Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32332d3233203d3e20323639383232.roa
File:                     3138352e39312e3139322e302f32332d3233203d3e20323639383232.roa (raw, json)
Hash identifier:          /Pd4cJH33mImx7Qjq/Qb65v7gJh7m539DGSJ75HGf4A=
Subject key identifier:   97:01:39:57:0B:8F:55:6C:D7:16:42:5D:68:F2:BB:7B:A5:65:DD:07
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       1E3C7D234ABE3BDCF397D8EAB7E3DCEEA152F3A9
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32332d3233203d3e20323639383232.roa
Signing time:             Sat 29 Aug 2026 02:50:03 +0000
ROA not before:           Sat 29 Aug 2026 02:45:03 +0000
ROA not after:            Sat 28 Aug 2027 02:50:03 +0000
asID:                     269822
IP address blocks:        185.91.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 12:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3c:7d:23:4a:be:3b:dc:f3:97:d8:ea:b7:e3:dc:ee:a1:52:f3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:45:03 2026 GMT
            Not After : Aug 28 02:50:03 2027 GMT
        Subject: CN=970139570B8F556CD716425D68F2BB7BA565DD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:af:c4:6a:15:0e:27:a8:d3:25:0a:c8:be:d2:
                    ff:eb:d5:99:1a:7b:6c:c3:4f:fa:14:ac:70:05:ea:
                    f4:af:ea:a3:79:8f:f6:9e:75:64:5d:65:97:54:bf:
                    e8:22:97:c6:c3:06:7f:a6:ab:c8:45:be:55:a0:ba:
                    be:c7:66:b9:a9:b8:33:f9:5b:c7:05:e5:86:12:22:
                    08:22:a2:4e:9b:5f:8f:ad:fc:42:98:b9:9d:4e:a6:
                    29:0d:d5:b2:af:8c:4a:96:1b:ed:7e:8b:a8:9c:da:
                    78:52:ad:50:86:5d:13:ea:28:b3:43:46:24:1f:6a:
                    27:34:d6:28:5e:2c:e7:88:17:fd:95:4b:cd:aa:d3:
                    47:8d:31:8e:4a:f5:6e:fe:50:12:a8:d3:2e:ed:b0:
                    a7:17:43:4b:a6:b0:16:58:23:f2:70:08:d0:56:d6:
                    f1:26:6d:81:0c:99:f5:ee:ed:6a:5f:56:9a:0e:43:
                    12:d2:e1:af:36:81:56:42:6b:79:dd:69:48:40:4c:
                    f3:0f:a3:58:b5:2f:c2:11:e3:71:4c:79:c6:d3:c1:
                    1d:d1:49:be:77:38:58:a3:61:42:32:d0:0f:67:87:
                    66:87:c7:11:c1:00:34:cb:99:49:a5:5b:3b:47:7a:
                    43:74:38:23:86:f3:4e:24:6d:d0:91:77:71:f0:07:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:01:39:57:0B:8F:55:6C:D7:16:42:5D:68:F2:BB:7B:A5:65:DD:07
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139322e302f32332d3233203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:58:72:3e:82:17:ae:65:37:b2:f0:30:9f:6e:a8:3b:f9:
         b4:f6:b2:47:2c:72:1e:2e:6c:a7:df:da:47:f4:b2:c3:95:d5:
         61:4a:63:d9:61:79:d6:d7:1b:7e:86:46:e9:cf:fe:b6:ab:40:
         94:16:99:4e:e3:e6:0d:d9:0d:0a:7d:66:9f:d2:a3:82:69:e9:
         9b:91:2b:1f:db:62:3c:63:53:41:8a:68:94:17:1d:2e:7a:e3:
         ac:e8:65:67:31:25:06:bc:7e:e6:dc:44:2e:42:2b:31:8d:46:
         27:b0:ce:83:2a:07:d2:3e:fd:c1:80:ae:93:b6:2b:56:b6:d6:
         38:a2:65:a7:dd:e9:2b:cc:11:48:ef:4e:b8:1d:21:44:17:34:
         7a:ab:b1:af:af:d1:ff:c3:f4:43:7a:fc:02:93:5c:7b:f7:0d:
         f0:9f:5e:b3:86:b8:9f:71:6e:ab:c2:ac:88:88:90:86:73:00:
         eb:e5:b2:41:91:f2:40:0b:6a:86:c6:d0:7a:ad:88:e2:6b:26:
         84:e7:7b:47:f0:0f:9b:d1:a9:4d:ca:8e:04:25:f9:a6:01:3a:
         8c:7a:91:68:32:f3:a8:42:e0:b5:91:6f:51:16:07:ef:69:52:
         e1:91:da:c6:de:de:0e:85:31:b7:7a:49:2b:6b:b3:f9:f0:e3:
         7c:e9:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:14:29 2026 by rpki-client