Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa
File:                     AS28094.roa (raw, json)
Hash identifier:          xOXp3HE8cIvWZkqajf+ZphkV3nBo+wcK3j01x1MHis8=
Subject key identifier:   86:A8:F0:17:68:07:2A:60:C1:C7:A1:4A:C1:5E:10:7C:A8:2F:C6:57
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       2F2AFAD51394968B9B648704AE15C8810A146733
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa
Signing time:             Tue 02 Jun 2026 17:45:40 +0000
ROA not before:           Tue 02 Jun 2026 17:40:40 +0000
ROA not after:            Tue 01 Jun 2027 17:45:40 +0000
asID:                     28094
IP address blocks:        190.242.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 12:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2a:fa:d5:13:94:96:8b:9b:64:87:04:ae:15:c8:81:0a:14:67:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jun  2 17:40:40 2026 GMT
            Not After : Jun  1 17:45:40 2027 GMT
        Subject: CN=86A8F01768072A60C1C7A14AC15E107CA82FC657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:ff:ca:ea:fd:c4:74:4e:f1:19:96:3f:a9:
                    43:0b:e3:6b:76:4d:05:a6:82:8a:47:8c:7a:99:d3:
                    37:70:8e:bb:fa:66:40:92:ed:09:43:68:88:25:2b:
                    78:32:09:f6:1b:a4:df:03:e4:7d:b8:be:7a:3b:4d:
                    37:56:a6:4a:9f:e9:0e:b4:12:ca:2f:42:d2:a1:f2:
                    f2:90:31:e4:96:bd:bb:8c:bb:a3:7e:1d:35:d0:61:
                    55:d5:ca:19:10:9e:ac:41:60:80:25:8c:f4:93:17:
                    b2:34:d4:15:58:62:31:8e:da:c4:72:0f:2b:25:dd:
                    d1:84:d6:a4:5c:c2:32:ab:fc:00:c5:ac:bb:73:33:
                    6d:9e:6f:74:ea:e5:de:db:e9:4b:34:4a:dd:e8:9c:
                    a7:3a:92:6e:ec:f2:81:90:e2:f0:9f:35:f0:8e:38:
                    6a:3d:cf:0b:6c:91:aa:3d:3d:ef:ec:10:ea:0b:77:
                    47:91:6d:3d:46:d4:b2:db:fb:33:99:9b:a6:0b:5d:
                    21:4b:54:b7:54:db:ed:14:9b:30:c8:b8:3d:72:89:
                    2b:b2:63:38:f2:c4:9c:ee:8e:4b:7c:ef:ce:04:aa:
                    62:f6:fc:c5:a5:69:45:8a:0e:0f:b8:bd:ac:cc:49:
                    92:e8:21:ab:b0:14:8b:ed:5f:8f:81:a3:bd:b5:6f:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:F0:17:68:07:2A:60:C1:C7:A1:4A:C1:5E:10:7C:A8:2F:C6:57
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:73:06:47:a9:28:f9:17:14:31:45:ec:3a:37:01:16:a0:e3:
         1b:e8:89:ab:d4:65:ed:04:04:a0:12:91:33:78:ab:6a:4a:3c:
         b5:38:35:e9:d7:bc:3e:b3:95:81:95:2c:72:8b:2b:03:1d:5a:
         86:fb:fb:d3:fc:29:64:6d:7f:a2:dc:f6:34:6f:bb:69:9e:c9:
         06:69:49:05:4e:e2:a1:8a:2d:07:91:93:a4:c5:78:d4:ab:5a:
         10:5b:5f:40:e0:8e:3d:2c:1f:4e:b8:fb:3c:e5:24:c3:25:d9:
         1f:b4:1f:00:30:8c:9c:1b:99:a6:56:8d:83:5c:07:65:64:52:
         65:e9:b1:06:a1:4d:49:8f:6f:0a:42:28:bf:2f:41:92:f3:a9:
         56:ed:44:12:8e:b8:b8:32:4a:be:9f:bc:e7:01:1b:e4:98:5f:
         10:e8:fa:6a:0b:20:80:9d:eb:61:71:97:25:02:6a:83:46:6a:
         a7:43:8d:66:a7:e2:aa:f6:62:6f:9b:a4:9d:dd:95:27:b3:91:
         67:89:cd:83:28:11:90:24:ec:9b:84:d9:b0:73:da:f1:fa:27:
         65:5a:fe:56:c0:0b:9e:f0:8d:c7:41:5f:8d:ed:e6:b5:26:6d:
         76:65:97:a2:2b:a1:87:2d:73:44:26:be:f2:1d:76:50:8b:80:
         1b:00:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:40:38 2026 by rpki-client