Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31372f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e31372f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          aryntciiP1aZdnUmAOOslxJZRKfKK8xQnou5BnM4Kg8=
Subject key identifier:   27:28:3E:BF:3C:D7:3A:E8:1E:2D:6A:60:9B:DF:02:F6:34:5F:E5:2D
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       10EB22BEE3F64BE3261DE7404146E3D1470A18E2
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31372f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:05 +0000
ROA not before:           Tue 15 Sep 2026 13:25:05 +0000
ROA not after:            Tue 14 Sep 2027 13:30:05 +0000
asID:                     52266
IP address blocks:        201.219.252.17/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:eb:22:be:e3:f6:4b:e3:26:1d:e7:40:41:46:e3:d1:47:0a:18:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:05 2026 GMT
            Not After : Sep 14 13:30:05 2027 GMT
        Subject: CN=27283EBF3CD73AE81E2D6A609BDF02F6345FE52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:58:21:b2:72:2b:a3:3a:f5:fa:2a:4b:33:
                    2e:9f:df:5b:bc:78:b5:d6:8c:51:29:d6:3d:1b:ab:
                    e2:d5:93:3d:e4:d7:f7:74:0b:01:3d:46:37:3b:6d:
                    24:b5:7a:5e:58:6b:33:d1:39:09:47:74:36:8a:80:
                    94:b5:58:0a:32:a7:e8:00:4b:29:22:01:1f:02:9d:
                    4e:e6:d7:23:dd:8c:82:3f:88:6d:e1:f4:24:c8:2b:
                    ec:6b:df:54:ee:bb:86:5c:29:6e:36:74:2f:1e:53:
                    47:23:af:66:b2:72:12:69:9d:a2:20:4b:fd:0f:05:
                    52:b8:89:d0:a6:0d:53:0f:af:95:cb:0c:89:6c:00:
                    87:93:24:13:3c:79:bd:16:6c:af:e9:7b:8d:3f:12:
                    d0:ae:56:a9:bb:cc:c8:84:df:c7:29:a3:0f:a8:c3:
                    95:fd:2c:6e:05:32:04:3e:ac:09:b9:5c:dd:b4:cc:
                    18:16:4d:b9:80:8d:a3:33:8a:a4:b4:bd:43:86:16:
                    c5:3f:fc:12:fc:cc:2d:b2:10:04:0d:08:b7:2f:65:
                    db:97:4d:34:bf:64:f7:73:40:0e:35:f1:c1:31:34:
                    da:83:07:72:6d:29:d6:40:1f:20:4c:d8:85:0e:ff:
                    ea:28:9a:f8:7e:5b:fa:ca:75:16:bb:4c:2d:60:7f:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:28:3E:BF:3C:D7:3A:E8:1E:2D:6A:60:9B:DF:02:F6:34:5F:E5:2D
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31372f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.17/32

    Signature Algorithm: sha256WithRSAEncryption
         14:57:5d:f6:fa:c6:c7:19:25:cc:54:e1:26:30:cd:87:60:00:
         ca:3f:b9:b2:2e:19:f2:78:21:e8:f9:af:c6:14:38:68:69:a2:
         f4:75:ac:73:6b:2d:30:77:82:8e:db:a0:e0:b6:ef:3e:f9:f0:
         d2:ee:0b:62:d5:7c:21:e8:94:78:4a:a3:44:e8:1c:33:24:19:
         1f:fe:2a:c4:64:32:c2:38:fc:d9:b5:d6:49:2e:df:cf:11:26:
         5a:08:b5:90:03:1a:63:5a:58:e6:fb:c8:3c:c2:22:aa:82:cb:
         d8:ce:54:8c:b4:e8:c1:ea:a1:0d:18:91:1c:8c:77:29:a9:fb:
         e2:46:07:42:65:e1:bc:a1:fd:90:6f:38:c8:38:a5:88:8e:26:
         4f:36:1e:ce:26:d1:c2:74:39:ca:e7:b6:6b:24:2d:2e:51:c4:
         ba:4a:90:94:97:7b:21:c7:dc:2a:0c:81:ff:b1:f9:76:44:69:
         bd:2f:79:a1:32:67:85:4d:55:ba:e3:44:ed:9d:af:95:72:2e:
         ac:8e:52:e1:3a:91:36:74:d8:01:19:94:09:d5:7b:83:05:fa:
         e4:dc:f0:94:05:74:c9:8f:6e:3b:6f:8b:99:12:21:64:a2:31:
         9c:51:18:6e:32:7c:57:c7:d0:f1:97:00:94:ab:88:e5:71:5b:
         bd:6d:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:53 2026 by rpki-client