Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133322e3235352e3133322e302f32322d3234203d3e203532343835.roa
File:                     3133322e3235352e3133322e302f32322d3234203d3e203532343835.roa (raw, json)
Hash identifier:          XKcU3SnQ5/htyh3VhEwe0CyDUbl/8/dR70k/HPByROA=
Subject key identifier:   89:89:D3:50:24:5A:DA:EC:90:C9:13:22:E7:DA:9E:F0:DE:9D:A2:2F
Certificate issuer:       /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial:       1BF7A6B7A03DBECB7880696877706F67D1049F02
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133322e3235352e3133322e302f32322d3234203d3e203532343835.roa
Signing time:             Sat 24 Oct 2026 12:45:00 +0000
ROA not before:           Sat 24 Oct 2026 12:40:00 +0000
ROA not after:            Sat 23 Oct 2027 12:45:00 +0000
asID:                     52485
IP address blocks:        132.255.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f7:a6:b7:a0:3d:be:cb:78:80:69:68:77:70:6f:67:d1:04:9f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
        Validity
            Not Before: Oct 24 12:40:00 2026 GMT
            Not After : Oct 23 12:45:00 2027 GMT
        Subject: CN=8989D350245ADAEC90C91322E7DA9EF0DE9DA22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:c8:82:f6:a0:6c:a8:fc:3a:82:49:46:66:
                    97:a1:63:0a:fa:4f:a3:be:15:a8:0c:85:96:23:be:
                    42:05:98:47:e6:6d:ac:70:6e:07:38:2d:b8:f1:e7:
                    e3:d3:66:93:2a:10:8b:8a:8e:f2:8c:9b:4a:ed:f8:
                    60:52:43:9b:86:3f:b5:82:cd:f6:5d:af:cc:81:44:
                    0c:fc:99:73:44:a4:55:4e:ed:06:78:7f:87:e2:2e:
                    70:5a:2b:4e:f9:80:06:8d:f7:62:66:e9:c4:7d:fb:
                    d7:85:c1:6f:2a:3b:6f:41:25:b8:6f:54:64:29:c2:
                    fa:63:81:2e:32:e1:78:e9:b8:84:2c:d9:ab:ee:40:
                    8a:85:20:bb:e5:78:58:c5:7b:c3:7d:15:13:f6:6b:
                    2e:2d:bf:98:56:8d:48:c4:09:cf:90:0a:d2:55:4b:
                    bd:f3:95:66:ad:ce:a9:29:e4:c0:c3:b8:e6:03:ca:
                    97:a8:53:96:c2:bf:da:59:ce:0b:d3:ef:58:ee:37:
                    1e:46:01:19:f3:49:7a:59:96:40:82:43:89:23:b7:
                    a7:da:d1:83:3a:3f:80:2d:24:49:54:6d:1e:1b:c9:
                    a8:16:57:d0:35:17:48:fe:ab:61:85:59:7d:21:75:
                    25:00:60:be:6a:78:c1:2e:3d:19:f1:a8:e1:5a:e5:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:89:D3:50:24:5A:DA:EC:90:C9:13:22:E7:DA:9E:F0:DE:9D:A2:2F
            X509v3 Authority Key Identifier:
                keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133322e3235352e3133322e302f32322d3234203d3e203532343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:bc:34:d4:4c:9e:43:ba:65:41:4e:5d:45:8b:6c:2a:e8:
