Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/3138392e38352e33382e302f32342d3234203d3e203332363133.roa
File:                     3138392e38352e33382e302f32342d3234203d3e203332363133.roa (raw, json)
Hash identifier:          zkbo5Jxjq6LTzV0U1AE2gSx4sj4+jf9KxNqicT+NCWY=
Subject key identifier:   92:D0:EC:41:CB:C0:2E:6E:5A:EB:A3:BF:06:69:DA:BD:36:55:5F:E8
Certificate issuer:       /CN=AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0
Certificate serial:       0D3271BD51C0DF9989CB1B2D9FDBB33DAE3E7876
Authority key identifier: AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/3138392e38352e33382e302f32342d3234203d3e203332363133.roa
Signing time:             Fri 11 Sep 2026 14:30:00 +0000
ROA not before:           Fri 11 Sep 2026 14:25:00 +0000
ROA not after:            Fri 10 Sep 2027 14:30:00 +0000
asID:                     32613
IP address blocks:        189.85.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:32:71:bd:51:c0:df:99:89:cb:1b:2d:9f:db:b3:3d:ae:3e:78:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0
        Validity
            Not Before: Sep 11 14:25:00 2026 GMT
            Not After : Sep 10 14:30:00 2027 GMT
        Subject: CN=92D0EC41CBC02E6E5AEBA3BF0669DABD36555FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:25:88:4a:35:11:fd:ab:f4:b3:6b:80:3b:
                    16:04:d5:1a:d5:5d:20:53:e3:a5:4d:0a:11:c0:f8:
                    4f:ff:cd:ca:fd:81:04:cc:aa:3d:41:ba:c4:38:9c:
                    49:a0:c6:6b:21:06:26:43:c0:8d:b7:d7:53:59:b4:
                    46:80:4e:ba:09:49:a1:30:4d:9f:30:08:6a:a9:d1:
                    2e:92:92:0c:dc:9f:6b:de:11:c7:c3:43:f7:83:6f:
                    be:1d:53:cb:40:aa:a2:c4:52:61:14:2e:ad:55:88:
                    08:48:05:c1:cc:e9:ee:e9:19:00:8c:6c:28:b6:e9:
                    36:0a:40:08:ad:a3:e0:0f:3d:31:a4:9d:a1:8b:48:
                    5b:2c:91:79:47:64:43:60:57:5f:3c:47:09:72:77:
                    df:02:df:93:75:c2:73:73:52:ac:85:20:3d:3e:e3:
                    f9:22:aa:ec:7b:02:c1:89:23:0a:5c:4f:01:36:2a:
                    a5:1e:9d:5e:44:aa:19:37:26:32:31:4d:90:09:90:
                    ea:1f:2b:13:f2:72:8b:81:bc:8b:f3:ef:a8:f4:b8:
                    c4:24:42:ed:74:7f:01:3a:16:0b:b7:9d:84:1b:bc:
                    3c:45:a7:32:e7:53:41:96:ed:dc:f2:aa:9b:83:7d:
                    f7:4d:8a:b9:cb:d7:fc:aa:b7:1c:a4:b1:c6:2a:6a:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D0:EC:41:CB:C0:2E:6E:5A:EB:A3:BF:06:69:DA:BD:36:55:5F:E8
            X509v3 Authority Key Identifier:
                keyid:AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/3138392e38352e33382e302f32342d3234203d3e203332363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:c1:73:0e:9c:9f:5d:0c:66:09:68:1f:da:e6:af:cc:bb:
