Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34332e302f32342d3234203d3e20323732303836.roa
File:                     3138392e38352e34332e302f32342d3234203d3e20323732303836.roa (raw, json)
Hash identifier:          yI/mJmofqGZ29iwFKEqk+egFDNK+TZerpjqAVCIKhno=
Subject key identifier:   88:E7:15:6A:8B:2A:9C:6A:BC:E4:7E:8F:CA:04:E3:46:98:6F:6A:4F
Certificate issuer:       /CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
Certificate serial:       26D654C3997CD6FA99C486C4E7234004357BCA6F
Authority key identifier: E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34332e302f32342d3234203d3e20323732303836.roa
Signing time:             Tue 02 Jun 2026 17:45:12 +0000
ROA not before:           Tue 02 Jun 2026 17:40:12 +0000
ROA not after:            Tue 01 Jun 2027 17:45:12 +0000
asID:                     272086
IP address blocks:        189.85.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d6:54:c3:99:7c:d6:fa:99:c4:86:c4:e7:23:40:04:35:7b:ca:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
        Validity
            Not Before: Jun  2 17:40:12 2026 GMT
            Not After : Jun  1 17:45:12 2027 GMT
        Subject: CN=88E7156A8B2A9C6ABCE47E8FCA04E346986F6A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:4e:d0:b0:f4:7a:28:e6:29:0a:77:fe:d6:
                    54:c4:28:93:72:3d:ab:9e:b7:cc:3e:07:59:54:ab:
                    4d:b6:d8:91:92:37:8c:2f:70:c6:92:68:a1:3e:31:
                    51:b5:fa:8d:34:ab:e2:41:de:0e:0f:90:9f:51:47:
                    18:26:55:79:a8:fa:1d:92:88:d2:61:a0:e0:6a:f6:
                    af:7f:1d:46:71:45:34:7f:fe:a4:f8:73:99:07:2c:
                    f0:0a:00:3d:ad:9d:ad:97:4d:8e:9c:cb:c4:73:fa:
                    e2:71:f6:e8:c9:1f:8e:05:5f:96:97:66:3f:2e:01:
                    e8:36:a6:e5:44:01:45:de:f0:cc:15:e1:b7:1b:c3:
                    8f:1d:3d:ed:65:0f:9f:c9:33:b6:5c:0d:af:87:61:
                    49:8e:de:9a:7d:ea:ca:7e:df:46:9a:cf:8f:1e:2d:
                    ae:6e:30:b4:d6:9d:9c:40:b0:99:15:83:b3:37:16:
                    09:c1:89:a6:da:bf:16:d7:80:4b:0c:35:04:2c:ae:
                    fb:dc:71:b3:08:91:de:af:d5:29:66:bf:e2:df:3a:
                    35:df:e6:08:81:4c:1e:13:4a:3e:61:c9:86:b0:09:
                    a5:47:ec:51:94:08:a4:c0:65:f2:73:e2:18:b1:eb:
                    3e:e4:f4:04:50:4f:b7:45:a8:22:17:72:8b:6f:b5:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:15:6A:8B:2A:9C:6A:BC:E4:7E:8F:CA:04:E3:46:98:6F:6A:4F
            X509v3 Authority Key Identifier:
                keyid:E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34332e302f32342d3234203d3e20323732303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:fa:39:3a:ef:e6:b5:93:eb:ca:73:b4:ca:75:e7:ec:36:b9:
