Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32302f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32302f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          4FJKhnwnROIOeHm6T7JyejPTctW9a504m2CtwnsCVnw=
Subject key identifier:   D9:23:5C:9B:09:3A:F4:5E:5D:81:16:49:69:01:9F:E3:B9:F1:24:AB
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       4700F6D2454110EDDE10A3840D6FBF4F80312498
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32302f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:17 +0000
ROA not before:           Tue 15 Sep 2026 13:25:17 +0000
ROA not after:            Tue 14 Sep 2027 13:30:17 +0000
asID:                     52266
IP address blocks:        201.219.252.20/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:f6:d2:45:41:10:ed:de:10:a3:84:0d:6f:bf:4f:80:31:24:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:17 2026 GMT
            Not After : Sep 14 13:30:17 2027 GMT
        Subject: CN=D9235C9B093AF45E5D81164969019FE3B9F124AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ab:7f:f6:2c:04:18:40:ed:4f:c5:a7:89:ca:
                    d0:36:16:1e:db:40:1a:11:54:33:35:0e:0e:31:a5:
                    a4:c0:e0:98:f8:1e:07:fa:76:70:f6:a1:68:0f:5a:
                    13:ff:52:f8:46:8e:91:25:26:7a:f4:fe:62:49:0c:
                    7a:7b:70:c4:1e:1b:3b:b7:3e:17:0b:eb:9a:30:39:
                    a9:07:da:07:0a:40:10:55:5c:61:3e:6e:f7:5b:c4:
                    72:66:3a:1c:70:3b:c9:ae:cb:d2:57:d1:76:9d:90:
                    29:4c:7e:af:8c:99:e5:3c:88:e7:b7:af:37:fb:13:
                    6e:a9:4f:3b:7d:e6:bc:a1:2b:53:cc:94:88:0d:21:
                    ad:17:ac:6c:87:f0:18:78:55:ef:80:c3:28:be:26:
                    ef:99:7d:fa:c0:08:2e:42:6c:ee:8c:f0:15:6a:b9:
                    b4:94:79:73:fc:ee:7e:5c:34:bf:4c:b2:be:2d:a7:
                    31:2b:96:22:e5:fc:c1:d6:6c:68:db:05:0f:54:92:
                    5a:a5:80:09:25:2c:d2:a2:7c:8b:59:8b:5b:56:ae:
                    2b:87:2c:15:62:a9:26:ca:e6:fb:d8:97:ab:f2:f2:
                    16:0c:d6:fe:df:39:59:95:ef:87:09:70:59:12:98:
                    f5:a8:5c:19:5d:e4:42:bf:25:69:99:27:06:77:ce:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:5C:9B:09:3A:F4:5E:5D:81:16:49:69:01:9F:E3:B9:F1:24:AB
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32302f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.20/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:95:c6:b9:b9:80:74:01:f9:cf:e9:04:28:81:01:60:d7:dc:
         c5:d7:af:77:e9:1c:2b:3c:0e:b1:1e:c1:bd:3c:54:bd:57:0a:
         44:c8:98:cc:50:47:d3:f6:62:a5:eb:88:82:f3:0f:c0:24:8f:
         40:f5:39:0f:57:8b:c7:62:d9:23:8d:69:79:cb:1e:5b:3e:ac:
         7b:66:93:f0:c0:09:d3:3e:7c:7a:40:64:e8:78:56:58:e9:e8:
         5b:1b:a6:ca:04:e1:00:20:a1:c2:b7:b1:52:7f:65:17:38:58:
         71:ac:ee:51:68:a6:ed:d3:02:f2:96:9a:76:ec:c3:1f:2a:bf:
         e5:89:a1:6e:45:ac:dd:38:9c:38:20:09:85:14:b6:da:86:0b:
         16:cd:b1:b1:cb:dc:3c:07:8f:d6:18:dc:4d:ac:0e:2e:7f:fd:
         64:52:cd:e6:ea:0d:9e:b6:dd:d2:98:92:a0:48:5c:2c:76:5f:
         a0:ac:1e:e6:07:b1:45:ed:0e:91:7c:73:88:50:5c:23:a1:54:
         2b:17:b5:cf:e9:b3:a3:af:62:10:9c:f9:f4:fb:0e:c6:24:b2:
         7f:28:17:ae:63:29:f9:0d:d9:ec:87:61:ac:4c:35:cb:9e:ed:
         f6:f2:6f:af:cf:eb:06:fd:b8:d5:d3:95:48:d5:b7:e3:37:6d:
         65:99:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:32 2026 by rpki-client