Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32382e302f32342d3234203d3e20323635373833.roa
File:                     3138312e3139312e32382e302f32342d3234203d3e20323635373833.roa (raw, json)
Hash identifier:          wKmqPJVExT/NOoTgImREc78cmgC4EZwlb3X2a2PDuCE=
Subject key identifier:   35:19:49:28:DE:99:4D:85:2E:FC:23:63:CC:7E:6B:DF:92:EF:A5:CA
Certificate issuer:       /CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
Certificate serial:       479CB906432BD5131B0D3C1FFB03114745D1C737
Authority key identifier: 93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32382e302f32342d3234203d3e20323635373833.roa
Signing time:             Mon 07 Sep 2026 16:34:09 +0000
ROA not before:           Mon 07 Sep 2026 16:29:09 +0000
ROA not after:            Mon 06 Sep 2027 16:34:09 +0000
asID:                     265783
IP address blocks:        181.191.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9c:b9:06:43:2b:d5:13:1b:0d:3c:1f:fb:03:11:47:45:d1:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
        Validity
            Not Before: Sep  7 16:29:09 2026 GMT
            Not After : Sep  6 16:34:09 2027 GMT
        Subject: CN=35194928DE994D852EFC2363CC7E6BDF92EFA5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:18:9f:6c:c2:26:00:2e:1f:8b:0f:2d:c2:
                    45:af:bf:02:b8:99:2a:9c:c2:54:52:f0:89:af:c9:
                    29:d5:5f:d9:d2:6c:52:7e:51:58:96:59:6d:ab:aa:
                    95:32:63:0f:82:a8:30:6b:74:01:c7:cc:d8:36:66:
                    66:78:a5:a4:f7:c3:1c:80:0f:7e:2c:64:b7:e6:29:
                    ec:aa:07:6f:83:8c:cd:75:d3:4c:9a:cc:61:7b:e9:
                    68:c2:84:34:fb:2f:e2:3a:a9:d9:f4:34:43:ff:80:
                    11:d5:6d:89:3b:06:55:8f:0a:9f:41:54:7e:e6:e7:
                    c7:c8:88:ca:6b:27:93:38:b3:fb:b9:fb:8b:68:66:
                    95:e0:72:f0:7a:08:95:96:43:dc:e3:4b:f4:bc:f2:
                    53:e7:a9:18:d8:cd:9f:b6:79:88:f7:72:ec:4b:58:
                    08:91:ec:a1:f9:65:6c:a5:00:ee:68:4a:f9:8c:c2:
                    1e:71:00:3a:8b:4b:0e:98:39:b3:cb:51:10:bb:ae:
                    44:2f:fd:a2:b8:74:6d:ad:a5:85:69:40:37:ca:3e:
                    89:ae:91:da:bb:d3:6c:9e:0b:9d:b0:35:30:c7:05:
                    4e:aa:33:5e:f7:17:e2:2e:27:2b:ce:72:71:04:21:
                    d2:6c:1f:9e:eb:a4:a2:11:b1:55:6c:f5:0e:43:e1:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:49:28:DE:99:4D:85:2E:FC:23:63:CC:7E:6B:DF:92:EF:A5:CA
            X509v3 Authority Key Identifier:
                keyid:93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32382e302f32342d3234203d3e20323635373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:31:7d:c0:4a:f3:1b:57:39:2c:dd:9b:1c:2a:2e:54:d9:c9:
         8b:b1:68:a8:1c:58:fb:02:6c:7d:ad:dd:d3:c9:5e:ad:20:6a:
         b8:c6:57:62:3c:93:19:b1:c7:24:c2:3a:28:42:82:96:45:2b:
         5e:82:b3:fd:67:da:07:f6:76:7b:56:58:36:4c:a2:e9:ae:a5:
         9a:72:f2:61:5d:45:65:42:69:2e:c4:f3:2c:ef:9a:8d:d6:b6:
         39:ce:5e:12:98:6b:87:dc:73:54:8e:01:68:52:c3:bb:24:25:
         26:0c:b4:72:13:21:b3:23:dd:39:47:0e:a0:fd:ac:bd:66:6e:
         a1:c7:65:7b:02:6e:be:c8:c3:75:bb:87:96:95:c1:ae:9a:bf:
         f5:4d:de:52:76:48:66:1d:84:1c:5a:32:14:ca:de:c5:78:a0:
         57:dd:bb:d2:7e:25:97:1e:f6:f5:36:77:54:33:f7:36:da:5f:
         d3:85:d3:5b:0e:00:92:94:d2:ef:df:a6:50:24:26:bf:f0:18:
         51:88:0e:85:52:9a:8c:4a:ee:50:e9:59:b5:ab:a6:48:a6:70:
         e4:33:54:c4:5d:31:43:00:96:52:2f:3f:88:e3:d3:7e:bf:92:
         a9:8a:93:ee:92:19:8e:7e:72:db:72:1e:7c:81:69:b0:6c:32:
         c3:7b:e9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:36:42 2026 by rpki-client