Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa
File:                     3230312e3232302e33322e302f31392d3234203d3e203134313837.roa (raw, json)
Hash identifier:          xIqHj6P0/MEhalINeEoU1uhpElUjz5NSToJr+ysydcQ=
Subject key identifier:   FE:DA:FE:90:9E:CF:77:4F:05:5B:2B:DD:8D:17:D8:C2:A9:5A:CC:D2
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       029B8BC2ED054B17CA3FEBC4D92DC812FAE1D845
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa
Signing time:             Tue 27 Jan 2026 20:27:53 +0000
ROA not before:           Tue 27 Jan 2026 20:22:53 +0000
ROA not after:            Tue 26 Jan 2027 20:27:53 +0000
asID:                     14187
IP address blocks:        201.220.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:8b:c2:ed:05:4b:17:ca:3f:eb:c4:d9:2d:c8:12:fa:e1:d8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Jan 27 20:22:53 2026 GMT
            Not After : Jan 26 20:27:53 2027 GMT
        Subject: CN=FEDAFE909ECF774F055B2BDD8D17D8C2A95ACCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4d:f1:74:f2:33:40:4a:32:5a:39:e5:50:57:
                    76:2c:45:90:b8:ef:52:7b:40:d6:46:e0:fa:18:eb:
                    3b:4a:24:43:90:45:73:09:50:5c:8e:9b:b0:b9:4b:
                    3e:9d:58:fc:b8:34:c3:e8:a3:62:48:a8:90:db:03:
                    b8:42:53:6d:47:3b:1a:68:b8:61:6b:4d:94:48:36:
                    63:ee:79:3d:11:cd:0c:91:95:6e:13:4e:35:11:92:
                    ac:49:e7:76:16:16:fd:1f:fd:3b:4f:b9:86:ba:85:
                    78:cc:4d:d8:99:a7:68:64:b6:19:be:a3:b9:83:0d:
                    c6:25:95:3a:9a:26:19:8f:a8:44:61:05:2d:70:93:
                    af:69:62:2f:db:cc:8c:45:fc:8a:47:91:74:e4:00:
                    ac:e1:60:1e:ce:fd:21:a1:89:93:cb:b6:62:5f:43:
                    2d:1e:fc:c9:66:18:3d:a7:27:de:29:6b:a3:e1:79:
                    e1:4a:22:8b:11:b0:17:bd:b2:d8:5d:85:27:da:7c:
                    34:0b:f7:f8:c3:69:cf:7a:98:55:4e:81:66:74:88:
                    7f:74:90:06:40:a5:52:19:c4:da:a2:4a:0d:7f:03:
                    11:c6:25:f8:8b:29:11:8a:bb:d7:12:da:3d:fd:b2:
                    31:46:ff:e4:38:78:32:dc:8b:7c:60:54:37:e3:56:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:FE:90:9E:CF:77:4F:05:5B:2B:DD:8D:17:D8:C2:A9:5A:CC:D2
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:ce:0e:bb:13:3e:11:d3:23:2c:25:47:3e:08:ec:b0:e7:
         85:d0:e2:87:80:f0:fc:f2:a2:d9:27:2b:d5:bf:4b:b9:0f:ee:
         f9:f8:5e:95:5c:45:27:cc:6a:23:6e:32:40:4a:80:18:25:58:
         6c:3d:85:67:1c:a5:11:8f:2f:71:3c:60:a3:48:54:f5:7f:b0:
         c0:09:d3:3c:23:58:0a:34:d4:e1:79:10:ab:08:80:54:17:b3:
         e1:78:c0:0c:2e:25:b1:cd:9e:2f:cd:0d:fb:34:79:e0:98:cc:
         50:db:3d:76:27:21:27:57:fe:8f:14:de:ac:74:62:06:fc:90:
         7f:f8:9a:65:03:32:4e:01:35:0e:38:40:30:96:26:a0:50:b2:
         8d:78:8c:5f:df:bf:73:2d:dd:c9:63:8d:18:36:35:6c:d1:55:
         92:26:54:8a:3d:13:c4:0e:62:e3:f7:99:c3:0c:27:60:f6:33:
         33:d2:fb:8f:af:f8:56:fc:b8:c6:84:f1:18:14:72:9f:6b:32:
         5e:d0:19:1b:e3:98:4c:c5:8c:2a:cf:7b:6e:75:c8:4a:fc:7d:
         b3:38:a4:0e:dc:f4:9b:16:de:29:1b:d4:26:67:62:f9:8d:7e:
         36:0d:e7:7a:78:de:23:a0:2d:b6:6a:30:49:a5:90:ff:96:6f:
         73:ce:76:9c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUApuLwu0FSxfKP+vE2S3IEvrh2EUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRTM0MjEwNzY0QkNENDJDQjZDMEZDRDkzODI4QTAx
NjYyM0VGMTAeFw0yNjAxMjcyMDIyNTNaFw0yNzAxMjYyMDI3NTNaMDMxMTAvBgNV
BAMTKEZFREFGRTkwOUVDRjc3NEYwNTVCMkJERDhEMTdEOEMyQTk1QUNDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTfF08jNASjJaOeVQV3YsRZC4
71J7QNZG4PoY6ztKJEOQRXMJUFyOm7C5Sz6dWPy4NMPoo2JIqJDbA7hCU21HOxpo
uGFrTZRINmPueT0RzQyRlW4TTjURkqxJ53YWFv0f/TtPuYa6hXjMTdiZp2hkthm+
o7mDDcYllTqaJhmPqERhBS1wk69pYi/bzIxF/IpHkXTkAKzhYB7O/SGhiZPLtmJf
Qy0e/MlmGD2nJ94pa6PheeFKIosRsBe9sthdhSfafDQL9/jDac96mFVOgWZ0iH90
kAZApVIZxNqiSg1/AxHGJfiLKRGKu9cS2j39sjFG/+Q4eDLci3xgVDfjVj5FAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/tr+kJ7Pd08FWyvdjRfYwqlazNIwHwYDVR0j
BBgwFoAUzv40IQdkvNQstsD82TgooBZiPvEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTg3ODc1Nzk1RDUwMTU1RkU3NEM0NUVFQjUxMTYwN0JE
MDU0MzU2MEJGRTkxODE0MEYyNUVFMjU0OEIzNEU1LzAvQ0VGRTM0MjEwNzY0QkNE
NDJDQjZDMEZDRDkzODI4QTAxNjYyM0VGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZFMzQyMTA3NjRCQ0Q0MkNC
NkMwRkNEOTM4MjhBMDE2NjIzRUYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U4Nzg3NTc5NUQ1MDE1NUZFNzRDNDVFRUI1MTE2MDdCRDA1NDM1NjBC
RkU5MTgxNDBGMjVFRTI1NDhCMzRFNS8wLzMyMzAzMTJlMzIzMjMwMmUzMzMyMmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNDMxMzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcncIDAN
BgkqhkiG9w0BAQsFAAOCAQEAWX7ODrsTPhHTIywlRz4I7LDnhdDih4Dw/PKi2Scr
1b9LuQ/u+fhelVxFJ8xqI24yQEqAGCVYbD2FZxylEY8vcTxgo0hU9X+wwAnTPCNY
CjTU4XkQqwiAVBez4XjADC4lsc2eL80N+zR54JjMUNs9dichJ1f+jxTerHRiBvyQ
f/iaZQMyTgE1DjhAMJYmoFCyjXiMX9+/cy3dyWONGDY1bNFVkiZUij0TxA5i4/eZ
wwwnYPYzM9L7j6/4Vvy4xoTxGBRyn2syXtAZG+OYTMWMKs97bnXISvx9szikDtz0
mxbeKRvUJmdi+Y1+Ng3nenjeI6AttmowSaWQ/5Zvc852nA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:53 2026 by rpki-client