Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133352e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133352e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          SNI++5gs9wJdE4fl+qn1YORJxiiaFKSeW0WnWy4lTSo=
Subject key identifier:   84:87:8B:CF:E3:F0:05:AF:40:19:C7:81:65:6D:82:D9:A5:8C:65:2D
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       3EDC707A904AFAB42F9B9C08E00F351FB8C9E1A4
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133352e302f32342d3234203d3e203237393634.roa
Signing time:             Mon 20 Apr 2026 16:39:26 +0000
ROA not before:           Mon 20 Apr 2026 16:34:26 +0000
ROA not after:            Mon 19 Apr 2027 16:39:26 +0000
asID:                     27964
IP address blocks:        201.49.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 06:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:dc:70:7a:90:4a:fa:b4:2f:9b:9c:08:e0:0f:35:1f:b8:c9:e1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Apr 20 16:34:26 2026 GMT
            Not After : Apr 19 16:39:26 2027 GMT
        Subject: CN=84878BCFE3F005AF4019C781656D82D9A58C652D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:32:77:27:35:21:0d:3e:6b:1c:ae:a9:0e:
                    91:b5:3d:30:0a:5a:8d:0d:1c:ce:73:0f:4d:94:8e:
                    ca:0e:84:fa:58:cd:77:5b:f3:2a:eb:14:32:b3:d5:
                    1a:c9:5e:e9:00:3f:48:80:70:35:17:70:19:00:8f:
                    c0:b3:76:f5:b6:14:e9:c1:5c:5b:63:b7:be:c9:c4:
                    3b:45:66:10:18:d4:56:de:8a:fd:77:ef:e7:6a:44:
                    54:47:7f:a8:2b:89:ea:d8:e1:f3:b1:48:b1:3a:31:
                    35:be:8b:ca:49:ec:8b:89:7f:4c:a3:5c:7f:ac:b2:
                    95:86:94:f7:50:c3:0f:fb:59:7c:3f:27:a7:80:49:
                    67:2a:bc:52:52:3d:31:de:84:50:b6:78:09:5c:c2:
                    15:5b:a3:17:c0:5e:6e:85:40:9a:54:33:50:56:5a:
                    21:f7:bd:73:01:c5:9f:fc:33:4b:b0:7e:8d:e2:8b:
                    98:c6:74:ba:d0:b9:87:cd:f9:40:05:f8:30:96:4a:
                    e9:8c:ce:6e:25:9f:b3:66:2f:13:a1:4f:eb:84:f8:
                    4e:81:b8:87:96:93:fe:a2:6d:13:86:3e:06:90:cc:
                    e8:20:69:d0:5d:32:46:e7:a0:58:a5:db:de:f7:1d:
                    a4:df:ef:52:d8:0f:51:d3:0a:9f:72:d9:b7:9d:46:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:8B:CF:E3:F0:05:AF:40:19:C7:81:65:6D:82:D9:A5:8C:65:2D
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133352e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:ac:40:53:49:24:81:2e:60:de:36:dd:34:f4:af:76:79:02:
         a7:35:6a:6b:28:5e:0a:34:8b:cc:ae:27:9b:f4:29:23:2e:32:
