Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133322e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          veBs79tQpn4WRnAhuxccgsFuc4njK2p7BZTE55PujOY=
Subject key identifier:   40:8C:73:0D:F8:4B:B3:26:10:A5:EE:A0:2C:0C:76:A1:9E:0E:61:BC
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       25D551C1B482BEF4EA10DDCD94DC1EEB4E32BF9D
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32342d3234203d3e203237393634.roa
Signing time:             Mon 20 Apr 2026 16:39:25 +0000
ROA not before:           Mon 20 Apr 2026 16:34:25 +0000
ROA not after:            Mon 19 Apr 2027 16:39:25 +0000
asID:                     27964
IP address blocks:        201.49.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 06:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d5:51:c1:b4:82:be:f4:ea:10:dd:cd:94:dc:1e:eb:4e:32:bf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Apr 20 16:34:25 2026 GMT
            Not After : Apr 19 16:39:25 2027 GMT
        Subject: CN=408C730DF84BB32610A5EEA02C0C76A19E0E61BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:c6:d4:53:00:4c:78:0c:2a:aa:9a:41:cd:
                    bb:d0:a8:94:21:39:d8:19:2c:7c:78:dd:01:47:53:
                    cb:4e:11:c8:35:1a:d1:6f:0a:61:f5:af:c6:7f:30:
                    00:84:11:fe:c9:f3:0d:c0:b0:12:81:66:03:37:23:
                    5a:c0:2a:08:34:ab:56:a5:6b:e5:92:64:3d:1e:44:
                    6c:f9:6b:4b:f7:41:ce:bd:dd:95:05:8f:0f:a8:b3:
                    5b:1f:09:58:73:a8:96:b4:4c:ed:44:ac:b5:71:c1:
                    fd:4e:80:d4:a5:50:0b:69:7a:77:9e:c7:01:ef:e0:
                    85:ab:52:59:ac:1f:1a:e2:db:03:92:44:33:4d:f2:
                    1b:a4:08:de:cf:cc:7b:38:2a:fa:b8:ae:24:83:ee:
                    6b:0c:41:69:3a:a1:3a:8f:d2:c0:97:d7:2c:ab:c8:
                    13:63:72:3f:91:9d:0b:cf:a8:86:24:db:6d:49:1f:
                    eb:8c:92:d4:ba:ce:6a:ad:68:4f:9f:ee:d6:cc:78:
                    5c:92:46:42:a2:fc:28:59:af:f8:cd:a1:e5:7c:b0:
                    ed:77:f5:cb:18:07:22:4c:28:9e:85:33:5d:91:88:
                    d2:e0:2b:93:ce:3f:75:a9:e8:d3:88:33:cc:e7:05:
                    f0:1e:de:d9:01:6b:01:5f:ea:6e:12:3c:72:df:bc:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8C:73:0D:F8:4B:B3:26:10:A5:EE:A0:2C:0C:76:A1:9E:0E:61:BC
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:a7:d6:f0:76:6e:c2:5d:ab:a4:54:27:aa:f9:22:fd:90:43:
         5e:44:2b:a0:ea:c1:65:8e:f0:fc:97:34:0d:f5:6a:bb:8a:9f:
         72:98:18:97:ee:49:17:a3:c9:27:4a:15:9d:f9:09:0a:9b:0d:
         ac:c5:0e:9a:73:a3:da:d1:4b:7e:98:84:d1:a1:9d:e3:c5:e0:
         df:59:01:c3:70:8c:8c:8c:4b:e3:48:f7:67:6e:1d:34:b6:38:
         6a:f9:3a:99:6d:6d:04:2f:a3:c2:16:a3:10:29:51:f0:0d:6a:
         01:ac:2e:37:af:e7:e6:8f:f2:96:b2:8d:a5:07:72:81:f5:ea:
         11:aa:1b:de:11:41:a4:bf:16:7f:44:56:31:85:91:c4:b0:4d:
         90:67:2f:76:9c:bb:86:47:99:84:88:d4:68:f7:1c:4a:73:3a:
         a4:3f:60:2a:13:59:62:6e:e8:c4:ba:6f:49:4b:e1:b9:79:a5:
         9b:2a:7b:56:00:c9:80:87:23:5c:d2:8d:8e:1a:a8:1f:01:d0:
         ed:1a:5b:c4:9f:d0:4d:a3:ee:b0:2c:3f:ca:2c:e9:46:10:09:
         b2:dd:53:d9:d6:78:b8:83:0f:2a:25:8d:e5:df:8c:73:98:8e:
         ef:20:2c:29:79:16:a8:29:a7:07:45:4a:7b:df:8e:07:15:7a:
         64:1d:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:27:38 2026 by rpki-client