Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa
File:                     3230312e3232322e34382e302f32312d3234203d3e203238313033.roa (raw, json)
Hash identifier:          45cpgLvJm9hbSHmlhG9TMpHTuvXkMah1rUgB61HInXg=
Subject key identifier:   D4:14:B4:2B:16:C8:B3:83:2C:43:BE:A0:A4:B2:5C:9D:A2:74:30:8E
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       398F8585E327584A0F77EE19F698E2954D978FD2
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa
Signing time:             Mon 15 Jun 2026 13:47:44 +0000
ROA not before:           Mon 15 Jun 2026 13:42:44 +0000
ROA not after:            Mon 14 Jun 2027 13:47:44 +0000
asID:                     28103
IP address blocks:        201.222.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 07:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8f:85:85:e3:27:58:4a:0f:77:ee:19:f6:98:e2:95:4d:97:8f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jun 15 13:42:44 2026 GMT
            Not After : Jun 14 13:47:44 2027 GMT
        Subject: CN=D414B42B16C8B3832C43BEA0A4B25C9DA274308E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:44:7d:10:db:20:f0:32:1b:74:c4:51:7d:
                    4b:04:32:f9:e8:f5:5c:bf:30:5e:ab:62:66:a1:13:
                    06:88:c0:b6:15:b0:44:09:ec:44:32:f6:00:c0:77:
                    88:e5:65:d3:84:cc:fd:0c:33:13:cb:9c:db:05:a4:
                    5e:d6:78:73:45:27:67:81:3f:b9:e4:13:6b:29:e3:
                    c2:ad:11:7e:a9:a4:48:20:f0:b2:cb:cf:25:41:27:
                    e8:b7:c2:01:47:8f:51:ac:da:aa:d7:d6:e2:cc:70:
                    82:b0:42:93:b8:4d:e7:81:c0:1d:7f:22:44:20:1b:
                    11:65:92:b5:ac:c3:d1:ba:0c:2c:76:2f:6f:21:eb:
                    4e:eb:c2:69:3b:58:8b:77:10:ae:85:13:03:f8:a6:
                    32:f1:e8:52:af:7a:2e:ae:90:6a:ca:e1:4e:10:81:
                    3e:b2:33:bb:18:11:e2:e0:3f:de:2b:b1:83:18:f7:
                    97:81:14:65:5d:bc:27:1a:31:d3:e0:27:e4:bc:81:
                    d0:4d:32:74:92:f4:2b:5e:9a:4f:ea:e8:ac:a3:f4:
                    f3:33:12:87:60:27:65:ed:1d:0f:c6:f8:7c:26:52:
                    40:73:c9:2a:0f:3b:15:8a:60:70:e4:68:82:50:3d:
                    d2:6a:e6:ea:3e:cf:47:ad:da:fd:9a:18:5b:5a:91:
                    fa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:B4:2B:16:C8:B3:83:2C:43:BE:A0:A4:B2:5C:9D:A2:74:30:8E
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:77:e0:ca:c5:dd:87:52:5c:b9:12:c2:a4:38:a5:9b:ec:fc:
         b5:a8:d9:72:ef:86:24:19:79:11:74:f7:ad:e3:9c:ee:17:7b:
         ac:8d:c0:62:f8:f6:e2:22:11:e0:63:a1:0c:ab:94:a7:e6:74:
         10:52:40:02:a3:d8:50:eb:55:ea:a4:16:06:0e:9b:8a:6c:0c:
         c6:04:0c:a9:db:8c:62:a1:6f:73:de:78:da:8c:1f:51:81:00:
         37:5f:4f:e0:86:21:2d:80:67:30:3e:82:b8:65:03:d1:cc:89:
         32:49:c6:34:4c:c1:6d:5a:c6:8c:ab:3f:a9:1b:ef:08:09:4e:
         85:a9:6d:58:51:22:9d:45:04:4d:d2:c9:d2:9b:fa:99:df:db:
         1e:e1:4b:8c:7e:f7:b8:c9:15:5e:86:39:6e:81:10:57:a4:4d:
         89:10:35:2a:39:45:54:cf:41:75:50:d0:7f:bb:1c:72:7a:02:
         ff:be:a2:90:8a:0b:46:d1:3a:24:47:46:d8:72:20:f3:be:94:
         32:bb:79:ea:24:67:85:58:ab:f1:a3:a1:bd:2a:14:d4:36:48:
         96:c1:d2:10:93:bd:4d:cd:08:89:1a:82:d8:5c:ff:e2:ee:17:
         13:75:bb:0c:33:16:cc:63:43:cc:4f:f6:ab:72:6e:ba:f6:b0:
         30:15:e8:41
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOY+FheMnWEoPd+4Z9pjilU2Xj9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNjA2MTUxMzQyNDRaFw0yNzA2MTQxMzQ3NDRaMDMxMTAvBgNV
BAMTKEQ0MTRCNDJCMTZDOEIzODMyQzQzQkVBMEE0QjI1QzlEQTI3NDMwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQc0R9ENsg8DIbdMRRfUsEMvno
9Vy/MF6rYmahEwaIwLYVsEQJ7EQy9gDAd4jlZdOEzP0MMxPLnNsFpF7WeHNFJ2eB
P7nkE2sp48KtEX6ppEgg8LLLzyVBJ+i3wgFHj1Gs2qrX1uLMcIKwQpO4TeeBwB1/
IkQgGxFlkrWsw9G6DCx2L28h607rwmk7WIt3EK6FEwP4pjLx6FKvei6ukGrK4U4Q
gT6yM7sYEeLgP94rsYMY95eBFGVdvCcaMdPgJ+S8gdBNMnSS9Ctemk/q6Kyj9PMz
EodgJ2XtHQ/G+HwmUkBzySoPOxWKYHDkaIJQPdJq5uo+z0et2v2aGFtakfo5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1BS0KxbIs4MsQ76gpLJcnaJ0MI4wHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMyMzAzMTJlMzIzMjMyMmUzNDM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8neMDAN
BgkqhkiG9w0BAQsFAAOCAQEABnfgysXdh1JcuRLCpDilm+z8tajZcu+GJBl5EXT3
reOc7hd7rI3AYvj24iIR4GOhDKuUp+Z0EFJAAqPYUOtV6qQWBg6bimwMxgQMqduM
YqFvc9542owfUYEAN19P4IYhLYBnMD6CuGUD0cyJMknGNEzBbVrGjKs/qRvvCAlO
haltWFEinUUETdLJ0pv6md/bHuFLjH73uMkVXoY5boEQV6RNiRA1KjlFVM9BdVDQ
f7sccnoC/76ikIoLRtE6JEdG2HIg876UMrt56iRnhVir8aOhvSoU1DZIlsHSEJO9
Tc0IiRqC2Fz/4u4XE3W7DDMWzGNDzE/2q3JuuvawMBXoQQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:06:43 2026 by rpki-client