         1e:a1:d3:7f:88:b6:9d:48:fd:33:cd:44:01:dd:d9:d4:55:19:
         a8:65:48:39:72:ab:ff:e4:14:00:c3:ca:29:42:38:be:da:87:
         43:65:1e:8d:d1:29:3a:59:d6:7a:94:57:08:e5:3e:5f:77:fc:
         3c:a3:31:2e:30:c7:83:8d:8a:ed:1e:25:4a:ce:2d:9d:7e:90:
         0a:b1:93:d3:a4:05:f1:96:8a:8d:45:cd:2c:31:55:47:6d:3c:
         e5:31:db:de:75:ca:3b:a2:aa:d7:61:12:c7:f7:65:cf:d8:19:
         f6:c3:5d:15:34:38:e4:2b:e1:b0:be:8a:17:67:d5:ae:2c:e3:
         59:e4:ae:8d:ae:32:ea:59:22:66:22:94:98:f0:30:5f:48:82:
         b2:e9:b1:a5:42:c6:9f:f7:4c:84:7b:c2:df:e7:98:37:eb:fe:
         af:fc:23:11:e7:f4:69:ad:a6:ef:c2:7a:ea:06:a9:df:38:91:
         0e:f3:06:ee:23:15:fd:79:4a:3e:3f:d7:dc:99:a4:8b:be:c5:
         85:63:b6:1a:29:67:fb:da:ed:76:02:82:d9:f1:42:f5:85:a6:
         75:48:ff:b8:03:ad:64:6a:50:9d:e2:69:40:47:9c:04:a7:ba:
         06:56:cd:44
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDTJxvVHA35mJyxstn9uzPa4+eHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY5Q0Y4ODJDMDcyNUI5NjEwN0RFMzNCQzVBQ0NEOTlC
RTJERTFCMDAeFw0yNjA5MTExNDI1MDBaFw0yNzA5MTAxNDMwMDBaMDMxMTAvBgNV
BAMTKDkyRDBFQzQxQ0JDMDJFNkU1QUVCQTNCRjA2NjlEQUJEMzY1NTVGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwSWISjUR/av0s2uAOxYE1RrV
XSBT46VNChHA+E//zcr9gQTMqj1BusQ4nEmgxmshBiZDwI2311NZtEaATroJSaEw
TZ8wCGqp0S6Skgzcn2veEcfDQ/eDb74dU8tAqqLEUmEULq1ViAhIBcHM6e7pGQCM
bCi26TYKQAito+APPTGknaGLSFsskXlHZENgV188Rwlyd98C35N1wnNzUqyFID0+
4/kiqux7AsGJIwpcTwE2KqUenV5Eqhk3JjIxTZAJkOofKxPycouBvIvz76j0uMQk
Qu10fwE6Fgu3nYQbvDxFpzLnU0GW7dzyqpuDffdNirnL1/yqtxykscYqankhAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUktDsQcvALm5a66O/BmnavTZVX+gwHwYDVR0j
BBgwFoAUr5z4gsByW5YQfeM7xazNmb4t4bAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNTkwNzc5QTE5MUYxNjYyNzIzQjM3NTEyMTczMjA2MDI1
NzM4N0Y3QTA2NEMyRTYzQ0ExODgyNTFCQUM3QURBLzAvQUY5Q0Y4ODJDMDcyNUI5
NjEwN0RFMzNCQzVBQ0NEOTlCRTJERTFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjlDRjg4MkMwNzI1Qjk2MTA3
REUzM0JDNUFDQ0Q5OUJFMkRFMUIwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTU5MDc3OUExOTFGMTY2MjcyM0IzNzUxMjE3MzIwNjAyNTczODdGN0Ew
NjRDMkU2M0NBMTg4MjUxQkFDN0FEQS8wLzMxMzgzOTJlMzgzNTJlMzMzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC9VSYwDQYJ
KoZIhvcNAQELBQADggEBABr5wXMOnJ9dDGYJaB/a5q/Mux6h03+Itp1I/TPNRAHd
2dRVGahlSDlyq//kFADDyilCOL7ah0NlHo3RKTpZ1nqUVwjlPl93/DyjMS4wx4ON
iu0eJUrOLZ1+kAqxk9OkBfGWio1FzSwxVUdtPOUx2951yjuiqtdhEsf3Zc/YGfbD
XRU0OOQr4bC+ihdn1a4s41nkro2uMupZImYilJjwMF9IgrLpsaVCxp/3TIR7wt/n
mDfr/q/8IxHn9Gmtpu/CeuoGqd84kQ7zBu4jFf15Sj4/19yZpIu+xYVjthopZ/va
7XYCgtnxQvWFpnVI/7gDrWRqUJ3iaUBHnASnugZWzUQ=
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:04:28 2026 by rpki-client