Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230312e3232312e302e302f31392d3234203d3e203230323535.roa
File:                     3230312e3232312e302e302f31392d3234203d3e203230323535.roa (raw, json)
Hash identifier:          uLvT60LMex1aVrJ13OUDnWPDSENVd7snU/KuWVI6X64=
Subject key identifier:   46:CA:3E:73:E3:D1:7C:75:BC:BA:45:47:D2:88:35:66:44:5C:04:F5
Certificate issuer:       /CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
Certificate serial:       22D99466FDD629894CC0DB731ABFCACD6148864D
Authority key identifier: 63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230312e3232312e302e302f31392d3234203d3e203230323535.roa
Signing time:             Tue 06 Jan 2026 18:58:41 +0000
ROA not before:           Tue 06 Jan 2026 18:53:41 +0000
ROA not after:            Tue 05 Jan 2027 18:58:41 +0000
asID:                     20255
IP address blocks:        201.221.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 11:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d9:94:66:fd:d6:29:89:4c:c0:db:73:1a:bf:ca:cd:61:48:86:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
        Validity
            Not Before: Jan  6 18:53:41 2026 GMT
            Not After : Jan  5 18:58:41 2027 GMT
        Subject: CN=46CA3E73E3D17C75BCBA4547D2883566445C04F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:6f:d0:0b:49:91:f6:8e:cf:a0:e9:55:30:
                    25:7a:4e:20:58:27:d0:6b:60:fc:0b:ed:09:75:f5:
                    5f:f7:a8:f2:67:12:bf:28:77:c7:64:fe:db:96:cd:
                    82:ff:92:43:4d:28:e4:7e:c6:8d:15:de:d7:cd:f6:
                    de:f9:aa:eb:97:e4:2a:cf:6a:ba:14:1b:0b:50:f3:
                    d5:03:47:dd:4e:b0:6b:f7:db:88:22:98:62:34:2d:
                    bc:a3:af:b8:86:08:4d:81:33:3a:9c:e9:b4:46:9e:
                    cd:04:2c:ee:71:00:40:70:2a:5a:09:34:30:64:79:
                    b3:18:c7:4c:25:61:b1:de:f3:8f:36:e4:c5:48:ce:
                    f3:19:ba:1b:fb:1b:f6:71:aa:49:5c:0d:93:1d:16:
                    86:81:b9:c4:81:d8:a3:6e:73:03:fe:aa:40:d6:fa:
                    47:2a:3a:67:eb:1c:0d:30:ec:66:a9:6b:fe:89:83:
                    4e:25:05:60:88:3d:88:f2:77:ff:2a:67:a7:73:80:
                    ad:64:38:7c:46:a0:1b:90:ac:59:31:1f:48:f4:2f:
                    2f:3e:f6:e1:73:53:34:ad:78:3c:9b:77:d9:48:8c:
                    f2:8e:81:9e:68:ae:aa:19:52:97:0f:fa:c2:bb:82:
                    54:7c:c2:be:26:e4:21:c5:ab:fa:0f:2e:4e:33:a4:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:3E:73:E3:D1:7C:75:BC:BA:45:47:D2:88:35:66:44:5C:04:F5
            X509v3 Authority Key Identifier:
                keyid:63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230312e3232312e302e302f31392d3234203d3e203230323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:8d:b1:e8:f4:1d:48:43:d8:39:30:2c:b3:0c:9a:6f:fe:93:
