Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS16528.roa
File:                     AS16528.roa (raw, json)
Hash identifier:          3Goqhep+LCX28xs7BH8iEGOFu+JO1ZZqWwPG+3hlrW8=
Subject key identifier:   AF:EA:F5:72:54:52:E5:65:7A:06:EC:77:71:CE:57:1A:22:59:06:25
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       7AA3AFB61BE7E7FBB33605C1232E2B350EA51A48
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS16528.roa
Signing time:             Fri 27 Mar 2026 21:05:03 +0000
ROA not before:           Fri 27 Mar 2026 21:00:03 +0000
ROA not after:            Fri 26 Mar 2027 21:05:03 +0000
asID:                     16528
IP address blocks:        190.216.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:af:b6:1b:e7:e7:fb:b3:36:05:c1:23:2e:2b:35:0e:a5:1a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 27 21:00:03 2026 GMT
            Not After : Mar 26 21:05:03 2027 GMT
        Subject: CN=AFEAF5725452E5657A06EC7771CE571A22590625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:c2:8a:1c:51:0e:58:7b:aa:55:ef:4e:ca:
                    df:8f:d1:09:35:93:ed:9d:f6:9d:c1:ae:7b:f7:90:
                    17:e8:3a:8c:4e:e2:67:06:8f:a8:91:00:e1:33:a4:
                    d1:9a:f6:a0:15:b2:1b:e7:de:9c:a3:7d:f4:46:da:
                    08:c6:cd:28:42:7f:54:51:f3:79:41:10:e5:1c:f0:
                    f4:f1:61:14:8a:94:17:1d:ad:ba:25:dc:e6:dc:16:
                    b6:a7:b7:26:b7:21:20:ae:ab:ff:12:ee:4f:f1:a0:
                    3a:7c:7d:73:1d:d9:04:b9:15:f5:43:d3:fa:e8:fa:
                    79:9d:48:3b:af:c6:65:22:97:a9:72:f1:99:f7:21:
                    92:fa:45:6d:39:38:86:cb:7a:84:ff:34:41:5a:71:
                    cf:a4:e7:c6:4f:61:56:fa:21:85:06:93:16:38:58:
                    4e:00:bc:69:d6:e6:1d:c2:57:c8:60:b2:a3:d6:96:
                    6a:92:03:11:25:af:be:1d:fe:45:64:ac:22:bb:61:
                    dc:51:ea:2e:06:19:89:76:93:de:53:8a:e6:d2:b0:
                    6b:04:9d:2a:77:7c:58:23:bb:84:0c:bb:0c:ac:16:
                    72:12:83:87:6f:e7:ae:c8:11:54:51:8a:72:7a:dd:
                    bb:02:d4:de:46:40:80:df:64:a3:4f:8f:ec:6f:b9:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EA:F5:72:54:52:E5:65:7A:06:EC:77:71:CE:57:1A:22:59:06:25
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS16528.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:00:82:92:a3:3d:69:8f:c7:97:93:c1:b1:01:3d:fe:f3:46:
         a5:cd:a2:53:1b:7b:31:f7:da:fb:cb:ea:7a:5a:84:79:c1:47:
         39:e6:aa:79:04:a3:a3:16:31:54:70:a7:ac:cd:6b:6c:6f:58:
         ae:d3:d9:1d:f9:41:2e:8f:7a:f0:d3:9f:3c:0b:a3:92:f6:69:
         e8:6a:52:9f:a8:59:eb:43:f8:54:0d:3b:50:4f:76:84:83:30:
         70:53:76:98:35:ff:7a:fb:0a:69:4f:b4:62:df:1a:02:d5:de:
         e9:12:68:d8:27:b0:51:c2:93:02:7d:5d:14:79:15:00:04:ac:
         28:99:e0:75:15:5b:bc:a4:22:08:4d:7e:bb:ee:d5:45:b4:7b:
         a1:06:76:da:e2:76:32:5a:58:14:a5:b7:7f:8c:62:38:4d:64:
         1f:94:31:9e:3c:24:23:51:90:72:f2:91:b1:bc:40:5f:8b:c1:
         46:56:2e:91:2e:bc:16:3a:02:35:c0:dc:9f:0a:2c:47:36:db:
         d4:e8:0e:f0:2a:88:6a:a9:43:97:a7:1c:05:03:34:2b:3c:0c:
         f0:e4:61:7a:c2:ae:e9:6a:da:e1:75:c9:86:06:8a:98:b8:b2:
         5d:0d:bd:c3:5a:50:ba:41:23:b2:14:24:89:f1:14:b3:08:bd:
         5f:ed:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:28 2026 by rpki-client