Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28557.roa
File:                     AS28557.roa (raw, json)
Hash identifier:          S27uJi9rglNyWlIVWHn0uEiTH2YIZxlVYemXMCF91UA=
Subject key identifier:   E4:09:E4:36:8B:F0:15:F5:46:8D:7A:57:F0:09:CC:90:DA:3F:2D:DE
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       2D0AD2B80763F2A2F4DE277DB460CCED105F3358
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28557.roa
Signing time:             Wed 20 May 2026 05:05:00 +0000
ROA not before:           Wed 20 May 2026 05:00:00 +0000
ROA not after:            Wed 19 May 2027 05:05:00 +0000
asID:                     28557
IP address blocks:        189.215.9.0/24 maxlen: 24
                          189.215.10.0/23 maxlen: 24
                          2806:250:a00::/40 maxlen: 48
                          2806:250:a08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 07:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0a:d2:b8:07:63:f2:a2:f4:de:27:7d:b4:60:cc:ed:10:5f:33:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: May 20 05:00:00 2026 GMT
            Not After : May 19 05:05:00 2027 GMT
        Subject: CN=E409E4368BF015F5468D7A57F009CC90DA3F2DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:0c:26:de:c1:9d:aa:aa:38:18:5e:6f:cb:
                    c0:69:73:7f:55:e5:ca:9b:f9:ba:d8:4f:29:f3:9c:
                    58:8c:22:f2:fb:05:92:a0:52:cd:91:6c:81:67:10:
                    40:22:b2:94:a6:95:ce:83:56:90:d6:47:d6:86:2e:
                    52:7e:7f:fe:e1:88:ba:ad:2f:68:ec:46:88:43:b7:
                    e3:0f:ff:33:8a:78:29:47:0c:8f:99:ad:e4:67:bf:
                    dc:b5:43:d4:5a:28:46:1f:4e:03:2d:da:0e:be:ef:
                    6f:cf:55:21:ec:2b:6f:35:ed:32:65:9d:bf:4a:5d:
                    82:69:02:23:22:3b:7a:eb:63:7e:c3:d7:01:f8:61:
                    af:73:6c:52:06:2b:c9:e0:be:2c:d2:da:3d:cb:67:
                    04:d5:51:a1:b2:36:e4:17:36:b3:ab:50:3b:bc:95:
                    d3:91:f7:ee:3a:f5:4d:60:a4:fd:57:d4:ae:c1:92:
                    2d:0a:0a:a8:ca:8b:57:83:ab:bb:ee:49:d3:a9:ec:
                    0b:c3:25:56:67:f3:89:88:a7:d7:c5:ac:50:8d:d7:
                    df:9c:ed:9e:e6:04:ee:63:57:ab:04:dc:de:a1:cb:
                    c6:42:65:bc:d7:93:c8:38:09:27:cd:fb:79:47:d0:
                    15:8e:40:48:dd:51:04:f3:9c:6c:44:17:05:ed:77:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:E4:36:8B:F0:15:F5:46:8D:7A:57:F0:09:CC:90:DA:3F:2D:DE
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28557.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.215.9.0-189.215.11.255
                IPv6:
                  2806:250:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ec:18:06:56:52:9f:d6:18:46:2f:83:17:17:b4:d0:08:5e:2e:
         51:d3:b2:18:bc:bc:28:67:f9:9a:ac:ab:19:76:71:a3:dd:69:
         3e:fa:01:7c:8d:a4:9f:3f:5a:0b:16:3f:99:da:8b:91:7c:57:
         b2:00:54:6a:12:97:3f:50:f7:17:67:05:bc:31:80:e2:da:c5:
         38:26:90:53:62:35:3b:33:88:ea:9d:70:d2:fe:96:c7:e8:6d:
         01:46:3a:17:bf:a8:01:e6:94:55:1f:76:51:ee:b8:ab:2d:7d:
         a8:65:ce:47:9c:14:41:1a:75:ca:a6:c2:f0:0f:73:7f:91:39:
         13:9e:75:70:49:7e:05:64:87:0e:a1:1c:83:0a:41:ec:f1:c1:
         f8:8a:10:f8:bf:b4:90:46:b1:b9:a6:62:59:2a:b8:0b:70:cb:
         80:79:04:54:1a:bc:d0:45:17:9c:e6:1b:e9:3b:b9:b1:21:2c:
         00:0d:6e:b7:d0:5b:60:c5:44:7c:b2:87:7f:55:ce:01:1a:c0:
         a9:d8:8e:0a:f9:77:5c:08:99:b8:44:0e:ee:d4:a0:2a:71:02:
         71:e0:cd:32:63:c0:76:2d:b9:df:71:2b:01:80:a3:e4:07:9c:
         6c:17:a6:9f:87:c9:5b:45:93:7a:21:20:10:ce:39:50:2f:86:
         35:00:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:50:57 2026 by rpki-client