         e9:01:00:30:91:7e:9d:a6:99:f5:ef:e0:bf:0d:a2:f5:fa:ab:
         8d:12:fb:7d:81:e8:75:37:d0:58:c9:5d:42:37:7b:35:24:27:
         ec:64:93:21:83:d5:b3:20:5b:bb:4e:66:23:bb:af:3c:2c:ad:
         5a:94:40:85:35:fb:20:0d:26:e0:8b:6b:f5:d5:81:ad:a7:59:
         df:a0:5c:75:f4:de:42:7e:52:d0:d8:0e:f2:d6:41:5a:16:b0:
         92:06:2c:c8:1c:b5:a9:c5:66:fc:9f:d3:9e:2d:09:ee:e4:3a:
         21:39:4d:0b:0c:b1:9f:17:d3:88:b9:b3:1b:e6:a4:57:af:20:
         ad:65:12:fd:ab:de:e9:03:83:75:e6:68:6e:26:51:02:f4:0e:
         fe:56:80:04:c0:74:93:71:d2:bd:05:fd:c7:ba:6b:f6:14:b0:
         71:14:58:23:93:13:70:59:a3:b4:5f:f8:ef:e9:16:58:d2:b4:
         8a:20:73:61:4b:96:95:96:c6:0b:ff:4b:06:d0:86:6c:5e:3a:
         37:31:d1:d0:5b:85:3b:ba:0d:b1:f0:ab:9c:83:01:c7:5a:4b:
         01:05:f0:5e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPtxwepBK+rQvm5wI4A81H7jJ4aQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2NTYwRkM5RjM0MEIyQTdFRjM5NTU5OUQ5RjdGQzVE
OTYxOUM1ODAeFw0yNjA0MjAxNjM0MjZaFw0yNzA0MTkxNjM5MjZaMDMxMTAvBgNV
BAMTKDg0ODc4QkNGRTNGMDA1QUY0MDE5Qzc4MTY1NkQ4MkQ5QTU4QzY1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJijJ3JzUhDT5rHK6pDpG1PTAK
Wo0NHM5zD02UjsoOhPpYzXdb8yrrFDKz1RrJXukAP0iAcDUXcBkAj8CzdvW2FOnB
XFtjt77JxDtFZhAY1Fbeiv137+dqRFRHf6grierY4fOxSLE6MTW+i8pJ7IuJf0yj
XH+sspWGlPdQww/7WXw/J6eASWcqvFJSPTHehFC2eAlcwhVboxfAXm6FQJpUM1BW
WiH3vXMBxZ/8M0uwfo3ii5jGdLrQuYfN+UAF+DCWSumMzm4ln7NmLxOhT+uE+E6B
uIeWk/6ibROGPgaQzOggadBdMkbnoFil2973HaTf71LYD1HTCp9y2bedRkRpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhIeLz+PwBa9AGceBZW2C2aWMZS0wHwYDVR0j
BBgwFoAUaWVg/J80Cyp+85VZnZ9/xdlhnFgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjI0RTgyMEJFRjc4QjNCMEIzNUI4OUI0OTFDRUJGMkQ4
RkQ2NzQwMzRDNjQ3OENGNTNCRjU2NDdGNkZDQUQ5LzAvNjk2NTYwRkM5RjM0MEIy
QTdFRjM5NTU5OUQ5RjdGQzVEOTYxOUM1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTY1NjBGQzlGMzQwQjJBN0VG
Mzk1NTk5RDlGN0ZDNUQ5NjE5QzU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDIyNEU4MjBCRUY3OEIzQjBCMzVCODlCNDkxQ0VCRjJEOEZENjc0MDM0
QzY0NzhDRjUzQkY1NjQ3RjZGQ0FEOS8wLzMyMzAzMTJlMzQzOTJlMzEzMzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMkxhzAN
BgkqhkiG9w0BAQsFAAOCAQEAwKxAU0kkgS5g3jbdNPSvdnkCpzVqayheCjSLzK4n
m/QpIy4y6QEAMJF+naaZ9e/gvw2i9fqrjRL7fYHodTfQWMldQjd7NSQn7GSTIYPV
syBbu05mI7uvPCytWpRAhTX7IA0m4Itr9dWBradZ36BcdfTeQn5S0NgO8tZBWhaw
kgYsyBy1qcVm/J/Tni0J7uQ6ITlNCwyxnxfTiLmzG+akV68grWUS/ave6QODdeZo
biZRAvQO/laABMB0k3HSvQX9x7pr9hSwcRRYI5MTcFmjtF/47+kWWNK0iiBzYUuW
lZbGC/9LBtCGbF46NzHR0FuFO7oNsfCrnIMBx1pLAQXwXg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 07:27:35 2026 by rpki-client