Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136342e302f32342d3234203d3e203532343638.roa
File:                     3138352e3130342e3136342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          euE3dhZKfPaSebYbH4shwUsJFbjS6L4SNStCD1iNSrY=
Subject key identifier:   97:9B:73:12:60:D3:29:6A:34:94:7D:1D:40:C7:9C:0F:8A:89:AB:9D
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       38F29B6C3E66CFAB96EB1529ECB02DB7D9173BE1
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136342e302f32342d3234203d3e203532343638.roa
Signing time:             Sat 29 Aug 2026 03:00:03 +0000
ROA not before:           Sat 29 Aug 2026 02:55:03 +0000
ROA not after:            Sat 28 Aug 2027 03:00:03 +0000
asID:                     52468
IP address blocks:        185.104.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f2:9b:6c:3e:66:cf:ab:96:eb:15:29:ec:b0:2d:b7:d9:17:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:03 2026 GMT
            Not After : Aug 28 03:00:03 2027 GMT
        Subject: CN=979B731260D3296A34947D1D40C79C0F8A89AB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:e4:fe:6b:fb:28:0a:98:a2:86:16:26:5f:
                    2e:6b:d6:c4:09:a8:95:84:af:c0:e5:ae:0a:c7:2e:
                    af:37:2c:85:19:32:7d:08:81:07:62:c3:65:2e:e6:
                    d5:63:dd:ed:cd:27:bf:62:f6:af:d2:9b:a0:27:59:
                    c9:1f:26:98:9b:59:0f:83:67:ec:9c:dc:a6:d6:60:
                    9b:ac:2c:04:b1:af:2c:ac:8e:3d:17:fa:17:dd:42:
                    cf:16:dd:fd:ba:55:9f:4d:8c:33:9f:c2:b1:20:af:
                    d7:6b:b7:6e:1e:a8:c8:e2:9f:e5:e8:49:f2:ec:e1:
                    13:f0:44:95:0a:7a:69:33:14:b0:b5:b7:2a:40:2c:
                    20:f3:94:9c:c4:63:29:e1:87:2e:15:5c:7b:ef:92:
                    b9:9d:d0:21:eb:a5:f9:8b:c8:7f:84:e0:70:45:55:
                    0b:a0:d5:39:86:ee:a4:f8:ce:50:37:52:28:73:d6:
                    c8:a5:08:aa:ae:58:59:87:1d:82:a6:7a:4b:91:97:
                    84:6f:e2:3f:54:20:f6:b9:18:a4:7c:ee:f0:1d:8b:
                    cd:37:86:b0:7e:2a:c4:a4:97:9e:3f:9d:8a:12:24:
                    82:90:aa:c1:42:b2:39:f3:75:65:2b:96:75:7d:26:
                    b3:d6:42:a6:a6:2d:21:0c:74:4d:01:8b:b8:54:96:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9B:73:12:60:D3:29:6A:34:94:7D:1D:40:C7:9C:0F:8A:89:AB:9D
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e4:73:59:af:8c:18:c8:63:fa:55:ab:1d:25:28:56:bb:01:
         37:24:6b:fa:98:9a:61:62:d4:7c:78:df:95:72:fc:27:bf:35:
         e0:3d:7e:ab:41:08:5f:4f:9a:7a:ab:0f:d8:ab:ff:d5:b7:86:
