Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133332e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133332e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          glz5f8RX4pI1Wj0KV6eTh4w02M5dJ78rJD1VIH409yo=
Subject key identifier:   9D:C5:39:32:41:6C:5D:D5:A8:79:6C:86:EE:38:15:9E:7C:ED:E7:43
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       3065D6774E890C7AAF7981CB5116522461120DB0
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133332e302f32342d3234203d3e203237393634.roa
Signing time:             Mon 20 Apr 2026 16:39:26 +0000
ROA not before:           Mon 20 Apr 2026 16:34:26 +0000
ROA not after:            Mon 19 Apr 2027 16:39:26 +0000
asID:                     27964
IP address blocks:        201.49.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 06:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:d6:77:4e:89:0c:7a:af:79:81:cb:51:16:52:24:61:12:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Apr 20 16:34:26 2026 GMT
            Not After : Apr 19 16:39:26 2027 GMT
        Subject: CN=9DC53932416C5DD5A8796C86EE38159E7CEDE743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:b5:91:fa:33:c3:a9:4d:0e:36:7a:58:32:
                    82:3c:85:45:02:6f:d6:1a:da:8d:ff:4f:a0:55:f6:
                    6b:b5:e7:e8:3e:f8:51:54:87:22:7e:ab:20:87:96:
                    6d:2c:b3:68:c7:02:f5:25:64:1c:9a:3e:a7:55:24:
                    1c:8c:d6:61:cc:af:d8:01:b0:15:fc:3b:f1:ce:01:
                    0f:bb:42:17:51:34:66:ef:f0:97:b7:aa:28:4e:87:
                    9a:0a:d6:d1:30:49:e3:85:5f:b1:5e:0e:91:1d:fd:
                    4f:41:a6:12:5a:bd:44:a0:f3:51:89:72:f6:76:67:
                    9d:38:62:fe:ce:91:b7:80:e6:b7:24:1e:f1:7c:8a:
                    25:d6:24:da:61:f6:46:60:c8:0c:42:e0:10:81:9d:
                    7c:94:b9:50:15:69:08:76:e4:b2:1a:52:9a:0e:2c:
                    9b:07:00:11:32:51:52:ff:8d:71:a6:6c:db:88:8d:
                    89:65:15:e1:85:80:d0:74:01:77:e8:cb:07:2f:bd:
                    b2:23:49:be:91:b3:81:04:e8:cd:0d:bc:33:31:7e:
                    2e:20:a7:0a:5c:16:5f:e0:97:d1:c7:46:fd:bb:a0:
                    e4:b9:21:74:63:a6:f9:da:7b:b1:fa:1d:a6:e8:56:
                    f7:62:11:fc:99:38:3a:53:20:82:03:5c:92:b4:05:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C5:39:32:41:6C:5D:D5:A8:79:6C:86:EE:38:15:9E:7C:ED:E7:43
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133332e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:f4:a0:08:e8:91:9c:4d:c9:7e:4f:d3:74:d6:97:36:66:d2:
         9a:e5:8f:ca:c4:24:25:9b:8d:ae:9d:f9:4f:e4:59:41:dd:da:
