Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e203532343638.roa
File:                     3130332e3231322e38332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          DGf+din6HnQriIX1CiW+NN9D1VPPsqO04biU2q3hvYk=
Subject key identifier:   2B:F9:C6:ED:B7:27:C9:46:83:2B:C7:CA:3F:53:95:AC:A2:E9:64:D8
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       7592FF2D587A34384386D4F0D45E5E44404E4313
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e203532343638.roa
Signing time:             Sat 29 Aug 2026 02:45:05 +0000
ROA not before:           Sat 29 Aug 2026 02:40:05 +0000
ROA not after:            Sat 28 Aug 2027 02:45:05 +0000
asID:                     52468
IP address blocks:        103.212.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:92:ff:2d:58:7a:34:38:43:86:d4:f0:d4:5e:5e:44:40:4e:43:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:40:05 2026 GMT
            Not After : Aug 28 02:45:05 2027 GMT
        Subject: CN=2BF9C6EDB727C946832BC7CA3F5395ACA2E964D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:b5:05:8f:3d:d0:73:10:a3:2e:ba:10:98:
                    c0:67:c2:d8:b8:7c:f9:b8:32:61:cc:9c:3f:47:be:
                    43:7a:08:d4:c1:01:1c:12:3a:c0:7e:85:e0:51:7c:
                    09:db:4c:da:59:2e:c7:4a:1e:a0:d1:13:3b:e1:4c:
                    a6:e6:2e:b6:cb:9d:ef:58:b0:92:f5:7b:2b:c9:30:
                    a6:61:6c:54:c8:49:ea:92:3b:29:e1:da:f2:19:89:
                    6c:f3:03:4d:e2:bc:6e:3f:0e:de:22:92:74:02:23:
                    0f:63:02:55:00:a3:71:c1:90:07:af:42:94:7e:57:
                    e2:06:00:3e:af:dc:a3:40:68:49:d2:4d:4a:91:61:
                    b4:ab:98:4e:b6:79:27:e9:a3:5c:58:67:63:c4:16:
                    8c:c8:ca:3f:d1:e8:a0:1e:23:2b:08:63:98:f6:6a:
                    2b:ca:7b:a2:e9:36:aa:9c:ea:9e:3e:29:59:b8:7f:
                    d5:36:0c:a2:ee:3d:a9:f1:b1:13:0e:a4:32:bb:a8:
                    5e:57:e6:94:27:8b:89:cf:3c:62:e4:c2:77:b6:70:
                    2d:e2:13:d3:ea:e5:41:f6:ba:59:0f:eb:a7:ca:63:
                    f9:36:67:5b:18:da:37:07:f3:10:20:ca:cf:56:3b:
                    9d:a5:93:14:a2:f7:ab:3b:32:43:45:74:89:d9:86:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F9:C6:ED:B7:27:C9:46:83:2B:C7:CA:3F:53:95:AC:A2:E9:64:D8
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:ed:fb:61:c5:81:04:85:42:1c:e3:4d:02:ba:5e:1c:7a:
         6c:78:74:5c:0f:5d:15:4d:b4:ec:67:ae:ba:b1:53:3f:9d:2e:
         67:05:1f:e7:af:e2:b4:f0:a6:0d:5b:fa:8c:2b:28:35:5e:a4:
         89:b2:ae:e0:22:95:14:82:0c:dc:07:1e:d0:d7:6a:b5:d7:a7:
         b3:d1:8d:be:57:aa:f8:c6:0f:0c:54:0f:98:80:bc:bc:e6:db:
         cd:10:b6:95:85:16:21:46:0e:97:53:35:ee:42:69:a7:b2:48:
         89:91:c9:dc:a5:6e:da:5c:e9:9e:e4:10:ed:4b:67:3e:07:84:
         64:3d:dd:c4:c7:87:a7:8c:38:4e:68:16:a6:f4:ad:28:88:31:
         d7:74:61:8a:e7:a3:c7:14:53:67:97:47:65:ac:7b:73:0d:59:
         18:8b:40:43:d9:c8:c6:e8:f7:3a:14:f3:2a:87:f4:22:44:10:
         ce:3c:c0:bf:dd:5b:ad:7d:13:e4:a8:9c:de:e7:55:f1:55:1e:
         31:f8:a1:79:9b:db:49:2f:91:9a:70:b5:d2:52:4b:5c:40:ce:
         ae:d4:c7:eb:e6:21:79:59:30:7b:27:12:8b:b0:5e:f5:f4:ae:
         04:19:74:b4:57:ef:06:ed:13:32:59:9b:74:e2:91:68:fb:8d:
         98:5d:6d:de
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdZL/LVh6NDhDhtTw1F5eREBOQxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyMjVFRjkwMEE3NDFFRDAwNjcyOTNBNUQ5Mjk3QUUz
REE4Q0U2MDAeFw0yNjA4MjkwMjQwMDVaFw0yNzA4MjgwMjQ1MDVaMDMxMTAvBgNV
BAMTKDJCRjlDNkVEQjcyN0M5NDY4MzJCQzdDQTNGNTM5NUFDQTJFOTY0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HrUFjz3QcxCjLroQmMBnwti4
fPm4MmHMnD9HvkN6CNTBARwSOsB+heBRfAnbTNpZLsdKHqDREzvhTKbmLrbLne9Y
sJL1eyvJMKZhbFTISeqSOynh2vIZiWzzA03ivG4/Dt4iknQCIw9jAlUAo3HBkAev
QpR+V+IGAD6v3KNAaEnSTUqRYbSrmE62eSfpo1xYZ2PEFozIyj/R6KAeIysIY5j2
aivKe6LpNqqc6p4+KVm4f9U2DKLuPanxsRMOpDK7qF5X5pQni4nPPGLkwne2cC3i
E9Pq5UH2ulkP66fKY/k2Z1sY2jcH8xAgys9WO52lkxSi96s7MkNFdInZhuzfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUK/nG7bcnyUaDK8fKP1OVrKLpZNgwHwYDVR0j
BBgwFoAUDyJe+QCnQe0AZyk6XZKXrj2ozmAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjUwODg2QjhFRjM2MDBCRTZDRDk5OUM1RUZFNUM2Njk5
NkE1QjBFODAyREMzMzZGM0VGNDUxMzg0ODEzRTU0LzAvMEYyMjVFRjkwMEE3NDFF
RDAwNjcyOTNBNUQ5Mjk3QUUzREE4Q0U2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjIyNUVGOTAwQTc0MUVEMDA2
NzI5M0E1RDkyOTdBRTNEQThDRTYwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI1MDg4NkI4RUYzNjAwQkU2Q0Q5OTlDNUVGRTVDNjY5OTZBNUIwRTgw
MkRDMzM2RjNFRjQ1MTM4NDgxM0U1NC8wLzMxMzAzMzJlMzIzMTMyMmUzODMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfUUzAN
BgkqhkiG9w0BAQsFAAOCAQEANsHt+2HFgQSFQhzjTQK6Xhx6bHh0XA9dFU207Geu
urFTP50uZwUf56/itPCmDVv6jCsoNV6kibKu4CKVFIIM3Ace0Ndqtdens9GNvleq
+MYPDFQPmIC8vObbzRC2lYUWIUYOl1M17kJpp7JIiZHJ3KVu2lzpnuQQ7UtnPgeE
ZD3dxMeHp4w4TmgWpvStKIgx13RhiuejxxRTZ5dHZax7cw1ZGItAQ9nIxuj3OhTz
Kof0IkQQzjzAv91brX0T5Kic3udV8VUeMfiheZvbSS+RmnC10lJLXEDOrtTH6+Yh
eVkweycSi7Be9fSuBBl0tFfvBu0TMlmbdOKRaPuNmF1t3g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:50:38 2026 by rpki-client