Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28512.roa
File:                     AS28512.roa (raw, json)
Hash identifier:          vUJjFJfpQXyhTseyTJyobB9EwUNM2Ag1+c4yRkU96bc=
Subject key identifier:   FF:94:AE:B6:01:5E:DA:28:7E:A7:43:E6:5B:5B:BD:3E:2B:9F:48:F3
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       1B3A3EEDCF4CC051FAE6ACBDB156CB7D54220F51
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28512.roa
Signing time:             Wed 20 May 2026 16:10:00 +0000
ROA not before:           Wed 20 May 2026 16:05:00 +0000
ROA not after:            Wed 19 May 2027 16:10:00 +0000
asID:                     28512
IP address blocks:        187.184.232.0/21 maxlen: 21
                          187.184.240.0/21 maxlen: 21
                          187.185.64.0/24 maxlen: 24
                          187.185.71.0/24 maxlen: 24
                          187.185.157.0/24 maxlen: 24
                          187.185.158.0/23 maxlen: 24
                          187.185.208.0/20 maxlen: 24
                          189.202.96.0/21 maxlen: 22
                          189.202.112.0/20 maxlen: 20
                          189.214.80.0/20 maxlen: 23
                          189.215.64.0/20 maxlen: 20
                          189.215.135.0/24 maxlen: 24
                          189.215.200.0/24 maxlen: 24
                          189.220.42.0/24 maxlen: 24
                          189.221.112.0/20 maxlen: 22
                          189.221.128.0/20 maxlen: 22
                          189.221.144.0/21 maxlen: 22
                          189.221.248.0/21 maxlen: 21
                          200.79.224.0/19 maxlen: 20
                          201.166.16.0/20 maxlen: 21
                          2806:250:20::/48 maxlen: 48
                          2806:250:24::/48 maxlen: 48
                          2806:250:25::/48 maxlen: 48
                          2806:250:26::/48 maxlen: 48
                          2806:250:27::/48 maxlen: 48
                          2806:250:300::/48 maxlen: 48
                          2806:250:301::/48 maxlen: 48
                          2806:250:302::/48 maxlen: 48
                          2806:250:303::/48 maxlen: 48
                          2806:250:600::/40 maxlen: 48
                          2806:250:c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 07:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3a:3e:ed:cf:4c:c0:51:fa:e6:ac:bd:b1:56:cb:7d:54:22:0f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: May 20 16:05:00 2026 GMT
            Not After : May 19 16:10:00 2027 GMT
        Subject: CN=FF94AEB6015EDA287EA743E65B5BBD3E2B9F48F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:d0:ca:c7:50:26:bc:bf:5b:fe:0d:7f:67:
                    0b:ce:62:73:a0:b7:cb:11:1f:4c:5d:be:ca:c6:c3:
                    96:5f:ce:78:f7:bf:10:55:3a:21:24:6a:5b:fc:ac:
                    40:28:97:e2:06:f6:7f:19:4e:dc:98:be:2c:0f:19:
                    d7:a0:09:27:c5:bc:c8:40:03:9c:58:2f:93:bc:29:
                    73:c2:dd:b8:47:79:f7:b6:e0:4d:2f:e5:af:95:d6:
                    48:e3:35:2a:9d:98:3a:16:46:1a:da:48:ad:ca:8e:
                    6a:33:7b:72:29:e2:b1:ce:84:74:80:ee:13:eb:72:
                    55:6c:a9:45:77:9c:6c:a5:5a:28:2d:d9:7e:94:37:
                    ac:6b:55:f0:cd:1b:8d:77:e7:4a:29:7a:b4:df:ab:
                    0c:db:9f:9b:7d:b9:ee:31:b9:54:92:a8:a7:47:28:
                    0d:4e:2d:bf:a4:55:ef:02:d9:a7:6e:30:c7:58:a5:
                    c1:3a:59:a4:b2:97:2b:f7:3f:c3:4d:fc:d5:69:52:
                    85:77:ff:9f:aa:45:5b:c1:fa:3f:e4:bb:51:76:25:
                    f3:6e:00:bf:e1:ff:fb:86:21:5d:da:41:dc:77:29:
                    95:7b:7f:f8:70:39:3a:e8:44:dd:68:70:1d:86:46:
                    28:c0:e8:de:d4:33:e0:81:ec:cb:b6:43:38:5f:79:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:AE:B6:01:5E:DA:28:7E:A7:43:E6:5B:5B:BD:3E:2B:9F:48:F3
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28512.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.184.232.0-187.184.247.255
                  187.185.64.0/24
                  187.185.71.0/24
                  187.185.157.0-187.185.159.255
                  187.185.208.0/20
                  189.202.96.0/21
                  189.202.112.0/20
                  189.214.80.0/20
                  189.215.64.0/20
                  189.215.135.0/24
                  189.215.200.0/24
                  189.220.42.0/24
                  189.221.112.0-189.221.151.255
                  189.221.248.0/21
                  200.79.224.0/19
                  201.166.16.0/20
                IPv6:
                  2806:250:20::/48
                  2806:250:24::/46
                  2806:250:300::/46
                  2806:250:600::/40
                  2806:250:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:2c:8d:b7:49:8d:17:ce:bf:51:57:d7:1e:d7:55:58:44:
         e7:f5:ca:b0:13:d0:f9:d9:8c:80:7c:e6:6e:92:6e:48:d1:e0:
         34:ba:49:5b:c7:ad:71:92:03:cc:9a:31:8e:ab:f8:22:7b:92:
         4e:44:2d:00:ff:68:83:63:cd:57:fd:61:7e:9f:15:d9:f1:11:
         ee:91:82:73:34:eb:3a:25:3c:45:f6:d1:d7:e9:39:6a:a1:6c:
         b7:30:f7:95:48:40:a3:4b:cd:1a:01:0e:50:26:ba:11:d1:b9:
         4c:54:20:c2:20:2a:ff:0b:26:b2:66:aa:42:ea:aa:92:aa:43:
         e1:5d:7f:93:c0:39:cb:05:ac:f4:d1:fa:2d:36:5d:0f:5a:d7:
         39:8d:5c:67:02:4e:d2:6c:2a:4e:50:77:0e:19:0b:41:a9:69:
         8f:9e:06:f5:67:06:11:b4:89:cd:d4:d9:cf:ef:21:6d:2b:22:
         b9:ba:8b:66:dc:ad:b8:ce:5b:9a:60:9e:ae:4b:c9:05:80:7e:
         fd:f9:44:3a:71:9d:6a:38:d0:42:59:49:a4:ee:fb:cf:71:a4:
         33:19:1c:b7:f6:7e:d5:ed:2f:93:5d:10:43:96:cc:81:c5:da:
         8f:12:1a:5c:7c:08:fa:cd:c2:31:20:c3:e5:74:e8:a9:4f:11:
         b2:9d:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:49:46 2026 by rpki-client