Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139352e302f32342d3234203d3e203532343638.roa
File:                     3138352e39312e3139352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          PQuRM8e7PQsXqW/kZK3DMFv1Sri2mVYQCHgmfLgC2Zk=
Subject key identifier:   AD:C7:85:45:E0:48:49:51:A7:77:F7:EB:8E:72:F6:EB:FA:07:B3:72
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       2918CADE5F1D62D2FE0BB5567EDF27F3F3F4A74F
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139352e302f32342d3234203d3e203532343638.roa
Signing time:             Sat 29 Aug 2026 03:00:08 +0000
ROA not before:           Sat 29 Aug 2026 02:55:08 +0000
ROA not after:            Sat 28 Aug 2027 03:00:08 +0000
asID:                     52468
IP address blocks:        185.91.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 01:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:18:ca:de:5f:1d:62:d2:fe:0b:b5:56:7e:df:27:f3:f3:f4:a7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:55:08 2026 GMT
            Not After : Aug 28 03:00:08 2027 GMT
        Subject: CN=ADC78545E0484951A777F7EB8E72F6EBFA07B372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:cf:fb:c2:e1:d8:3c:c1:62:d9:35:1d:ca:
                    c2:45:8b:69:1e:de:cb:2b:16:88:f6:09:b2:e1:bf:
                    3a:7a:1f:d2:99:87:af:96:28:94:d2:56:62:c4:ff:
                    27:88:e7:14:f0:9d:6f:87:e8:30:b3:24:2e:76:82:
                    9d:06:90:01:02:09:f4:e1:49:7c:bb:56:38:86:f2:
                    45:a9:17:ca:7c:d3:a1:54:cd:1f:65:06:bb:a8:e9:
                    c7:c5:a1:80:66:44:6a:bd:c7:86:bc:4a:77:a9:21:
                    76:84:df:b8:4e:18:c9:7e:3d:a7:21:a7:49:1a:38:
                    5c:04:06:e3:66:e7:ed:37:28:d6:b2:a3:60:51:69:
                    c8:b4:5d:46:88:66:86:3e:74:7c:08:f7:9c:9c:e2:
                    6e:ab:4b:ad:67:f2:2e:c6:3a:73:03:2b:0a:fd:03:
                    6e:fc:d4:be:db:5a:89:2d:9d:66:90:b3:b6:cd:47:
                    b0:33:56:ce:83:d3:81:93:7e:34:ea:05:42:45:16:
                    2a:55:96:c6:a1:6b:cb:cf:1f:ae:75:e3:7e:c9:34:
                    9b:fa:b7:cc:5e:15:6f:a1:b2:31:a4:ed:d5:11:fb:
                    4b:e8:67:a3:a7:54:99:ed:05:cc:ac:8e:81:bd:5e:
                    68:ab:4c:d0:76:8d:dc:d7:ca:f8:36:40:04:63:66:
                    37:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C7:85:45:E0:48:49:51:A7:77:F7:EB:8E:72:F6:EB:FA:07:B3:72
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e39312e3139352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:1e:90:13:dc:6c:e9:cb:6e:04:98:ea:e6:95:c3:2e:3b:
         25:ec:75:36:8a:1d:f7:d1:ea:1f:57:8d:cc:d4:08:ef:7e:53:
         89:09:bb:03:93:6d:86:3d:f2:d8:de:7d:05:ae:1f:95:90:52:
         f2:9a:dc:1e:89:fc:d3:89:e9:f5:04:fb:84:9e:44:36:99:da:
         d6:02:c5:44:94:44:d4:cf:1d:0f:6c:f5:0e:14:54:cf:58:40:
         a2:89:47:16:1d:dd:38:7f:9d:3f:3c:d7:7f:15:e9:a9:2d:1b:
         07:76:7d:3b:ac:a1:cb:78:f1:8e:eb:44:e9:a4:72:d1:f7:3b:
         b4:b1:10:31:dd:b4:f1:65:42:fc:7a:5e:86:45:e7:81:a0:5c:
         c7:90:a0:4b:ad:67:7a:6b:83:de:db:b1:02:90:a5:6b:a8:18:
         f4:24:32:c0:78:da:da:7a:d3:ff:5d:77:cc:ed:3f:5b:d9:6a:
         de:5a:b8:8a:31:d9:d2:6d:25:61:00:df:ea:d5:30:f3:da:08:
         7e:5f:2b:18:07:97:91:f7:b1:51:5f:77:2f:c2:4b:33:37:a9:
         fc:82:42:43:4d:c2:2c:be:24:da:f2:5e:86:6d:e2:d0:2b:10:
         c5:d8:0b:c7:84:17:71:c1:84:d6:fc:31:5f:ba:0d:eb:ad:0b:
         46:87:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:06:14 2026 by rpki-client