Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323033.roa
File:                     3134332e3230322e3235322e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          ePE79e6jHGdXcsdkfIRUSWpku1pbtv+3zf/FcbIoRzQ=
Subject key identifier:   83:88:A1:D9:EB:40:AD:AC:2C:09:C9:C0:8A:0A:DB:BE:0A:33:D7:08
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       7019C82E947A626218CC554498B7B8FD4565963E
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323033.roa
Signing time:             Tue 21 Apr 2026 21:39:37 +0000
ROA not before:           Tue 21 Apr 2026 21:34:37 +0000
ROA not after:            Tue 20 Apr 2027 21:39:37 +0000
asID:                     203
IP address blocks:        143.202.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Apr 2026 18:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:19:c8:2e:94:7a:62:62:18:cc:55:44:98:b7:b8:fd:45:65:96:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: Apr 21 21:34:37 2026 GMT
            Not After : Apr 20 21:39:37 2027 GMT
        Subject: CN=8388A1D9EB40ADAC2C09C9C08A0ADBBE0A33D708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:33:57:af:7a:56:ef:20:be:41:e4:99:42:
                    61:66:86:15:70:2f:35:11:cb:79:ae:49:d7:db:f9:
                    e5:ec:dd:32:e6:ec:94:5e:4c:fb:09:a8:12:37:6d:
                    36:c9:27:92:60:dd:84:ba:31:67:69:a7:bd:c9:78:
                    4d:3b:07:c6:33:de:5c:b6:de:63:2f:39:36:e0:67:
                    df:24:ce:2c:34:67:94:94:25:a1:64:71:ee:11:b3:
                    90:1f:3f:d8:01:10:b2:f3:db:bb:42:71:35:ed:bd:
                    86:27:52:8a:ed:a1:09:35:8c:a0:07:24:67:eb:4b:
                    6b:77:24:6f:84:ab:58:b6:3d:6a:df:cf:c1:9e:0a:
                    06:bf:b6:cc:c0:9a:99:33:54:15:0f:89:35:4b:b1:
                    b6:a4:fe:df:90:18:20:6a:d8:76:e3:93:6d:33:b5:
                    7d:53:d3:8c:8c:bb:a5:e1:27:40:76:68:3f:fe:fd:
                    3b:80:93:b9:68:80:c9:af:47:50:06:45:37:d9:9e:
                    d3:97:de:62:7e:a8:ba:29:ae:9f:3a:f4:4f:5b:3c:
                    f3:4a:f3:a0:13:e0:67:27:fd:dd:c7:d6:64:f9:21:
                    3d:6a:c1:c3:3d:8c:ef:a1:43:96:98:d5:89:f2:f6:
                    71:bf:26:19:50:99:a9:bb:a6:68:ba:ce:06:4d:6b:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:A1:D9:EB:40:AD:AC:2C:09:C9:C0:8A:0A:DB:BE:0A:33:D7:08
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:e3:b0:37:1e:f5:cf:41:f9:45:15:46:b5:a6:e6:89:4a:
         1e:3e:88:17:e3:d3:a7:24:62:9f:03:15:a4:1a:5b:20:f9:07:
         0b:26:cf:60:85:81:a2:65:27:57:94:e2:f5:4e:e6:e2:80:83:
         bb:a4:d0:c5:c5:4f:93:d8:f7:a7:75:dc:95:ed:00:59:68:3c:
         80:b4:d2:99:45:c4:62:b5:f9:92:0d:a3:a1:d5:42:a0:48:d6:
         c6:4b:84:dc:6c:ef:2a:4d:72:f0:ef:95:fe:cd:09:2b:dd:c8:
         b0:b6:61:08:c8:db:6f:07:d7:30:11:2e:53:33:6c:e6:ea:e3:
         ca:63:17:af:37:9f:9f:ac:df:1c:d4:ff:01:e6:04:a7:ac:53:
         be:88:19:b2:2e:fa:6d:cd:12:c3:66:65:7f:90:db:f4:92:9f:
         53:a1:96:48:6a:19:f4:79:dc:7c:83:50:6c:a0:0f:ca:cf:aa:
         b8:08:f0:fc:c0:46:65:a4:e5:c9:8e:0b:e2:f0:37:88:c5:26:
         74:9f:40:56:e7:80:ed:48:93:f9:ce:b2:f7:6d:2d:c2:c3:58:
         38:59:02:f6:72:e7:55:60:1b:6b:30:06:da:2a:a7:ce:7b:b0:
         ab:3b:87:97:75:93:54:4e:0a:f1:b0:f5:4a:2d:d6:06:48:1b:
         38:d2:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:11:40 2026 by rpki-client