Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34322e302f32342d3234203d3e20323732303836.roa
File:                     3138392e38352e34322e302f32342d3234203d3e20323732303836.roa (raw, json)
Hash identifier:          Esg2l89nrZUIjWbuLndoZdzQ9iD/FtDG7+Llti6o03E=
Subject key identifier:   03:5F:1E:CB:2E:35:34:C7:0B:A3:F4:47:4D:48:5F:A3:44:09:A9:41
Certificate issuer:       /CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
Certificate serial:       022058258A9922555EE9B78762B410B2F9DE1D87
Authority key identifier: E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34322e302f32342d3234203d3e20323732303836.roa
Signing time:             Tue 02 Jun 2026 17:45:11 +0000
ROA not before:           Tue 02 Jun 2026 17:40:11 +0000
ROA not after:            Tue 01 Jun 2027 17:45:11 +0000
asID:                     272086
IP address blocks:        189.85.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:58:25:8a:99:22:55:5e:e9:b7:87:62:b4:10:b2:f9:de:1d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
        Validity
            Not Before: Jun  2 17:40:11 2026 GMT
            Not After : Jun  1 17:45:11 2027 GMT
        Subject: CN=035F1ECB2E3534C70BA3F4474D485FA34409A941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:83:65:66:53:8a:8c:a2:5f:52:07:53:9d:
                    c9:b1:1e:c1:c5:ce:1c:e1:d7:b6:2c:b9:27:05:06:
                    e3:0d:02:d4:b9:48:b6:44:1b:a4:a4:87:40:c0:b1:
                    29:04:9e:50:4c:2a:ff:93:7e:c5:06:de:ac:81:f5:
                    9f:79:0b:b4:8b:9d:05:b3:a5:49:1c:af:93:65:60:
                    bf:31:fc:c8:9f:6e:7e:09:42:51:0b:bc:8b:9d:40:
                    d4:3a:72:27:f3:9c:e9:dd:84:71:52:5a:cc:da:e7:
                    74:7b:bf:8a:c6:14:7e:4f:f7:af:6c:e3:45:a9:25:
                    7f:b3:6b:b0:44:3c:f6:eb:ea:e4:9b:59:38:66:21:
                    47:9d:89:ff:28:54:7c:b0:9e:61:7b:8c:c3:8c:3a:
                    68:c0:10:0f:fd:bf:8c:eb:00:9c:6e:d2:f9:27:ce:
                    83:55:de:42:54:34:a9:67:be:40:c7:3f:36:5f:74:
                    36:28:a4:0f:6b:8a:88:cd:14:45:df:c6:54:30:85:
                    10:c2:f2:73:8d:2e:21:31:3b:72:2e:1d:25:f9:41:
                    e3:97:36:53:c3:e5:74:b4:9a:85:02:14:5f:ea:37:
                    c3:c1:cc:84:7d:71:db:94:fb:27:b1:9f:7f:32:fa:
                    c6:4f:a0:36:ef:e2:1a:bf:a1:89:55:4c:9b:2b:1c:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5F:1E:CB:2E:35:34:C7:0B:A3:F4:47:4D:48:5F:A3:44:09:A9:41
            X509v3 Authority Key Identifier:
                keyid:E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34322e302f32342d3234203d3e20323732303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:1b:83:68:2c:63:cb:99:4d:9b:d4:da:27:11:3d:8c:6c:
         21:46:5f:5d:e4:b5:b8:81:bc:87:15:34:01:cf:ea:52:23:f5:
         d0:98:12:16:db:ed:ca:b9:c4:a7:f7:83:df:12:8c:a8:e5:83:
         58:fc:fa:9b:0f:f0:69:1f:97:70:ea:08:6e:73:ed:3b:6c:47:
         09:4a:a5:8c:e8:2b:6b:c0:21:36:c0:86:5d:ad:ea:ce:9a:22:
         99:70:8c:f4:99:4e:69:8c:d0:b9:74:c6:e3:8b:ad:1a:9b:aa:
         55:69:55:72:d0:bf:66:83:46:33:3f:2f:69:ba:95:aa:85:d9:
         e6:26:c0:23:fb:62:03:87:ce:96:6c:55:04:10:11:00:4a:ab:
         17:54:6a:e3:fb:b9:b3:ee:96:1d:ae:86:39:d3:9b:79:c3:f4:
         a2:d8:a8:ef:1f:77:42:d3:d6:e0:8f:a7:b0:3b:90:1c:3d:a5:
         3c:19:9e:61:78:36:ca:12:04:ea:20:71:77:1f:94:7b:d0:07:
         a9:40:d4:6a:8b:e9:3f:9c:03:3d:52:09:9c:0f:35:49:ad:ea:
         f9:2f:bc:9f:2d:49:a8:3f:63:04:46:50:ad:c1:68:db:d4:39:
         69:52:e0:29:66:6a:2f:32:94:88:d0:f7:78:34:e1:6f:1c:69:
         1b:94:ca:49
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAiBYJYqZIlVe6beHYrQQsvneHYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBFN0NEMTM1M0YxMENCMDAxMDdCMTNDQjVGMjVGMjgz
RjUxNDQ5NzAeFw0yNjA2MDIxNzQwMTFaFw0yNzA2MDExNzQ1MTFaMDMxMTAvBgNV
BAMTKDAzNUYxRUNCMkUzNTM0QzcwQkEzRjQ0NzRENDg1RkEzNDQwOUE5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShoNlZlOKjKJfUgdTncmxHsHF
zhzh17YsuScFBuMNAtS5SLZEG6Skh0DAsSkEnlBMKv+TfsUG3qyB9Z95C7SLnQWz
pUkcr5NlYL8x/Mifbn4JQlELvIudQNQ6cifznOndhHFSWsza53R7v4rGFH5P969s
40WpJX+za7BEPPbr6uSbWThmIUedif8oVHywnmF7jMOMOmjAEA/9v4zrAJxu0vkn
zoNV3kJUNKlnvkDHPzZfdDYopA9riojNFEXfxlQwhRDC8nONLiExO3IuHSX5QeOX
NlPD5XS0moUCFF/qN8PBzIR9cduU+yexn38y+sZPoDbv4hq/oYlVTJsrHDOhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUA18eyy41NMcLo/RHTUhfo0QJqUEwHwYDVR0j
BBgwFoAU4OfNE1PxDLABB7E8tfJfKD9RRJcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTZEOEI2MjNDNTVBNkI1QkQ4QTlFOUM4MkQ0MkM1OTQx
NjgxM0UwQTA0NTYyNzc3NzE4NjM1QzM3QzdCQ0QxLzAvRTBFN0NEMTM1M0YxMENC
MDAxMDdCMTNDQjVGMjVGMjgzRjUxNDQ5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMEU3Q0QxMzUzRjEwQ0IwMDEw
N0IxM0NCNUYyNUYyODNGNTE0NDk3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEU2RDhCNjIzQzU1QTZCNUJEOEE5RTlDODJENDJDNTk0MTY4MTNFMEEw
NDU2Mjc3NzcxODYzNUMzN0M3QkNEMS8wLzMxMzgzOTJlMzgzNTJlMzQzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjMwMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1VKjAN
BgkqhkiG9w0BAQsFAAOCAQEAOrQbg2gsY8uZTZvU2icRPYxsIUZfXeS1uIG8hxU0
Ac/qUiP10JgSFtvtyrnEp/eD3xKMqOWDWPz6mw/waR+XcOoIbnPtO2xHCUqljOgr
a8AhNsCGXa3qzpoimXCM9JlOaYzQuXTG44utGpuqVWlVctC/ZoNGMz8vabqVqoXZ
5ibAI/tiA4fOlmxVBBARAEqrF1Rq4/u5s+6WHa6GOdObecP0otio7x93QtPW4I+n
sDuQHD2lPBmeYXg2yhIE6iBxdx+Ue9AHqUDUaovpP5wDPVIJnA81Sa3q+S+8ny1J
qD9jBEZQrcFo29Q5aVLgKWZqLzKUiND3eDThbxxpG5TKSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:43:36 2026 by rpki-client