         49:73:cc:d9:1f:9e:e7:43:bf:6f:10:1a:ed:63:28:19:f3:ca:
         e2:13:4f:f8:9b:59:e8:ed:a7:38:e0:11:d1:3e:b0:82:a2:a2:
         57:3b:7e:d1:79:44:b0:ab:cc:b1:fb:18:c3:25:e3:17:cc:51:
         8e:6c:8b:5a:aa:44:13:a3:1d:5b:77:11:08:45:36:7c:f5:d0:
         13:aa:51:62:f8:0f:da:b7:c4:48:ab:f2:e8:ba:0c:68:da:02:
         7b:72:35:5a:4b:5e:2e:86:82:f5:1f:f5:3f:5a:4b:ca:44:d2:
         bc:f8:7a:e3:34:57:df:a0:f2:b2:87:69:21:b4:0f:18:2f:4d:
         44:77:77:62:85:3a:0f:f8:56:44:e6:55:3e:ca:4e:9d:ad:0b:
         0f:16:d6:08:3b:29:90:4b:85:b9:0c:24:d4:64:e0:bc:96:65:
         43:8d:83:d5:6e:ba:75:81:af:83:b6:9b:b5:4a:5b:91:81:91:
         e5:26:65:4b:be:d5:87:da:51:57:01:25:e9:aa:ac:42:5f:f8:
         71:4a:68:ab:9b:00:c7:08:93:82:4a:6f:ad:76:85:ac:be:82:
         c1:14:58:d1:8b:a8:c3:9e:07:58:64:a8:51:69:53:97:5e:b1:
         84:df:61:99
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUItmUZv3WKYlMwNtzGr/KzWFIhk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM1NkREMTUxRjk3NThEN0M5NEU4RDc5RUU4NEM2NTM1
MkJGMTBEMTAeFw0yNjAxMDYxODUzNDFaFw0yNzAxMDUxODU4NDFaMDMxMTAvBgNV
BAMTKDQ2Q0EzRTczRTNEMTdDNzVCQ0JBNDU0N0QyODgzNTY2NDQ1QzA0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASW/QC0mR9o7PoOlVMCV6TiBY
J9BrYPwL7Ql19V/3qPJnEr8od8dk/tuWzYL/kkNNKOR+xo0V3tfN9t75quuX5CrP
aroUGwtQ89UDR91OsGv324gimGI0Lbyjr7iGCE2BMzqc6bRGns0ELO5xAEBwKloJ
NDBkebMYx0wlYbHe84825MVIzvMZuhv7G/ZxqklcDZMdFoaBucSB2KNucwP+qkDW
+kcqOmfrHA0w7Gapa/6Jg04lBWCIPYjyd/8qZ6dzgK1kOHxGoBuQrFkxH0j0Ly8+
9uFzUzSteDybd9lIjPKOgZ5orqoZUpcP+sK7glR8wr4m5CHFq/oPLk4zpNgbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQURso+c+PRfHW8ukVH0og1ZkRcBPUwHwYDVR0j
BBgwFoAUY1bdFR+XWNfJTo157oTGU1K/ENEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0MzM0U1M0U4REQzNkZGREIwQjBERTUzNkQwQTcxRUQ4
MTUyRUZEMjY5NjdDMDAxMTg1NTg5OUQyODYzMTM4LzAvNjM1NkREMTUxRjk3NThE
N0M5NEU4RDc5RUU4NEM2NTM1MkJGMTBEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzU2REQxNTFGOTc1OEQ3Qzk0
RThENzlFRTg0QzY1MzUyQkYxMEQxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNDMzNFNTNFOEREMzZGRkRCMEIwREU1MzZEMEE3MUVEODE1MkVGRDI2
OTY3QzAwMTE4NTU4OTlEMjg2MzEzOC8wLzMyMzAzMTJlMzIzMjMxMmUzMDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzAzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXJ3QAwDQYJ
KoZIhvcNAQELBQADggEBADiNsej0HUhD2DkwLLMMmm/+k0lzzNkfnudDv28QGu1j
KBnzyuITT/ibWejtpzjgEdE+sIKiolc7ftF5RLCrzLH7GMMl4xfMUY5si1qqRBOj
HVt3EQhFNnz10BOqUWL4D9q3xEir8ui6DGjaAntyNVpLXi6GgvUf9T9aS8pE0rz4
euM0V9+g8rKHaSG0DxgvTUR3d2KFOg/4VkTmVT7KTp2tCw8W1gg7KZBLhbkMJNRk
4LyWZUONg9VuunWBr4O2m7VKW5GBkeUmZUu+1YfaUVcBJemqrEJf+HFKaKubAMcI
k4JKb612hay+gsEUWNGLqMOeB1hkqFFpU5desYTfYZk=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:32 2026 by rpki-client