Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31312f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e31312f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          H/0EGf5D5jjbtc1L7lHdalAMTk8WLEkm1Mv5aBR6HUM=
Subject key identifier:   8D:0C:D9:3F:BF:56:1F:2A:A5:A5:9F:D8:4F:0B:2C:2C:D0:5D:39:CB
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       41DD4E6B05279331177252403F2092A0AA13353F
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31312f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:09 +0000
ROA not before:           Tue 15 Sep 2026 13:25:09 +0000
ROA not after:            Tue 14 Sep 2027 13:30:09 +0000
asID:                     52266
IP address blocks:        201.219.252.11/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dd:4e:6b:05:27:93:31:17:72:52:40:3f:20:92:a0:aa:13:35:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:09 2026 GMT
            Not After : Sep 14 13:30:09 2027 GMT
        Subject: CN=8D0CD93FBF561F2AA5A59FD84F0B2C2CD05D39CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:24:52:bb:0e:e7:3d:8c:a2:53:ad:0b:c0:
                    12:bf:66:fe:ad:16:86:80:a5:e3:2a:61:ac:fd:2d:
                    03:c8:ef:95:1e:3e:e2:e4:0d:6b:04:ac:73:4e:d7:
                    55:fc:53:ed:aa:25:85:07:ce:32:2d:dc:fd:5e:5e:
                    cd:f9:98:5e:60:56:0d:eb:a3:fd:c6:f6:88:93:89:
                    88:b6:a9:1f:24:0a:8d:0c:55:89:3c:d4:2c:ee:97:
                    11:66:20:cf:82:c9:44:92:4e:2e:f8:e6:6e:28:73:
                    0d:1e:89:ba:93:90:bd:6a:2f:bc:40:0c:d9:29:8f:
                    e9:cd:12:b6:95:16:97:59:87:b2:a6:ac:f3:80:1c:
                    3a:b4:70:a2:04:82:ed:f0:b4:ed:d8:f1:08:0d:df:
                    05:5c:2a:c9:5b:06:8d:f2:94:fa:89:23:93:b1:be:
                    18:74:6d:0a:db:11:fb:6c:be:35:1b:14:af:20:1d:
                    bb:f5:b8:23:a5:7b:fb:01:d0:7f:21:9f:0c:ff:16:
                    89:ef:94:b7:c6:1f:8b:5d:aa:68:c8:01:5d:aa:69:
                    28:71:43:05:94:52:c5:56:dc:e3:20:2b:45:a8:50:
                    3d:01:37:9c:64:60:26:87:9a:04:6a:c0:65:79:64:
                    4a:58:3a:91:0c:26:73:b6:97:5f:bd:30:46:5b:a6:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0C:D9:3F:BF:56:1F:2A:A5:A5:9F:D8:4F:0B:2C:2C:D0:5D:39:CB
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31312f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.11/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:d6:30:f7:50:08:b2:65:01:8b:cc:a1:f0:e0:d9:32:eb:cc:
         a4:58:0c:9c:0f:7a:23:c2:e5:57:19:4c:ea:cb:65:e0:03:1d:
         3f:bf:b8:78:31:df:c6:02:6e:50:6e:be:e0:94:f7:2c:18:c5:
         d2:31:f3:42:34:47:08:12:0c:bb:55:f7:c1:83:ec:0f:96:04:
         26:d2:33:a2:0f:4f:b0:04:97:f3:10:c0:45:42:ae:e9:7a:2d:
         ba:bc:5b:08:22:cc:d9:92:27:3d:6e:9d:3c:1d:ce:ac:52:b2:
         a3:20:51:16:b1:fc:7c:ec:30:20:54:6b:cc:8f:b1:85:05:ce:
         3e:a7:01:7e:f5:70:39:4e:bb:da:4f:55:4e:b7:4e:2a:6b:8a:
         44:b9:be:80:2c:e6:33:91:46:54:05:b9:56:01:b2:50:95:12:
         fe:a4:89:f3:b5:da:ee:67:b7:19:9a:1e:ee:0b:91:56:3f:f7:
         dc:a1:66:6b:07:e1:69:f0:ed:eb:6b:14:51:87:c8:e0:f6:51:
         ec:9c:7f:1b:6a:41:fe:4f:a2:2f:31:c5:bb:e7:3c:12:33:cc:
         87:12:86:c6:ef:eb:28:e6:34:07:53:0e:20:35:e1:44:f4:94:
         95:4f:35:3b:34:91:4b:1f:87:88:05:97:a0:33:37:05:6c:3b:
         ab:ef:cd:ac
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUQd1OawUnkzEXclJAPyCSoKoTNT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDlaFw0yNzA5MTQxMzMwMDlaMDMxMTAvBgNV
BAMTKDhEMENEOTNGQkY1NjFGMkFBNUE1OUZEODRGMEIyQzJDRDA1RDM5Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkPyRSuw7nPYyiU60LwBK/Zv6t
FoaApeMqYaz9LQPI75UePuLkDWsErHNO11X8U+2qJYUHzjIt3P1eXs35mF5gVg3r
o/3G9oiTiYi2qR8kCo0MVYk81CzulxFmIM+CyUSSTi745m4ocw0eibqTkL1qL7xA
DNkpj+nNEraVFpdZh7KmrPOAHDq0cKIEgu3wtO3Y8QgN3wVcKslbBo3ylPqJI5Ox
vhh0bQrbEftsvjUbFK8gHbv1uCOle/sB0H8hnwz/FonvlLfGH4tdqmjIAV2qaShx
QwWUUsVW3OMgK0WoUD0BN5xkYCaHmgRqwGV5ZEpYOpEMJnO2l1+9MEZbpnJBAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUjQzZP79WHyqlpZ/YTwssLNBdOcswHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMxMzEyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wLMA0GCSqGSIb3DQEBCwUAA4IBAQC21jD3UAiyZQGLzKHw4Nky68ykWAycD3oj
wuVXGUzqy2XgAx0/v7h4Md/GAm5Qbr7glPcsGMXSMfNCNEcIEgy7VffBg+wPlgQm
0jOiD0+wBJfzEMBFQq7pei26vFsIIszZkic9bp08Hc6sUrKjIFEWsfx87DAgVGvM
j7GFBc4+pwF+9XA5TrvaT1VOt04qa4pEub6ALOYzkUZUBblWAbJQlRL+pInztdru
Z7cZmh7uC5FWP/fcoWZrB+Fp8O3raxRRh8jg9lHsnH8bakH+T6IvMcW75zwSM8yH
EobG7+so5jQHUw4gNeFE9JSVTzU7NJFLH4eIBZegMzcFbDur782s
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:54 2026 by rpki-client