         bc:b1:6d:97:5b:55:ef:d3:43:e5:0b:d8:09:68:88:8f:41:17:
         37:a2:9a:81:90:1d:fa:0a:b7:d9:16:3c:2e:3e:57:ae:07:97:
         de:ba:21:b3:8b:58:ea:8a:e2:a9:56:34:20:f1:28:6b:c9:72:
         bd:30:40:7a:2e:a8:c6:b5:86:00:fa:03:07:ba:8f:6f:2b:9c:
         1d:29:76:8c:53:4b:44:5b:ca:9b:ce:17:de:49:ec:86:32:3b:
         80:43:86:4f:fa:b7:e3:39:97:ff:ca:be:3c:34:dc:71:e6:38:
         8a:45:2f:ab:52:86:3e:d5:0a:61:5e:ef:eb:5c:44:f6:11:48:
         b0:9e:f3:93:6c:42:e6:8e:f2:bf:60:e1:41:b4:98:37:bd:92:
         2f:7b:88:7a:75:3f:f8:80:0a:5b:df:2a:eb:dd:00:4f:d8:ec:
         b9:10:ea:e7:e1:05:1b:04:0f:78:9b:c4:23:43:04:2a:bb:bc:
         10:81:a0:dd:17:03:54:59:fd:eb:42:03:b1:c4:3e:dd:76:7e:
         a1:01:16:f1:b3:9e:76:07:24:69:83:68:4c:6a:d8:0f:60:66:
         e2:64:81:c7:ae:2e:61:7e:aa:8a:8f:6d:4b:f2:15:e8:19:6c:
         6a:6f:2a:a0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUG/emt6A9vst4gGlod3BvZ9EEnwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlFMUIxNTRCNTVGQjRGODRCNDdGNzJERkRERThEOTY2
NEI5RDIxMjAeFw0yNjEwMjQxMjQwMDBaFw0yNzEwMjMxMjQ1MDBaMDMxMTAvBgNV
BAMTKDg5ODlEMzUwMjQ1QURBRUM5MEM5MTMyMkU3REE5RUYwREU5REEyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+8iC9qBsqPw6gklGZpehYwr6
T6O+FagMhZYjvkIFmEfmbaxwbgc4Lbjx5+PTZpMqEIuKjvKMm0rt+GBSQ5uGP7WC
zfZdr8yBRAz8mXNEpFVO7QZ4f4fiLnBaK075gAaN92Jm6cR9+9eFwW8qO29BJbhv
VGQpwvpjgS4y4XjpuIQs2avuQIqFILvleFjFe8N9FRP2ay4tv5hWjUjECc+QCtJV
S73zlWatzqkp5MDDuOYDypeoU5bCv9pZzgvT71juNx5GARnzSXpZlkCCQ4kjt6fa
0YM6P4AtJElUbR4byagWV9A1F0j+q2GFWX0hdSUAYL5qeMEuPRnxqOFa5ZQlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiYnTUCRa2uyQyRMi59qe8N6doi8wHwYDVR0j
BBgwFoAUCeGxVLVftPhLR/ct/d6NlmS50hIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMkM3MDZEOEU1RjBDMTYyNDkyMEE3NEU2Mjg3RDEyRjE4
QkM2MjgwMkZDNjAxQjU2MzgxOEMyNTc1MDlGNEI4LzAvMDlFMUIxNTRCNTVGQjRG
ODRCNDdGNzJERkRERThEOTY2NEI5RDIxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOUUxQjE1NEI1NUZCNEY4NEI0
N0Y3MkRGRERFOEQ5NjY0QjlEMjEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTJDNzA2RDhFNUYwQzE2MjQ5MjBBNzRFNjI4N0QxMkYxOEJDNjI4MDJG
QzYwMUI1NjM4MThDMjU3NTA5RjRCOC8wLzMxMzMzMjJlMzIzNTM1MmUzMTMzMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChP+E
MA0GCSqGSIb3DQEBCwUAA4IBAQAc1rw01EyeQ7plQU5dRYtsKui8sW2XW1Xv00Pl
C9gJaIiPQRc3opqBkB36CrfZFjwuPleuB5feuiGzi1jqiuKpVjQg8ShryXK9MEB6
LqjGtYYA+gMHuo9vK5wdKXaMU0tEW8qbzhfeSeyGMjuAQ4ZP+rfjOZf/yr48NNxx
5jiKRS+rUoY+1QphXu/rXET2EUiwnvOTbELmjvK/YOFBtJg3vZIve4h6dT/4gApb
3yrr3QBP2Oy5EOrn4QUbBA94m8QjQwQqu7wQgaDdFwNUWf3rQgOxxD7ddn6hARbx
s552ByRpg2hMatgPYGbiZIHHri5hfqqKj21L8hXoGWxqbyqg
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:29:39 2026 by rpki-client