Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31342f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e31342f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          3z7nCgYHr1p2QwBvizAhS07jA/JQpPwbq2fjyN02MA8=
Subject key identifier:   D4:A9:97:EE:DA:5F:60:2D:30:FA:24:F8:8E:10:5E:F8:AB:34:25:72
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       6034693AE1F5DD7C8D45524023B0F1C5F766D652
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31342f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:02 +0000
ROA not before:           Tue 15 Sep 2026 13:25:02 +0000
ROA not after:            Tue 14 Sep 2027 13:30:02 +0000
asID:                     52266
IP address blocks:        201.219.252.14/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:34:69:3a:e1:f5:dd:7c:8d:45:52:40:23:b0:f1:c5:f7:66:d6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:02 2026 GMT
            Not After : Sep 14 13:30:02 2027 GMT
        Subject: CN=D4A997EEDA5F602D30FA24F88E105EF8AB342572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:fe:66:85:d6:96:a4:9d:f1:d5:6d:31:8e:
                    92:b7:5d:40:42:72:c3:40:3a:1b:b5:b7:5b:cf:87:
                    92:dd:a8:2d:cc:03:82:af:4b:0c:ce:9e:db:84:28:
                    47:fa:04:80:89:98:36:05:98:ac:e2:d2:4f:ec:be:
                    7f:cb:7b:fb:85:f7:a2:e8:62:45:0a:a0:28:19:6f:
                    34:0c:51:83:66:e3:77:33:d2:2a:27:11:ec:8e:b7:
                    81:04:2c:e3:c1:8d:c5:8c:af:9b:10:b9:43:5b:8d:
                    5e:09:a4:c6:c4:01:48:5c:a4:e1:2a:4d:5f:26:7f:
                    da:4d:5a:03:9d:ee:e5:c3:ad:fa:7f:06:06:ab:d6:
                    c8:df:eb:28:f2:82:03:db:a9:cd:d4:bf:72:0b:dc:
                    d5:5e:9d:5a:bf:4e:7f:e2:94:ff:38:a3:09:a1:b7:
                    09:bb:68:08:67:dd:fa:80:15:d0:86:41:1b:a4:57:
                    5c:f6:0d:c9:65:9f:5b:ed:5d:56:7b:51:ca:a3:4e:
                    00:ad:c5:01:c2:43:ae:62:7b:4d:f2:7c:61:d3:58:
                    90:6a:72:49:04:ee:9b:b7:83:a8:bd:80:33:ca:19:
                    9b:9f:19:51:0a:78:8e:9a:58:44:47:45:99:e1:42:
                    3e:a8:01:3f:8e:5c:14:2a:4c:4d:79:01:f8:ae:4d:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A9:97:EE:DA:5F:60:2D:30:FA:24:F8:8E:10:5E:F8:AB:34:25:72
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31342f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.14/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:61:2b:27:b9:f7:8e:44:76:e9:2e:52:54:24:4e:e2:73:
         36:45:17:93:7a:e3:c3:a0:84:67:be:3c:fe:8f:56:c5:81:8d:
         2c:f7:0c:7a:2b:cc:ce:34:e0:5c:43:3c:67:11:c5:42:50:66:
         e9:20:e1:0c:10:76:57:03:a1:a1:06:b8:49:e4:3f:2c:9b:2a:
         99:a1:91:85:ed:94:44:90:04:9a:b0:3f:da:4e:f7:a3:d5:ea:
         86:15:af:53:1b:b7:b9:1c:34:9e:f2:b4:28:79:4c:cf:d6:33:
         48:af:c4:8d:0a:39:aa:d1:21:bb:af:ea:81:f7:59:1b:94:27:
         5e:4e:9a:19:99:2c:4b:46:1a:13:74:73:00:12:2b:d9:ec:06:
         55:8b:4c:42:c5:6d:b4:a6:a5:46:11:12:d9:9e:7c:e2:72:68:
         4a:b1:55:fc:27:bc:8d:d8:42:e8:76:c6:0e:45:d9:0d:23:d9:
         04:c8:5a:9c:28:15:aa:cf:25:7d:24:64:e0:7b:bc:a1:ec:42:
         5a:69:91:eb:99:f8:ac:c6:15:19:c1:13:99:e2:be:5b:d9:88:
         d5:a1:ea:3c:20:7d:b5:d2:ce:2c:f1:b7:44:48:78:67:12:d7:
         44:5d:d8:08:11:3a:61:ec:9f:06:03:1a:bf:19:d1:7c:e8:38:
         12:32:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:04 2026 by rpki-client