Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa
File:                     3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa (raw, json)
Hash identifier:          TrDq9jLSxmA18bTxfxsQNMEGurcH12H+mtmI6j5y5xg=
Subject key identifier:   F0:D1:63:B1:46:AA:EC:E3:5B:AA:B9:0A:F2:79:2C:E3:20:7D:FC:4F
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       6AAC26D572E1A039A2C42612C024EDF3E59AA2B9
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa
Signing time:             Wed 01 Jul 2026 19:15:00 +0000
ROA not before:           Wed 01 Jul 2026 19:10:00 +0000
ROA not after:            Wed 30 Jun 2027 19:15:00 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ac:26:d5:72:e1:a0:39:a2:c4:26:12:c0:24:ed:f3:e5:9a:a2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Jul  1 19:10:00 2026 GMT
            Not After : Jun 30 19:15:00 2027 GMT
        Subject: CN=F0D163B146AAECE35BAAB90AF2792CE3207DFC4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:24:5e:a8:9c:20:6d:02:69:6b:a0:de:77:
                    fe:27:a8:57:51:28:e9:4f:0f:5d:71:6d:c0:ca:35:
                    be:09:ae:01:09:73:72:2b:cb:28:81:23:7f:fd:46:
                    5a:fe:01:e9:f0:b4:6d:25:6a:d3:70:ed:19:25:21:
                    be:8d:91:18:bf:77:a1:57:22:59:db:80:58:a0:3b:
                    a2:75:af:14:c0:3a:0f:c0:32:81:a7:ee:69:b4:1c:
                    0c:bc:c6:52:7a:81:2f:c6:9c:24:20:23:0c:23:5d:
                    38:8e:f6:4d:e2:3b:7e:57:3a:87:29:f6:08:2a:4d:
                    2d:ba:37:67:8e:96:04:b1:1f:87:d5:dd:59:0d:12:
                    12:3e:6f:3d:30:87:46:4d:07:80:11:40:4b:fc:f0:
                    87:a1:2d:77:b6:e0:0d:ae:68:14:ff:d4:ca:e6:28:
                    76:4e:36:11:fa:4b:49:76:b3:25:6f:a5:01:3a:46:
                    77:d5:ee:bb:33:db:1b:44:40:ef:e2:1f:ad:c0:fe:
                    05:67:9d:71:a5:56:5d:e6:27:2b:de:20:07:60:5a:
                    da:df:f6:a6:84:55:d7:3e:8b:52:cb:d5:fa:05:2c:
                    f0:da:35:d1:d0:30:b0:9f:09:36:4e:ce:dc:34:40:
                    65:89:e8:d1:e3:88:7c:87:9f:e4:21:df:68:65:de:
                    4f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D1:63:B1:46:AA:EC:E3:5B:AA:B9:0A:F2:79:2C:E3:20:7D:FC:4F
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:05:f2:71:62:4c:01:0f:76:9c:17:2e:aa:36:af:f1:fc:
         4c:c4:8f:79:a6:1b:54:59:49:d4:7c:92:dd:2b:c4:3f:99:8f:
         f0:57:33:40:e6:6d:66:07:c7:d9:3a:85:7f:6f:c1:05:a8:50:
         67:19:da:3e:55:ef:35:c5:42:05:db:8b:c7:7d:aa:ab:e4:33:
         f1:8e:82:6c:02:0d:81:16:15:df:98:c8:8b:dd:b6:67:5c:44:
         f8:79:cc:9c:56:52:0c:54:6f:14:99:4f:0a:21:29:c7:90:3b:
         47:14:00:89:a1:c0:66:c6:d8:ec:26:cf:df:5a:0a:34:cc:d4:
         f6:f1:c5:38:83:ed:04:ff:ac:8c:70:e8:c4:f4:9f:43:07:7e:
         24:83:5e:55:a9:16:6f:0c:75:b7:c5:12:09:9b:df:39:7c:ee:
         50:0a:ae:83:70:de:10:9c:f4:a0:76:15:a9:22:86:7a:82:e8:
         3c:dc:f2:23:82:d1:0b:67:7c:1c:59:95:05:02:86:f3:b3:45:
         ba:62:f6:f4:6e:52:7d:da:cc:d4:32:db:7c:50:27:0a:76:32:
         b1:c6:02:aa:c3:a0:c0:42:b9:dd:5c:1d:6c:fb:bb:38:58:26:
         54:d7:65:11:01:c3:56:e9:01:0b:fd:1a:15:3b:86:7f:3f:83:
         1d:8c:bb:37
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUaqwm1XLhoDmixCYSwCTt8+WaorkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjA3MDExOTEwMDBaFw0yNzA2MzAxOTE1MDBaMDMxMTAvBgNV
BAMTKEYwRDE2M0IxNDZBQUVDRTM1QkFBQjkwQUYyNzkyQ0UzMjA3REZDNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLACReqJwgbQJpa6Ded/4nqFdR
KOlPD11xbcDKNb4JrgEJc3IryyiBI3/9Rlr+AenwtG0latNw7RklIb6NkRi/d6FX
IlnbgFigO6J1rxTAOg/AMoGn7mm0HAy8xlJ6gS/GnCQgIwwjXTiO9k3iO35XOocp
9ggqTS26N2eOlgSxH4fV3VkNEhI+bz0wh0ZNB4ARQEv88IehLXe24A2uaBT/1Mrm
KHZONhH6S0l2syVvpQE6RnfV7rsz2xtEQO/iH63A/gVnnXGlVl3mJyveIAdgWtrf
9qaEVdc+i1LL1foFLPDaNdHQMLCfCTZOztw0QGWJ6NHjiHyHn+Qh32hl3k9zAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU8NFjsUaq7ONbqrkK8nks4yB9/E8wHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzODM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHJ
2/wwDQYJKoZIhvcNAQELBQADggEBABvZBfJxYkwBD3acFy6qNq/x/EzEj3mmG1RZ
SdR8kt0rxD+Zj/BXM0DmbWYHx9k6hX9vwQWoUGcZ2j5V7zXFQgXbi8d9qqvkM/GO
gmwCDYEWFd+YyIvdtmdcRPh5zJxWUgxUbxSZTwohKceQO0cUAImhwGbG2Owmz99a
CjTM1PbxxTiD7QT/rIxw6MT0n0MHfiSDXlWpFm8MdbfFEgmb3zl87lAKroNw3hCc
9KB2FakihnqC6Dzc8iOC0QtnfBxZlQUChvOzRbpi9vRuUn3azNQy23xQJwp2MrHG
AqrDoMBCud1cHWz7uzhYJlTXZREBw1bpAQv9GhU7hn8/gx2Muzc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:32:27 2026 by rpki-client