Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28064.roa
File:                     AS28064.roa (raw, json)
Hash identifier:          J0VCnIsUf8UMl4Tlb6MPAy9aRZ9cbykHvhGi2Tl6E38=
Subject key identifier:   C5:79:1D:44:C3:3E:DE:C8:0E:8F:14:0E:5A:9A:5A:0F:AC:7A:B5:FA
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       2F77D5D08BAA3A294833BDE3B1DA6D7896F022
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28064.roa
Signing time:             Tue 02 Jun 2026 17:45:40 +0000
ROA not before:           Tue 02 Jun 2026 17:40:40 +0000
ROA not after:            Tue 01 Jun 2027 17:45:40 +0000
asID:                     28064
IP address blocks:        190.242.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 12:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:77:d5:d0:8b:aa:3a:29:48:33:bd:e3:b1:da:6d:78:96:f0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jun  2 17:40:40 2026 GMT
            Not After : Jun  1 17:45:40 2027 GMT
        Subject: CN=C5791D44C33EDEC80E8F140E5A9A5A0FAC7AB5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:c5:47:e9:6b:16:dd:33:a5:1a:cd:33:de:
                    86:0f:f5:89:f6:ee:fa:45:b3:2b:fe:06:de:2d:bc:
                    0c:77:57:73:92:52:23:df:c4:8c:83:40:d0:e1:d9:
                    1b:d9:a3:76:fe:0f:a2:96:a4:24:6c:af:6f:1e:1b:
                    9f:c7:70:61:14:29:70:a6:c2:c6:b4:b7:ed:21:8d:
                    94:1c:30:c7:eb:26:d3:ac:b6:3f:ce:c0:b0:1e:30:
                    2c:d2:85:2d:c5:2f:25:2f:81:d6:5a:c2:24:ab:2a:
                    4a:20:3b:17:e4:8d:7f:6e:95:f7:4d:d5:db:7d:51:
                    12:a0:7a:1a:63:f6:d0:56:47:4f:60:10:60:86:4e:
                    5a:03:5d:a5:99:e6:6c:56:53:7b:24:d6:cf:13:2a:
                    62:55:69:98:b3:7b:2b:04:24:cb:1f:07:99:2d:a6:
                    24:06:c7:08:24:87:ad:ac:8a:43:c0:5a:9b:50:6f:
                    00:bc:92:36:38:07:b2:a2:8e:f8:36:1d:ac:d0:60:
                    2e:80:24:a9:70:57:05:ce:04:fe:37:75:d9:58:27:
                    c1:ac:4f:c7:a2:c5:ec:b1:21:f1:e5:c6:33:c0:fe:
                    f8:e4:70:60:4b:14:77:bb:7a:d3:3a:e7:f7:16:46:
                    ca:d3:ca:70:d5:8d:40:ba:81:3f:ad:12:94:74:21:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:79:1D:44:C3:3E:DE:C8:0E:8F:14:0E:5A:9A:5A:0F:AC:7A:B5:FA
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28064.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:2f:79:b7:2f:b6:4a:68:37:3e:47:49:c9:6a:76:d6:8c:
         61:b3:48:9e:0f:61:20:80:67:c2:e9:5f:ef:78:9e:95:74:07:
         77:87:86:dc:11:f1:41:b0:f4:42:6b:55:e3:3d:1b:f6:62:0b:
         7c:23:61:0c:38:f6:b7:00:98:8c:20:93:27:ae:71:e2:c7:56:
         45:68:49:79:6e:ee:be:ba:3c:2b:61:24:a3:16:55:18:c7:21:
         d0:ce:06:6f:3a:55:7d:bf:c9:5b:3c:7f:a0:84:6f:01:90:2a:
         86:8c:c1:fa:b0:f6:74:9a:c3:2f:0d:31:8b:40:34:de:77:96:
         64:51:00:cd:8d:81:4e:0e:1e:89:27:5b:0d:95:1a:68:49:f1:
         e1:6c:8c:d6:d0:b8:67:bd:36:1e:dd:30:ea:4e:56:ea:18:b6:
         77:1b:f2:8b:b8:90:fb:70:80:2e:61:6c:c8:77:b2:83:74:02:
         cb:36:1c:da:11:f5:46:1a:c6:02:58:1b:ed:37:ff:2d:f2:05:
         0c:60:c8:d5:1d:59:7e:a6:94:4d:32:6f:3c:1e:87:69:07:59:
         46:76:e9:97:7f:17:7f:c2:a5:2f:6d:29:57:4f:eb:37:f7:80:
         16:77:15:66:ef:8b:44:f2:6a:de:0d:ba:a8:77:91:75:3a:9d:
         7c:40:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:40:40 2026 by rpki-client