         01:e6:0d:23:d0:e1:a1:da:9f:a2:6f:aa:8e:ea:36:bd:88:2f:
         e3:cf:b8:74:de:7b:1e:5a:6e:66:92:67:e1:9b:77:1c:43:5f:
         c5:fa:32:d1:a8:f1:2f:3b:c9:a3:6f:85:c6:79:ec:ec:3e:83:
         54:a5:62:3d:d4:0e:9e:20:b4:15:38:f6:b1:6d:d2:f0:02:56:
         2e:d5:04:4a:ef:2c:f2:34:5c:67:17:e1:5a:6f:98:c1:74:af:
         5a:76:53:59:ad:68:de:36:94:20:98:cf:2b:ee:a8:36:67:37:
         f4:3f:93:20:5c:a2:18:7e:e5:64:39:98:55:7a:55:c6:e7:46:
         28:be:c5:6d:10:3f:d1:14:d8:70:a8:e9:59:04:7a:06:66:00:
         e7:1d:b5:88:e2:dd:61:a9:b1:8e:bb:2d:8b:00:fe:18:3d:cd:
         84:3f:e4:f3:7d:89:c6:db:76:2d:74:98:5f:87:6c:1c:e4:cd:
         fa:ca:64:0f:33:b5:b8:ab:f0:b3:69:08:6a:9e:52:d3:67:10:
         3e:83:7e:0d:a7:42:1c:f3:a5:92:3d:3e:d5:a4:72:3a:5c:eb:
         6e:d5:b5:a5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMGXWd06JDHqveYHLURZSJGESDbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2NTYwRkM5RjM0MEIyQTdFRjM5NTU5OUQ5RjdGQzVE
OTYxOUM1ODAeFw0yNjA0MjAxNjM0MjZaFw0yNzA0MTkxNjM5MjZaMDMxMTAvBgNV
BAMTKDlEQzUzOTMyNDE2QzVERDVBODc5NkM4NkVFMzgxNTlFN0NFREU3NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3bWR+jPDqU0ONnpYMoI8hUUC
b9Ya2o3/T6BV9mu15+g++FFUhyJ+qyCHlm0ss2jHAvUlZByaPqdVJByM1mHMr9gB
sBX8O/HOAQ+7QhdRNGbv8Je3qihOh5oK1tEwSeOFX7FeDpEd/U9BphJavUSg81GJ
cvZ2Z504Yv7OkbeA5rckHvF8iiXWJNph9kZgyAxC4BCBnXyUuVAVaQh25LIaUpoO
LJsHABEyUVL/jXGmbNuIjYllFeGFgNB0AXfoywcvvbIjSb6Rs4EE6M0NvDMxfi4g
pwpcFl/gl9HHRv27oOS5IXRjpvnae7H6HaboVvdiEfyZODpTIIIDXJK0BdFrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUncU5MkFsXdWoeWyG7jgVnnzt50MwHwYDVR0j
BBgwFoAUaWVg/J80Cyp+85VZnZ9/xdlhnFgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjI0RTgyMEJFRjc4QjNCMEIzNUI4OUI0OTFDRUJGMkQ4
RkQ2NzQwMzRDNjQ3OENGNTNCRjU2NDdGNkZDQUQ5LzAvNjk2NTYwRkM5RjM0MEIy
QTdFRjM5NTU5OUQ5RjdGQzVEOTYxOUM1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTY1NjBGQzlGMzQwQjJBN0VG
Mzk1NTk5RDlGN0ZDNUQ5NjE5QzU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDIyNEU4MjBCRUY3OEIzQjBCMzVCODlCNDkxQ0VCRjJEOEZENjc0MDM0
QzY0NzhDRjUzQkY1NjQ3RjZGQ0FEOS8wLzMyMzAzMTJlMzQzOTJlMzEzMzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMkxhTAN
BgkqhkiG9w0BAQsFAAOCAQEAwvSgCOiRnE3Jfk/TdNaXNmbSmuWPysQkJZuNrp35
T+RZQd3aAeYNI9Dhodqfom+qjuo2vYgv48+4dN57HlpuZpJn4Zt3HENfxfoy0ajx
LzvJo2+Fxnns7D6DVKViPdQOniC0FTj2sW3S8AJWLtUESu8s8jRcZxfhWm+YwXSv
WnZTWa1o3jaUIJjPK+6oNmc39D+TIFyiGH7lZDmYVXpVxudGKL7FbRA/0RTYcKjp
WQR6BmYA5x21iOLdYamxjrstiwD+GD3NhD/k832Jxtt2LXSYX4dsHOTN+spkDzO1
uKvws2kIap5S02cQPoN+DadCHPOlkj0+1aRyOlzrbtW1pQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 06:34:37 2026 by rpki-client