         eb:f2:af:ea:c1:54:fa:62:c1:53:34:42:4f:ee:c5:5b:52:d0:
         51:65:c3:5a:24:00:da:f2:ae:1d:b9:55:a6:f0:f5:36:7e:65:
         7d:2f:50:9d:f8:59:9a:00:4e:a8:71:59:91:11:ad:ff:88:fa:
         e4:65:9f:46:d3:11:d2:d1:6e:84:e8:6f:17:ec:f5:50:82:a9:
         aa:5e:35:b2:1d:e4:21:2f:f2:65:71:b5:f2:91:9f:ee:bf:e4:
         e0:7f:84:f4:ad:35:bf:46:17:30:82:14:ca:c9:0b:f2:77:06:
         f5:73:20:e6:0c:06:1d:02:1b:1e:8a:55:75:b0:da:f4:3c:06:
         53:9b:fc:98:ae:09:2f:56:fe:58:5e:70:d3:b6:87:25:26:e6:
         fa:80:56:5b:8f:0b:5c:cf:df:08:30:f0:54:a5:f1:f7:b3:79:
         45:c1:48:9c:ca:a3:31:2f:a5:60:bc:e1:22:86:25:de:5b:c1:
         b0:64:69:f6:3c:e4:ea:21:be:70:0b:87:a2:5e:5b:21:09:9a:
         37:74:a5:27
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOPKbbD5mz6uW6xUp7LAtt9kXO+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyMjVFRjkwMEE3NDFFRDAwNjcyOTNBNUQ5Mjk3QUUz
REE4Q0U2MDAeFw0yNjA4MjkwMjU1MDNaFw0yNzA4MjgwMzAwMDNaMDMxMTAvBgNV
BAMTKDk3OUI3MzEyNjBEMzI5NkEzNDk0N0QxRDQwQzc5QzBGOEE4OUFCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwuT+a/soCpiihhYmXy5r1sQJ
qJWEr8DlrgrHLq83LIUZMn0IgQdiw2Uu5tVj3e3NJ79i9q/Sm6AnWckfJpibWQ+D
Z+yc3KbWYJusLASxryysjj0X+hfdQs8W3f26VZ9NjDOfwrEgr9drt24eqMjin+Xo
SfLs4RPwRJUKemkzFLC1typALCDzlJzEYynhhy4VXHvvkrmd0CHrpfmLyH+E4HBF
VQug1TmG7qT4zlA3Uihz1silCKquWFmHHYKmekuRl4Rv4j9UIPa5GKR87vAdi803
hrB+KsSkl54/nYoSJIKQqsFCsjnzdWUrlnV9JrPWQqamLSEMdE0Bi7hUllMjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUl5tzEmDTKWo0lH0dQMecD4qJq50wHwYDVR0j
BBgwFoAUDyJe+QCnQe0AZyk6XZKXrj2ozmAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjUwODg2QjhFRjM2MDBCRTZDRDk5OUM1RUZFNUM2Njk5
NkE1QjBFODAyREMzMzZGM0VGNDUxMzg0ODEzRTU0LzAvMEYyMjVFRjkwMEE3NDFF
RDAwNjcyOTNBNUQ5Mjk3QUUzREE4Q0U2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjIyNUVGOTAwQTc0MUVEMDA2
NzI5M0E1RDkyOTdBRTNEQThDRTYwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI1MDg4NkI4RUYzNjAwQkU2Q0Q5OTlDNUVGRTVDNjY5OTZBNUIwRTgw
MkRDMzM2RjNFRjQ1MTM4NDgxM0U1NC8wLzMxMzgzNTJlMzEzMDM0MmUzMTM2MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWik
MA0GCSqGSIb3DQEBCwUAA4IBAQCJ5HNZr4wYyGP6VasdJShWuwE3JGv6mJphYtR8
eN+VcvwnvzXgPX6rQQhfT5p6qw/Yq//Vt4br8q/qwVT6YsFTNEJP7sVbUtBRZcNa
JADa8q4duVWm8PU2fmV9L1Cd+FmaAE6ocVmREa3/iPrkZZ9G0xHS0W6E6G8X7PVQ
gqmqXjWyHeQhL/JlcbXykZ/uv+Tgf4T0rTW/RhcwghTKyQvydwb1cyDmDAYdAhse
ilV1sNr0PAZTm/yYrgkvVv5YXnDTtoclJub6gFZbjwtcz98IMPBUpfH3s3lFwUic
yqMxL6VgvOEihiXeW8GwZGn2POTqIb5wC4eiXlshCZo3dKUn
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:06:16 2026 by rpki-client