Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28549.roa
File:                     AS28549.roa (raw, json)
Hash identifier:          hadhK7UbnzDxXNLJ1LHRJ6cRGwRp4VcY4BRIO6LgAMs=
Subject key identifier:   B7:7A:14:B9:5F:E4:B5:F3:06:B2:E3:F8:1A:AC:7C:BA:21:1E:FE:94
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       3CFA5D6E00BBAF469199C061528D64C3A4353C58
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28549.roa
Signing time:             Wed 20 May 2026 05:15:00 +0000
ROA not before:           Wed 20 May 2026 05:10:00 +0000
ROA not after:            Wed 19 May 2027 05:15:00 +0000
asID:                     28549
IP address blocks:        131.161.244.0/22 maxlen: 22
                          201.139.76.0/22 maxlen: 24
                          201.161.192.0/18 maxlen: 24
                          2806:250:2b::/48 maxlen: 48
                          2806:250:400::/40 maxlen: 48
                          2806:250:407::/48 maxlen: 48
                          2806:250:408::/48 maxlen: 48
                          2806:250:1500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 07:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fa:5d:6e:00:bb:af:46:91:99:c0:61:52:8d:64:c3:a4:35:3c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: May 20 05:10:00 2026 GMT
            Not After : May 19 05:15:00 2027 GMT
        Subject: CN=B77A14B95FE4B5F306B2E3F81AAC7CBA211EFE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:d8:b7:05:90:8c:cb:6c:da:61:c2:4c:40:
                    7a:2c:3c:78:ca:ff:54:c0:fd:07:06:d1:09:41:b0:
                    11:87:08:6d:27:a7:ce:5e:96:3f:3e:5d:b4:d2:68:
                    fe:38:66:a8:aa:ac:f4:9b:11:1a:fd:5c:df:72:0c:
                    36:fa:c8:48:71:33:a5:9b:41:48:9f:e0:8a:40:1b:
                    c4:10:e2:ee:55:79:c0:67:86:d2:fd:20:5a:fa:3f:
                    02:cc:54:44:f0:e1:1a:d3:af:65:6d:06:fc:cd:3b:
                    c9:d9:94:3d:6c:3a:31:d8:34:03:a2:57:00:ad:92:
                    c7:95:00:56:a3:0a:3a:55:4b:8b:8f:5e:c5:be:b1:
                    e0:2d:80:71:4e:7a:7c:46:59:bc:42:0a:66:18:ac:
                    26:d6:53:22:a9:98:1d:42:76:70:67:f6:7f:e5:c1:
                    bc:27:10:9b:d2:76:f9:12:29:13:51:9b:50:a4:1b:
                    95:0d:41:10:51:a1:bc:cb:6c:b0:37:86:1b:03:ed:
                    b1:5f:73:cf:21:35:d7:af:2f:96:17:02:84:11:a5:
                    79:2a:4f:19:ed:3b:7c:0f:cb:ae:c3:32:95:52:9c:
                    54:ec:6d:ab:d4:c7:90:0b:83:96:f5:ad:28:a4:4c:
                    3c:18:b7:a1:a0:50:e9:f7:eb:01:dc:e7:21:99:0a:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7A:14:B9:5F:E4:B5:F3:06:B2:E3:F8:1A:AC:7C:BA:21:1E:FE:94
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28549.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.244.0/22
                  201.139.76.0/22
                  201.161.192.0/18
                IPv6:
                  2806:250:2b::/48
                  2806:250:400::/40
                  2806:250:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:0e:02:82:5a:22:8f:49:4f:ef:62:ca:94:b3:52:0b:b9:
         eb:95:7c:f6:90:09:c9:c8:51:37:c4:d4:03:fd:6f:0d:8c:6a:
         95:b6:c4:2d:fb:e0:c9:ef:99:1a:6b:37:53:3c:ae:01:02:a0:
         94:fa:10:6f:8f:9b:c2:7e:58:00:b7:75:91:47:ae:9b:83:05:
         9f:a9:b1:69:61:b5:4e:bb:be:be:08:f0:25:e3:a2:37:0e:d4:
         32:f9:98:65:1d:b5:f9:66:7e:c2:61:81:37:50:70:f2:67:e6:
         db:1f:21:ca:b1:52:d2:b5:dd:50:25:48:26:0d:eb:cb:f6:93:
         9c:a1:71:b4:45:76:ee:a6:a4:f4:41:01:80:93:b5:22:7a:79:
         36:07:66:df:86:c2:0f:89:5b:6c:28:1f:1a:e5:ae:1b:65:b1:
         2d:ef:5e:35:b5:c8:2d:36:cb:23:ba:7d:7c:40:53:a6:44:b6:
         be:04:6b:99:69:05:02:76:ab:a9:20:1c:60:74:db:bb:6d:b1:
         37:20:37:10:08:bc:54:1e:96:93:c7:76:5b:5c:d3:2a:6c:8d:
         74:97:a0:fe:a9:7f:34:8d:3f:69:5c:62:9a:d1:2b:ca:aa:cb:
         bb:a6:4e:5a:bc:ba:9e:3f:37:b8:2e:bd:20:33:2e:72:e6:8d:
         e0:80:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:51:36 2026 by rpki-client