Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139342e302f32342d3234203d3e20323639383232.roa
File:                     3138352e39312e3139342e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          l/3UoJ1QGiSet+V4W4O4jC3DoIO7B7QWnPTLsl+H2mw=
Subject key identifier:   D6:60:A2:33:40:E6:6A:E9:D5:DE:B7:B9:53:1D:40:5F:DC:B4:5C:27
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       3DADA00E398AAD870C637137391B37CF4FE28C00
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139342e302f32342d3234203d3e20323639383232.roa
Signing time:             Sat 29 Aug 2026 03:00:02 +0000
ROA not before:           Sat 29 Aug 2026 02:55:02 +0000
ROA not after:            Sat 28 Aug 2027 03:00:02 +0000
asID:                     269822
IP address blocks:        185.91.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ad:a0:0e:39:8a:ad:87:0c:63:71:37:39:1b:37:cf:4f:e2:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:02 2026 GMT
            Not After : Aug 28 03:00:02 2027 GMT
        Subject: CN=D660A23340E66AE9D5DEB7B9531D405FDCB45C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:36:88:3f:31:f0:c1:b7:63:94:27:f1:da:
                    06:bb:05:ee:94:99:6c:87:77:5d:de:4f:f7:85:2d:
                    58:2a:a3:0c:6d:34:26:e8:e6:18:a1:8f:f6:e8:9f:
                    0f:3f:1b:db:1a:d2:a0:d3:eb:f6:06:41:7d:e0:69:
                    bc:4b:95:c4:13:fa:2f:66:fd:05:64:31:e4:85:31:
                    17:39:2c:38:26:b4:d4:45:e7:b0:1d:fa:c6:34:e2:
                    7f:7d:72:3c:59:56:cb:f0:56:96:8d:03:e4:ff:8b:
                    b5:a2:75:e1:aa:f2:9f:7a:61:16:74:99:f7:67:77:
                    6c:41:9a:0f:c6:ae:79:b7:57:96:6d:41:71:b2:70:
                    ad:45:68:3d:0f:30:43:24:40:29:23:1b:16:cc:07:
                    42:f6:3b:49:af:3d:d1:2c:25:e8:1a:19:8d:b1:62:
                    a3:84:e9:9f:bd:00:42:b1:d5:fb:0c:87:84:37:04:
                    91:e2:ec:4a:a4:19:e2:04:30:be:5f:d8:3e:2d:24:
                    11:d0:a4:88:9e:b9:36:a7:43:c2:0a:15:2e:39:dd:
                    5f:99:c9:bb:51:8e:cf:df:8f:c8:df:8c:0f:7d:63:
                    aa:b0:6b:d6:b8:ec:0b:da:82:58:91:f2:e3:da:be:
                    ea:89:b4:42:44:bd:b9:4e:b2:aa:0a:7d:63:8b:08:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:60:A2:33:40:E6:6A:E9:D5:DE:B7:B9:53:1D:40:5F:DC:B4:5C:27
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139342e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:bd:89:96:f0:72:da:e6:c5:cf:c3:c5:c7:7e:73:57:7f:37:
         55:f9:a7:ca:b7:c5:16:46:44:96:e6:03:ad:0b:b3:e9:c0:30:
         f9:24:48:0f:7f:f1:a9:7e:a1:3b:af:8a:27:85:d3:52:0c:ae:
         9f:9f:7b:4b:8f:62:0f:0c:0f:92:3d:ca:56:1c:8a:bd:a2:89:
         78:23:e6:52:c7:8a:fb:ae:39:89:77:d7:e7:e2:87:a8:98:cb:
         c6:0b:1d:26:9f:96:c4:c6:85:2d:a0:ee:0b:33:a5:48:a1:5c:
         0c:e6:3a:19:07:f8:b6:00:a1:32:9e:40:d0:4c:0f:8c:6c:46:
         fa:c2:47:bc:68:8b:7c:27:82:b6:b4:e8:d5:81:f5:c8:f3:10:
         94:26:9b:61:44:bf:97:a2:e1:7a:ff:44:e8:a6:e2:96:57:fa:
         6b:35:36:34:f8:5a:78:df:30:7f:10:d4:ad:f9:92:ee:e8:86:
         95:e8:fd:d0:72:16:f0:40:e4:86:d9:e4:9e:60:f1:a3:f6:aa:
         d0:f5:c7:96:6f:83:eb:ae:f3:cb:1f:74:6a:a1:4a:98:4c:ed:
         62:b2:19:b1:cb:30:cf:3b:91:e0:08:c6:64:00:5c:e1:ec:37:
         96:a1:da:ea:d9:3f:8a:a2:19:55:bf:43:a2:fa:f0:e4:38:d4:
         0f:6d:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:20:06 2026 by rpki-client