Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28554.roa
File:                     AS28554.roa (raw, json)
Hash identifier:          zEuGyb9lkFUIKutN8uftdooogVuXNxCAPP1VOyIytQw=
Subject key identifier:   2E:BE:42:BC:4B:3B:13:62:06:65:C1:5D:58:65:71:75:84:C3:C0:C1
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       678E9CF30B3F9C5F779B0088404167525CA2D057
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28554.roa
Signing time:             Tue 19 May 2026 17:40:01 +0000
ROA not before:           Tue 19 May 2026 17:35:01 +0000
ROA not after:            Tue 18 May 2027 17:40:01 +0000
asID:                     28554
IP address blocks:        187.184.64.0/20 maxlen: 20
                          187.184.128.0/20 maxlen: 20
                          187.184.192.0/20 maxlen: 20
                          187.184.220.0/24 maxlen: 24
                          189.202.64.0/19 maxlen: 19
                          189.214.72.0/23 maxlen: 24
                          189.214.74.0/24 maxlen: 24
                          189.214.96.0/20 maxlen: 23
                          189.214.112.0/21 maxlen: 23
                          189.214.159.0/24 maxlen: 24
                          189.215.126.0/23 maxlen: 24
                          189.215.136.0/21 maxlen: 22
                          189.215.152.0/21 maxlen: 22
                          189.215.246.0/23 maxlen: 24
                          189.220.16.0/23 maxlen: 24
                          189.220.18.0/24 maxlen: 24
                          189.220.64.0/20 maxlen: 21
                          189.221.224.0/22 maxlen: 22
                          200.77.193.0/24 maxlen: 24
                          200.77.194.0/23 maxlen: 24
                          200.77.208.0/20 maxlen: 21
                          201.139.68.0/22 maxlen: 22
                          201.160.108.0/22 maxlen: 22
                          201.160.210.0/24 maxlen: 24
                          201.160.224.0/20 maxlen: 20
                          201.160.245.0/24 maxlen: 24
                          201.160.247.0/24 maxlen: 24
                          201.160.248.0/21 maxlen: 24
                          201.166.96.0/20 maxlen: 21
                          2806:250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 07:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:9c:f3:0b:3f:9c:5f:77:9b:00:88:40:41:67:52:5c:a2:d0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: May 19 17:35:01 2026 GMT
            Not After : May 18 17:40:01 2027 GMT
        Subject: CN=2EBE42BC4B3B13620665C15D5865717584C3C0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:b1:71:29:00:6f:ee:a6:b2:85:91:2d:8e:
                    b9:15:ef:f3:38:6e:6a:83:ba:f7:e6:d4:42:39:91:
                    4b:f1:6a:1e:cc:b0:34:8c:6a:ef:63:8a:03:e4:fa:
                    be:27:b8:4a:9e:39:e6:14:c9:8d:2b:29:1f:b6:c9:
                    ca:0e:d0:f9:90:cd:86:6e:8b:21:9c:39:ca:ac:4a:
                    cb:3a:06:38:53:4c:f7:28:1a:bf:80:14:8e:9d:18:
                    b9:7c:b0:f5:df:b3:e1:a6:0e:29:cb:76:18:04:49:
                    d2:be:a4:8c:ca:e3:a6:6a:3d:4a:6b:94:d2:de:c4:
                    db:fe:49:05:5c:18:86:cd:c9:83:bf:de:b5:a6:b9:
                    ff:cc:61:85:d9:a9:80:46:c8:02:e3:29:87:4f:51:
                    21:ba:5b:b6:da:98:3b:c1:9d:d6:d1:5b:61:47:d1:
                    71:f7:d3:3f:79:d4:5b:e2:ef:c2:26:0a:1f:b4:c3:
                    f6:77:8e:1e:08:87:00:c4:c7:f0:ba:c9:4b:e0:8c:
                    e9:ee:23:e2:03:47:95:2d:1e:90:1e:40:9a:f7:af:
                    7b:7c:4b:06:9a:8b:4c:65:fb:04:d0:71:a7:a4:6d:
                    2b:03:b2:f7:d5:26:10:ef:37:25:3d:23:d4:09:a6:
                    de:82:1b:73:74:29:0c:51:e1:47:f1:3a:da:be:b0:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:42:BC:4B:3B:13:62:06:65:C1:5D:58:65:71:75:84:C3:C0:C1
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28554.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.184.64.0/20
                  187.184.128.0/20
                  187.184.192.0/20
                  187.184.220.0/24
                  189.202.64.0/19
                  189.214.72.0-189.214.74.255
                  189.214.96.0-189.214.119.255
                  189.214.159.0/24
                  189.215.126.0/23
                  189.215.136.0/21
                  189.215.152.0/21
                  189.215.246.0/23
                  189.220.16.0-189.220.18.255
                  189.220.64.0/20
                  189.221.224.0/22
                  200.77.193.0-200.77.195.255
                  200.77.208.0/20
                  201.139.68.0/22
                  201.160.108.0/22
                  201.160.210.0/24
                  201.160.224.0/20
                  201.160.245.0/24
                  201.160.247.0-201.160.255.255
                  201.166.96.0/20
                IPv6:
                  2806:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:20:df:77:0b:8b:e3:bc:fc:93:64:63:8d:a5:17:4d:90:2f:
         cf:b5:52:a2:2c:87:c8:4c:5c:0a:9d:d5:ae:79:b7:e7:42:ce:
         c1:d9:8d:27:c6:3f:17:fb:2a:b3:2b:39:ba:0c:b4:0d:48:f1:
         4d:d7:f1:1d:32:68:c9:7f:48:b5:d4:95:b4:b0:2a:99:f6:c0:
         c9:f9:0d:33:4f:ed:49:25:0f:92:4a:cf:5c:60:2d:d1:93:38:
         ca:d1:9b:e5:31:40:fb:f4:96:f5:15:71:28:a9:55:36:96:e9:
         8e:fe:94:f0:ad:df:9d:39:82:a3:9f:a1:95:11:0d:65:19:ee:
         fe:9f:81:8b:e2:f5:d1:ec:d0:ee:d8:84:f0:81:0c:5b:cc:7c:
         55:6e:0b:f0:64:04:7f:6a:7f:70:94:87:15:d1:87:6a:e1:eb:
         33:66:a6:86:1f:d9:22:03:4f:25:53:27:9a:9d:58:4c:02:14:
         e1:5f:c7:e5:b5:cc:1a:da:b0:1c:25:d6:d2:97:e1:0c:7c:18:
         cf:d0:26:fc:9a:60:f6:5b:14:4f:4b:d5:ea:d0:ed:5a:c2:46:
         c3:c5:8e:04:71:62:0c:44:1b:fd:79:18:06:59:a4:01:d7:5a:
         b0:51:a1:f8:57:37:3f:81:82:1e:cd:bd:5e:de:e8:da:af:40:
         3f:e4:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:50:11 2026 by rpki-client