB:FC:A4:23:EC:CF:8C:EC:F7:CE
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       709CA240D16FD6E38ED31ABA5118BBCAD723A84B
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32342d3234203d3e20323632353839.roa
Signing time:             Sat 29 Aug 2026 02:45:04 +0000
ROA not before:           Sat 29 Aug 2026 02:40:04 +0000
ROA not after:            Sat 28 Aug 2027 02:45:04 +0000
asID:                     262589
IP address blocks:        185.91.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 02:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9c:a2:40:d1:6f:d6:e3:8e:d3:1a:ba:51:18:bb:ca:d7:23:a8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:40:04 2026 GMT
            Not After : Aug 28 02:45:04 2027 GMT
        Subject: CN=C3C681635940D3D0166DFBFCA423ECCF8CECF7CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:c7:95:8f:d0:fa:c6:b1:d9:64:28:c7:4a:
                    05:38:19:5e:2b:78:9e:9c:ad:ad:3e:f9:91:8b:68:
                    54:72:a5:90:41:08:62:a2:5e:21:50:5c:06:ae:90:
                    b4:96:f3:87:8e:08:fb:9d:30:7e:b2:f5:75:7a:bf:
                    31:2c:2a:64:a2:f0:2d:a7:8a:2b:61:78:ce:98:c4:
                    b3:d5:0e:87:2d:d7:6f:37:51:ec:2d:7a:bd:62:24:
                    92:9b:42:76:f1:bf:58:39:d5:c4:e2:80:7a:01:45:
                    0d:1f:ae:3e:99:a1:f3:c2:f3:09:50:7c:ae:2c:b0:
                    16:50:0f:6f:07:11:15:32:35:3b:8b:ce:79:87:dd:
                    18:c8:68:e0:d3:9c:f4:25:c4:2d:64:0d:a5:c9:9f:
                    1d:e2:51:1e:b9:e1:b0:be:13:6c:8c:ab:cc:97:ae:
                    9c:5d:df:e9:21:fc:b7:af:84:e3:15:e2:87:ce:96:
                    09:75:e4:e5:91:9d:2c:e0:73:4a:de:9a:85:b3:3f:
                    da:0b:59:c8:d9:12:33:13:72:7d:fa:f4:a8:a7:15:
                    91:b4:17:8e:67:b8:b5:37:a4:7a:46:85:20:93:33:
                    8c:94:23:1c:a4:35:0f:07:00:13:04:18:16:71:b3:
                    ce:81:dd:6c:c6:5a:98:a5:6c:6f:b9:3f:ef:86:0b:
                    48:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C6:81:63:59:40:D3:D0:16:6D:FB:FC:A4:23:EC:CF:8C:EC:F7:CE
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:72:16:f1:f6:84:69:b2:af:a9:27:06:bc:c2:db:b7:6a:2a:
         ef:8e:f7:07:b9:25:e2:e3:f9:a7:63:8f:05:cf:42:45:08:a5:
         a5:69:86:8a:da:07:ca:72:4b:f3:4c:26:f9:f4:ab:a4:7a:59:
         f9:9c:3c:65:f2:c2:9f:2a:91:f9:91:85:27:0a:96:ca:40:d1:
         4b:f2:a0:ea:7f:03:06:ec:dd:7b:e0:ef:2b:d0:18:3a:2c:ce:
         6f:f8:dd:1d:41:d5:e0:5a:6d:76:27:35:32:e9:b4:52:d3:1a:
         84:e0:7a:01:6e:3c:35:2d:b4:93:a1:0a:24:73:70:4c:7a:92:
         4a:a4:be:00:1b:99:0d:e8:a2:b3:f3:e5:b1:f6:13:e1:2c:c8:
         7b:e7:f8:a6:06:6e:58:8f:84:f4:b2:a4:31:88:44:d4:2c:ce:
         b5:48:2d:18:50:59:1e:7e:f9:57:4a:c8:26:92:80:ab:da:88:
         9a:d8:1b:29:03:12:70:ca:41:25:dc:e4:d8:cb:29:6c:1f:17:
         70:19:ca:0a:fc:46:81:7f:c6:96:e9:a8:17:94:42:a2:41:2d:
         0d:36:da:63:36:c9:d9:08:13:04:23:65:9a:1d:d2:96:4a:6d:
         3d:17:2c:87:b0:aa:96:07:5f:7c:44:a5:a8:dd:69:81:ee:ac:
         82:6a:94:ab
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcJyiQNFv1uOO0xq6URi7ytcjqEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyMjVFRjkwMEE3NDFFRDAwNjcyOTNBNUQ5Mjk3QUUz
REE4Q0U2MDAeFw0yNjA4MjkwMjQwMDRaFw0yNzA4MjgwMjQ1MDRaMDMxMTAvBgNV
BAMTKEMzQzY4MTYzNTk0MEQzRDAxNjZERkJGQ0E0MjNFQ0NGOENFQ0Y3Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01seVj9D6xrHZZCjHSgU4GV4r
eJ6cra0++ZGLaFRypZBBCGKiXiFQXAaukLSW84eOCPudMH6y9XV6vzEsKmSi8C2n
iitheM6YxLPVDoct1283Uewter1iJJKbQnbxv1g51cTigHoBRQ0frj6ZofPC8wlQ
fK4ssBZQD28HERUyNTuLznmH3RjIaODTnPQlxC1kDaXJnx3iUR654bC+E2yMq8yX
rpxd3+kh/LevhOMV4ofOlgl15OWRnSzgc0remoWzP9oLWcjZEjMTcn369KinFZG0
F45nuLU3pHpGhSCTM4yUIxykNQ8HABMEGBZxs86B3WzGWpilbG+5P++GC0j9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUw8aBY1lA09AWbfv8pCPsz4zs984wHwYDVR0j
BBgwFoAUDyJe+QCnQe0AZyk6XZKXrj2ozmAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjUwODg2QjhFRjM2MDBCRTZDRDk5OUM1RUZFNUM2Njk5
NkE1QjBFODAyREMzMzZGM0VGNDUxMzg0ODEzRTU0LzAvMEYyMjVFRjkwMEE3NDFF
RDAwNjcyOTNBNUQ5Mjk3QUUzREE4Q0U2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjIyNUVGOTAwQTc0MUVEMDA2
NzI5M0E1RDkyOTdBRTNEQThDRTYwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI1MDg4NkI4RUYzNjAwQkU2Q0Q5OTlDNUVGRTVDNjY5OTZBNUIwRTgw
MkRDMzM2RjNFRjQ1MTM4NDgxM0U1NC8wLzMxMzgzNTJlMzkzMTJlMzEzOTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVvA
MA0GCSqGSIb3DQEBCwUAA4IBAQAxchbx9oRpsq+pJwa8wtu3airvjvcHuSXi4/mn
Y48Fz0JFCKWlaYaK2gfKckvzTCb59Kukeln5nDxl8sKfKpH5kYUnCpbKQNFL8qDq
fwMG7N174O8r0Bg6LM5v+N0dQdXgWm12JzUy6bRS0xqE4HoBbjw1LbSToQokc3BM
epJKpL4AG5kN6KKz8+Wx9hPhLMh75/imBm5Yj4T0sqQxiETULM61SC0YUFkefvlX
SsgmkoCr2oia2BspAxJwykEl3OTYyylsHxdwGcoK/EaBf8aW6agXlEKiQS0NNtpj
NsnZCBMEI2WaHdKWSm09FyyHsKqWB198RKWo3WmB7qyCapSr
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:10:40 2026 by rpki-client