         55:b5:48:64:38:cb:e4:f6:43:23:c7:d6:23:96:ed:a5:e9:d1:
         4f:bd:b7:84:9e:8b:98:32:f8:bc:0f:72:a3:b2:1f:78:c1:b6:
         47:2f:74:c2:5c:9b:81:e4:57:d0:e7:a2:7c:bb:58:2c:d0:2a:
         c1:66:de:14:78:f7:82:4b:62:b3:57:c2:53:97:79:52:cb:fa:
         c2:c6:db:f3:37:f2:53:62:52:31:fc:d3:4f:d3:b0:4b:73:89:
         f4:3f:93:1e:48:be:43:27:86:a0:7b:87:80:12:5b:4d:2f:cc:
         34:94:e0:93:d3:53:99:54:73:a0:7f:f4:3c:8d:41:f3:b7:c2:
         7d:f8:78:66:bf:c7:fd:f6:7b:5c:5b:52:38:63:e0:ce:f7:a5:
         12:10:28:2e:78:2e:c7:e5:db:2c:ed:8f:e3:f4:76:cb:d5:56:
         6e:d7:e6:92:4c:f5:0e:42:d8:50:c9:3e:38:0d:06:ea:4f:e4:
         06:a8:89:ff:ba:8c:5b:0c:7a:97:bf:f2:12:f6:4f:dd:ca:6d:
         c5:46:8f:a8:6a:b1:62:f5:67:31:01:d6:37:e8:0d:dd:60:6a:
         9a:53:85:b7:a3:78:51:d1:3c:bb:28:b8:a9:03:01:2f:47:7a:
         1e:a2:3c:c7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJtZUw5l81vqZxIbE5yNABDV7ym8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBFN0NEMTM1M0YxMENCMDAxMDdCMTNDQjVGMjVGMjgz
RjUxNDQ5NzAeFw0yNjA2MDIxNzQwMTJaFw0yNzA2MDExNzQ1MTJaMDMxMTAvBgNV
BAMTKDg4RTcxNTZBOEIyQTlDNkFCQ0U0N0U4RkNBMDRFMzQ2OTg2RjZBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBk7QsPR6KOYpCnf+1lTEKJNy
Pauet8w+B1lUq0222JGSN4wvcMaSaKE+MVG1+o00q+JB3g4PkJ9RRxgmVXmo+h2S
iNJhoOBq9q9/HUZxRTR//qT4c5kHLPAKAD2tna2XTY6cy8Rz+uJx9ujJH44FX5aX
Zj8uAeg2puVEAUXe8MwV4bcbw48dPe1lD5/JM7ZcDa+HYUmO3pp96sp+30aaz48e
La5uMLTWnZxAsJkVg7M3FgnBiabavxbXgEsMNQQsrvvccbMIkd6v1Slmv+LfOjXf
5giBTB4TSj5hyYawCaVH7FGUCKTAZfJz4hix6z7k9ARQT7dFqCIXcotvtfrvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiOcVaosqnGq85H6PygTjRphvak8wHwYDVR0j
BBgwFoAU4OfNE1PxDLABB7E8tfJfKD9RRJcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTZEOEI2MjNDNTVBNkI1QkQ4QTlFOUM4MkQ0MkM1OTQx
NjgxM0UwQTA0NTYyNzc3NzE4NjM1QzM3QzdCQ0QxLzAvRTBFN0NEMTM1M0YxMENC
MDAxMDdCMTNDQjVGMjVGMjgzRjUxNDQ5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMEU3Q0QxMzUzRjEwQ0IwMDEw
N0IxM0NCNUYyNUYyODNGNTE0NDk3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEU2RDhCNjIzQzU1QTZCNUJEOEE5RTlDODJENDJDNTk0MTY4MTNFMEEw
NDU2Mjc3NzcxODYzNUMzN0M3QkNEMS8wLzMxMzgzOTJlMzgzNTJlMzQzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjMwMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1VKzAN
BgkqhkiG9w0BAQsFAAOCAQEAVvo5Ou/mtZPrynO0ynXn7Da5VbVIZDjL5PZDI8fW
I5btpenRT723hJ6LmDL4vA9yo7IfeMG2Ry90wlybgeRX0OeifLtYLNAqwWbeFHj3
gktis1fCU5d5Usv6wsbb8zfyU2JSMfzTT9OwS3OJ9D+THki+QyeGoHuHgBJbTS/M
NJTgk9NTmVRzoH/0PI1B87fCffh4Zr/H/fZ7XFtSOGPgzvelEhAoLngux+XbLO2P
4/R2y9VWbtfmkkz1DkLYUMk+OA0G6k/kBqiJ/7qMWwx6l7/yEvZP3cptxUaPqGqx
YvVnMQHWN+gN3WBqmlOFt6N4UdE8uyi4qQMBL0d6HqI8xw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:43:41 2026 by rpki-client