Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa
File:                     3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa (raw, json)
Hash identifier:          f1i8yNoOJGiqseLnpjCSBN+8QTSe31Cbm9wo4+yA9xs=
Subject key identifier:   30:8E:AF:C7:9A:97:84:EC:F0:C8:9F:84:ED:CE:6C:B4:F0:A5:BE:94
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       709CA037F26E48E9271BA7B06502C825A98DC295
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa
Signing time:             Tue 15 Sep 2026 13:30:14 +0000
ROA not before:           Tue 15 Sep 2026 13:25:14 +0000
ROA not after:            Tue 14 Sep 2027 13:30:14 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9c:a0:37:f2:6e:48:e9:27:1b:a7:b0:65:02:c8:25:a9:8d:c2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:14 2026 GMT
            Not After : Sep 14 13:30:14 2027 GMT
        Subject: CN=308EAFC79A9784ECF0C89F84EDCE6CB4F0A5BE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:f9:d7:18:3e:af:44:8f:ff:4e:e3:73:2a:
                    d4:f0:8e:89:5c:c1:4b:bc:03:a0:11:80:9f:97:64:
                    cd:a5:bf:f8:37:0a:a0:a8:9e:16:b6:90:05:3a:eb:
                    2e:43:30:83:d1:af:ec:ae:05:61:5a:c8:79:c8:3e:
                    d1:38:f2:0d:06:f2:c0:d5:ef:81:59:6d:fb:65:52:
                    e7:44:4e:2f:73:28:f5:32:01:4e:e7:51:62:14:1f:
                    4f:1c:de:a1:1c:97:f5:c0:0a:de:df:f7:14:d5:d5:
                    91:e9:d8:5d:6d:39:55:00:47:d4:2e:2e:fc:70:af:
                    ca:88:d1:75:ce:ae:30:a1:9c:dc:5f:43:c8:93:7c:
                    61:34:7f:6d:78:a0:41:d8:a7:db:4a:f9:73:32:ed:
                    a3:ed:20:b5:a8:52:81:f8:4b:32:81:0b:13:41:d9:
                    8d:fb:17:1b:4b:7b:bc:7f:2b:29:1d:0e:0e:94:61:
                    1e:ba:3a:84:6d:88:dc:4e:26:9a:b6:07:b3:af:d9:
                    2a:d5:f0:13:9b:50:8c:1d:5c:0d:cb:5e:06:7e:dd:
                    c8:5a:6b:cc:a2:01:0d:7a:34:2d:42:fb:2b:cd:f1:
                    bd:f2:27:b6:cf:33:18:05:1e:cc:ed:41:dd:d8:16:
                    cd:9b:50:25:5f:6a:19:c1:52:5e:f2:2c:0a:e8:74:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8E:AF:C7:9A:97:84:EC:F0:C8:9F:84:ED:CE:6C:B4:F0:A5:BE:94
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:d1:ea:ed:5a:3b:95:12:63:0e:d5:80:f8:de:70:a4:fa:d1:
         c5:20:09:da:ba:b1:e4:d4:38:be:13:fe:bf:6f:03:05:09:f8:
         33:98:86:5f:b7:07:af:d7:0e:ed:4a:0f:e5:80:08:09:1a:2f:
         c1:b3:6c:1a:0e:13:e8:0c:58:33:1e:ae:ab:71:8b:22:e0:07:
         ba:76:8e:2f:02:e3:cf:92:a2:e6:12:a6:5f:73:d5:90:d1:63:
         1b:1e:ff:9a:7e:89:0e:94:db:81:92:84:86:80:26:95:16:f9:
         53:a7:5a:5e:72:e5:a9:1e:b1:6e:33:2d:60:b0:09:3e:12:33:
         86:64:73:47:2f:60:20:af:94:88:14:23:7a:bb:40:01:2f:7e:
         99:9e:a7:0e:e4:5e:1a:19:30:bd:16:59:d4:f4:c3:ba:e5:d1:
         61:89:d8:94:0b:48:3c:23:97:04:14:6f:df:62:1e:ef:85:29:
         f7:76:9e:a4:2c:94:52:7b:16:4f:04:c8:13:54:07:08:d8:04:
         a1:5f:f7:ba:95:cc:bd:6a:aa:fe:25:c0:66:0c:53:35:cf:1e:
         25:9f:9d:97:cf:c8:fe:cc:0d:83:4d:f5:c6:1a:f8:c0:20:e0:
         61:94:d1:68:e5:df:8d:40:a4:2d:79:22:b7:ee:74:c4:30:a3:
         96:0c:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:06:58 2026 by rpki-client