Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136362e302f32342d3234203d3e203532343638.roa
File:                     3138352e3130342e3136362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          w0CbURRPkuooBlaSrWj48WIzzI9uRaTwwUMdyD0zWOU=
Subject key identifier:   42:80:90:A2:80:3E:30:9F:06:F3:00:EE:12:E9:7F:6A:F2:91:57:E4
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       174EF9C9C25AAAB33DACB0D9B364013BC7075AAC
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136362e302f32342d3234203d3e203532343638.roa
Signing time:             Sat 29 Aug 2026 03:00:04 +0000
ROA not before:           Sat 29 Aug 2026 02:55:04 +0000
ROA not after:            Sat 28 Aug 2027 03:00:04 +0000
asID:                     52468
IP address blocks:        185.104.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4e:f9:c9:c2:5a:aa:b3:3d:ac:b0:d9:b3:64:01:3b:c7:07:5a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:04 2026 GMT
            Not After : Aug 28 03:00:04 2027 GMT
        Subject: CN=428090A2803E309F06F300EE12E97F6AF29157E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:d9:07:e2:d8:62:00:52:d2:bc:4a:86:44:
                    72:e5:db:a4:ef:d3:6d:2a:ea:97:18:2a:f4:77:41:
                    2f:75:7b:8b:af:c0:16:57:f9:b4:5d:17:c0:5d:05:
                    ef:43:75:db:87:6f:44:ec:8d:ee:dc:28:52:33:93:
                    20:d5:8e:e2:e9:2d:6c:62:04:94:be:f4:c7:a6:7a:
                    20:0c:1e:ec:81:5b:ac:57:a0:07:a1:4c:41:e2:70:
                    48:50:ff:61:0e:1d:33:9b:65:19:34:48:12:e5:36:
                    3c:29:8b:ac:1c:38:36:21:2d:d8:f7:e6:e1:5b:eb:
                    ce:29:65:ce:70:86:d8:13:ce:3e:3d:41:8f:5e:68:
                    d6:96:d6:99:a6:cf:64:8b:ec:f2:53:9c:6b:81:8e:
                    c5:b9:7b:01:c9:98:2a:e9:50:5b:71:71:6f:4d:40:
                    20:11:88:7c:7c:45:29:b3:7b:13:58:77:33:b5:19:
                    38:dd:c7:da:bd:ff:97:0c:3d:87:64:47:c8:99:b0:
                    27:05:23:98:2d:14:b2:0b:a0:42:06:06:5f:a8:12:
                    06:53:67:5f:40:5d:e0:f5:e9:ce:f6:50:ec:86:8b:
                    15:26:2e:74:a8:46:42:31:11:a6:00:74:6d:8a:96:
                    d5:64:2d:26:2d:c2:2c:51:f6:75:18:1a:ca:74:3f:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:90:A2:80:3E:30:9F:06:F3:00:EE:12:E9:7F:6A:F2:91:57:E4
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:69:d8:be:e2:e9:d5:ec:9d:61:fd:48:fd:28:2c:c2:7d:
         9f:30:cd:fe:d3:63:46:6a:35:bc:7d:dc:33:c3:a5:f6:83:b2:
         e7:79:e2:45:b7:e2:72:8f:d9:2e:cd:6a:57:40:a2:21:3b:65:
         1a:bc:78:27:e7:0b:1f:84:ea:e1:1a:3c:3d:88:b8:a6:73:07:
         95:ff:f1:54:b8:c5:b9:0e:87:fb:ce:3c:6d:2b:a0:86:59:c2:
         05:4d:50:10:19:17:16:74:d3:ef:a4:5a:17:c6:d4:f2:c6:46:
         62:5c:87:43:fb:5b:c6:12:5d:51:bb:f5:d9:23:42:43:fa:0f:
         e0:42:5e:5e:99:63:5b:ff:84:5a:50:55:62:a6:ad:27:48:ec:
         f6:9a:5e:45:5d:f3:1f:a9:b6:3b:b8:b0:dd:fb:d7:ce:98:67:
         55:3e:2f:94:db:8d:7c:f4:04:bb:fc:30:09:d6:ae:23:3e:2c:
         c9:9f:af:f9:68:af:54:4d:34:76:20:f5:bf:a5:71:49:ef:69:
         38:42:9c:7b:ff:06:2b:1a:1a:a2:9c:4d:83:2a:ba:fb:9e:d2:
         c0:d1:17:08:17:47:9c:d8:e8:6d:d2:16:e8:3f:47:98:bd:96:
         20:b2:ac:58:1f:09:8e:38:c2:76:ce:24:be:4d:5d:c7:7a:ba:
         c5:10:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:06:16 2026 by rpki-client