Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136342e302f32322d3234203d3e20323639383232.roa
File:                     3138352e3130342e3136342e302f32322d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          8iO7+PucUrnfsPM/MNuiLlEqPzUPBiMOQXdLe9Mw4wk=
Subject key identifier:   A1:A9:1C:02:F0:9B:2A:67:8D:55:C7:75:8C:8D:A7:4D:14:C6:B9:E5
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       4D897EEFF26F04527C7117CB13BB918A3D88B34E
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136342e302f32322d3234203d3e20323639383232.roa
Signing time:             Wed 20 May 2026 02:00:00 +0000
ROA not before:           Wed 20 May 2026 01:55:00 +0000
ROA not after:            Wed 19 May 2027 02:00:00 +0000
asID:                     269822
IP address blocks:        185.104.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:89:7e:ef:f2:6f:04:52:7c:71:17:cb:13:bb:91:8a:3d:88:b3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: May 20 01:55:00 2026 GMT
            Not After : May 19 02:00:00 2027 GMT
        Subject: CN=A1A91C02F09B2A678D55C7758C8DA74D14C6B9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:7d:21:0f:c2:2a:d1:69:c3:10:f2:d2:62:
                    2f:52:71:79:70:74:af:9c:df:de:c4:bf:4c:e4:5c:
                    a7:7b:59:05:2f:e7:01:a8:2b:9d:f8:a2:84:3c:f2:
                    d5:4f:7c:8a:82:5d:71:6f:e4:5d:af:4d:cc:05:cd:
                    ed:6f:e6:f1:e0:40:10:d9:d8:2d:1a:48:50:6d:99:
                    20:cb:ff:05:31:7c:26:84:13:ef:4d:34:eb:27:42:
                    cf:f9:6d:51:2d:37:08:5e:b6:33:e4:a8:d0:f8:31:
                    ff:57:bd:45:c3:2d:af:44:f6:23:61:e5:09:ad:a0:
                    b4:e7:95:3e:9a:ed:60:e6:f1:4f:5c:b4:cb:fe:ea:
                    25:22:bb:21:14:61:8b:12:e9:6e:c4:70:0b:8a:a0:
                    86:fd:b3:66:47:0c:54:30:01:8a:e6:70:1e:c2:b6:
                    b6:30:68:a2:94:c3:17:9a:78:38:70:d2:9d:08:6c:
                    40:9c:6f:bd:c6:03:25:9b:e9:32:79:75:7d:22:ad:
                    24:04:4e:fa:32:d5:3e:2a:39:ac:49:a9:20:f9:22:
                    28:fc:01:2d:51:b3:a9:12:4b:ee:ab:2b:68:8c:a5:
                    e0:5f:0a:37:d8:4d:5e:34:48:89:8c:9f:c0:6b:f2:
                    e5:3a:55:fb:f7:d5:7a:88:2c:18:cc:39:c0:bc:50:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A9:1C:02:F0:9B:2A:67:8D:55:C7:75:8C:8D:A7:4D:14:C6:B9:E5
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3138352e3130342e3136342e302f32322d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:f9:da:de:34:54:79:0a:69:f0:b8:03:fe:21:05:42:d1:
         f3:d5:43:06:db:62:73:00:1b:bf:32:0d:ca:af:3f:ef:3b:2c:
         b7:a1:aa:3b:b5:68:d8:4b:4f:60:5a:1b:d3:a4:bf:e1:66:1a:
         86:4c:60:03:26:de:e6:6d:58:7c:36:ca:da:1f:4d:63:5f:27:
         6e:68:dd:2f:6f:1a:45:b0:e7:8f:de:43:17:ba:bb:79:0c:d7:
         e0:fc:55:9d:0b:34:7c:40:86:42:40:5b:a0:09:c4:ad:53:3c:
         e6:7c:fd:95:d8:14:99:77:a4:bf:66:83:d3:df:52:4a:1f:4a:
         50:aa:91:cb:1e:c0:6a:5d:10:84:1e:e3:ec:33:0c:a3:e9:93:
         5a:dd:65:54:a2:69:6f:10:71:7c:2b:a0:5f:e2:a2:1e:ff:b8:
         1b:13:ff:6d:79:ff:2b:57:84:84:80:22:39:b2:b3:67:9d:b8:
         fd:3d:05:dc:27:d1:e1:17:9b:b0:3e:0c:fd:5f:10:bb:e3:40:
         22:12:a9:55:67:2f:49:30:96:ec:4e:ed:a7:9a:47:61:49:16:
         a4:74:77:67:45:5e:79:29:ef:80:32:10:9d:e1:e1:ba:2d:c1:
         25:67:c3:33:92:d8:39:29:a2:1a:14:93:fe:89:de:92:a7:fb:
         30:ab:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:32:33 2026 by rpki-client