Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa
File:                     3230312e3232302e35362e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          5loH0IlzX+x1dW+rhMJQI+TmU9/M4GX2SYBZuEVoPFo=
Subject key identifier:   15:E4:31:94:F4:18:84:69:6F:94:41:41:70:40:AF:38:5B:A0:F5:71
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       56B8453E73DD4D6398900B1F2103374D1BAF1E64
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa
Signing time:             Mon 20 Jul 2026 14:10:49 +0000
ROA not before:           Mon 20 Jul 2026 14:05:49 +0000
ROA not after:            Mon 19 Jul 2027 14:10:49 +0000
asID:                     19551
IP address blocks:        201.220.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b8:45:3e:73:dd:4d:63:98:90:0b:1f:21:03:37:4d:1b:af:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Jul 20 14:05:49 2026 GMT
            Not After : Jul 19 14:10:49 2027 GMT
        Subject: CN=15E43194F41884696F9441417040AF385BA0F571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:ab:67:f0:0b:c8:bd:a3:63:fb:6c:ef:47:
                    61:53:c0:c0:df:ec:f9:d6:93:39:c5:9b:80:ab:2c:
                    11:b6:76:9c:6e:69:88:4f:f1:ab:33:87:6d:a0:1c:
                    39:67:e4:73:dd:c8:ac:23:3e:9c:7d:f5:55:6e:36:
                    eb:c2:d8:1d:b4:51:ff:83:6e:33:9d:bd:c6:36:93:
                    20:f3:b7:df:4b:6a:ba:4c:64:5d:7c:9e:af:41:1b:
                    3d:0f:a9:b3:f8:48:a1:84:27:1d:3b:7b:13:2f:05:
                    48:ae:a0:0d:45:6a:f1:be:e9:7f:1d:bd:c4:2c:8e:
                    7e:34:96:7b:3e:7c:f3:3d:8a:ac:a2:63:5b:de:8c:
                    98:f7:87:57:73:67:d7:72:ad:0b:c2:ba:6e:fc:ba:
                    0b:99:4b:cf:a5:c0:06:dd:b2:68:8e:da:a3:9e:81:
                    e6:b9:8c:bd:06:ed:89:b0:f0:e7:d3:94:0c:08:d3:
                    f5:36:89:09:74:55:0c:57:4a:a9:81:0a:f2:7a:48:
                    c4:e9:54:42:40:39:6b:a3:43:d3:93:7b:04:34:7b:
                    30:0f:0e:e0:6a:91:49:c5:a2:f7:1d:73:a3:2f:d8:
                    51:20:f9:b2:80:01:e4:34:5e:3a:80:15:59:99:af:
                    1d:c8:49:01:5c:df:01:c6:5f:2f:43:ff:67:55:aa:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:31:94:F4:18:84:69:6F:94:41:41:70:40:AF:38:5B:A0:F5:71
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:75:1c:b9:3c:0a:c8:6c:6e:6a:d0:e2:e4:24:a9:7c:6c:fd:
         4d:5c:2f:00:04:77:44:87:14:45:3b:e2:49:f0:81:fe:2b:2a:
         be:54:5f:68:4f:6b:e5:6e:04:aa:d3:e2:35:7b:08:88:67:92:
         11:37:a0:9c:ee:e5:4a:df:42:19:43:40:b5:b8:2b:97:7a:7d:
         72:f8:8e:16:48:8d:a8:16:ae:d1:72:8d:62:b9:d9:5f:50:73:
         c4:27:75:4c:89:ee:d8:fb:e0:42:29:d1:b1:24:07:2b:76:99:
         b4:4e:bc:31:3c:9e:b6:72:8f:df:ef:a0:5b:32:66:2a:1c:cd:
         83:63:52:5d:40:46:63:e5:98:e3:70:7c:08:8b:2a:27:3f:6a:
         87:2e:f1:05:f7:81:73:df:16:86:e5:fb:9f:d6:00:79:60:0e:
         de:17:1c:2d:db:08:0b:35:ae:5f:fb:a4:ce:01:59:60:ea:58:
         69:8f:c2:12:d9:a0:37:67:32:5d:95:1a:65:25:8e:a6:ff:02:
         89:c6:ec:b8:dc:77:d8:05:e0:28:55:22:37:22:4f:68:2a:b9:
         72:c4:7e:cf:e2:2c:e5:5a:39:4f:8d:2f:42:43:aa:eb:43:6c:
         f3:01:7f:ca:49:53:53:7f:d9:f4:74:84:ec:dc:19:4c:83:79:
         f7:f8:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:01:05 2026 by rpki-client