Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28538.roa
File:                     AS28538.roa (raw, json)
Hash identifier:          T8hMBDKXTj4reSr8fRcxlq1pkw8pRdhNXkAuYFB6hQs=
Subject key identifier:   E5:1F:6C:E9:6F:E8:C0:B5:9C:EB:87:A3:7E:AE:6E:FA:2C:0C:A7:8A
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       774DC60307EDD8BEBFA8E292AA01DA38E2CE34BB
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28538.roa
Signing time:             Tue 19 May 2026 17:40:00 +0000
ROA not before:           Tue 19 May 2026 17:35:00 +0000
ROA not after:            Tue 18 May 2027 17:40:00 +0000
asID:                     28538
IP address blocks:        189.215.129.0/24 maxlen: 24
                          189.215.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 07:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4d:c6:03:07:ed:d8:be:bf:a8:e2:92:aa:01:da:38:e2:ce:34:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: May 19 17:35:00 2026 GMT
            Not After : May 18 17:40:00 2027 GMT
        Subject: CN=E51F6CE96FE8C0B59CEB87A37EAE6EFA2C0CA78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:34:f1:1a:82:35:f9:33:1c:94:57:e5:d7:
                    23:68:8c:1b:56:66:66:b4:d3:8a:6f:b1:5d:a7:14:
                    22:d4:1d:80:cf:bb:05:7e:fc:8b:83:68:a4:1c:1e:
                    ed:8b:3c:b7:96:62:81:a8:02:72:d8:98:62:b7:58:
                    f7:d7:60:b2:cb:6c:d4:13:05:24:b3:3f:38:bf:71:
                    3a:80:65:0d:65:79:ac:70:7a:77:f6:e4:2f:56:48:
                    14:41:6f:54:b5:99:4e:9d:59:bb:d1:a8:57:fc:ed:
                    06:f8:07:11:b0:0b:45:fa:4a:ba:9f:e7:a0:1c:a8:
                    30:ce:98:b4:50:bd:a8:96:10:86:5e:62:37:08:46:
                    d6:a8:d7:b8:8f:c7:ca:be:95:e1:06:57:4c:00:5d:
                    7d:cf:98:1f:12:08:c2:7e:6a:c3:cf:c6:b7:06:3c:
                    31:08:7d:bc:e9:34:f0:c3:02:b4:a6:0f:1d:4c:f5:
                    89:07:b2:52:4b:0d:ef:88:7d:39:a8:50:13:4a:9c:
                    f3:2a:3f:7a:54:00:95:c6:43:c2:a4:23:08:dd:93:
                    32:98:b9:40:40:0f:7e:25:6c:11:4a:6b:24:03:ad:
                    3f:04:8b:e0:93:81:f7:4f:b1:3d:fb:5e:16:e5:83:
                    96:f3:01:78:ff:ed:97:20:3f:eb:1f:87:e7:4b:d2:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:6C:E9:6F:E8:C0:B5:9C:EB:87:A3:7E:AE:6E:FA:2C:0C:A7:8A
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.215.129.0-189.215.130.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:78:41:93:99:a9:b2:01:68:65:e7:c9:b0:be:3c:62:c0:8e:
         f2:b8:39:52:30:c8:af:c1:71:27:8e:9e:81:ef:c0:c5:50:19:
         fa:86:c0:b1:87:ab:53:8b:2f:85:e5:60:1d:70:f3:0c:61:df:
         ed:af:b7:86:71:11:ab:2e:0b:15:7a:93:3d:a1:c6:e6:67:de:
         70:89:bc:bf:1d:b2:1c:cf:cd:e8:0b:6a:cf:70:e3:b6:56:54:
         b1:50:81:00:26:bb:24:ee:f7:40:42:c3:e4:85:89:62:91:95:
         ad:9d:75:bb:78:43:79:6f:17:e4:a1:a6:b4:69:5d:37:e8:76:
         9b:0c:53:17:2a:71:fd:bc:05:67:7f:70:64:e5:9b:cc:ef:1c:
         fe:16:f5:b3:f0:a9:98:75:a6:f9:55:a2:6e:0f:58:17:cc:de:
         18:92:35:11:14:b6:9b:f0:fc:9c:49:26:47:81:06:94:c9:8c:
         70:99:ed:c2:9e:cc:2d:96:57:45:42:23:f4:55:ca:e2:e2:b1:
         5a:8c:ee:66:1c:5e:46:37:bd:cc:a4:9f:72:0b:62:9f:67:6f:
         68:6c:15:10:42:3a:0a:84:c8:12:7e:9d:b3:9d:43:ec:5e:e9:
         15:b4:27:50:97:1a:ed:9f:ac:25:18:f5:e8:ff:f2:0b:9f:61:
         27:1f:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:51:08 2026 by rpki-client