Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32312f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32312f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          BswNYqy2tAyFMZLyqxIzCNti7y7SDXs0TRfLVGGe1Pw=
Subject key identifier:   14:AB:30:BA:4A:3F:11:59:47:EF:DA:73:97:7B:9C:E4:4C:C3:EA:7A
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       1139424A0A1F5D029B0F32D3EC419928BEE8FDBA
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32312f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:04 +0000
ROA not before:           Tue 15 Sep 2026 13:25:04 +0000
ROA not after:            Tue 14 Sep 2027 13:30:04 +0000
asID:                     52266
IP address blocks:        201.219.252.21/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:42:4a:0a:1f:5d:02:9b:0f:32:d3:ec:41:99:28:be:e8:fd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:04 2026 GMT
            Not After : Sep 14 13:30:04 2027 GMT
        Subject: CN=14AB30BA4A3F115947EFDA73977B9CE44CC3EA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:4a:3e:4d:32:23:5f:92:7f:9c:fd:6f:00:
                    5b:9a:08:12:df:08:d7:96:84:a1:5e:6c:5f:7e:46:
                    3f:66:34:f9:46:d7:7e:87:83:00:1d:18:f4:7f:d2:
                    6c:f3:5b:7d:a3:11:0e:fa:67:17:13:2e:c5:52:9a:
                    71:fc:cd:38:74:a8:7d:b0:ca:f9:6e:83:31:8c:e2:
                    cc:db:fd:ac:04:94:98:88:57:6e:e2:a9:45:f4:68:
                    b7:12:fd:91:28:fe:20:ed:df:c6:18:42:0c:ee:d4:
                    fe:86:3b:64:47:88:af:86:af:99:2f:54:c9:7c:d1:
                    ab:46:96:57:ee:a0:6f:03:ce:ce:09:41:ee:01:72:
                    2e:2c:75:2e:8d:2b:07:0d:11:3c:c6:70:3b:af:d4:
                    d1:4c:33:c3:c1:b0:07:a2:a1:33:72:90:6e:6a:f8:
                    43:0e:52:c2:2f:b1:0b:b8:db:52:6d:fd:0c:7a:dd:
                    cf:ee:9b:f8:e6:98:a6:f0:5f:9c:2f:a3:b2:b7:bb:
                    a4:2f:c4:a3:c2:2d:1c:3e:4f:e5:b1:90:ff:75:53:
                    fc:54:c1:3b:4a:69:ae:23:64:c5:6e:bf:a5:45:29:
                    4f:0a:09:98:10:bf:f6:7d:ee:0d:0a:77:97:21:41:
                    14:ed:5f:58:65:46:67:6b:02:c6:88:a6:40:85:04:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:30:BA:4A:3F:11:59:47:EF:DA:73:97:7B:9C:E4:4C:C3:EA:7A
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32312f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.21/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e6:37:c9:dd:89:6b:d1:99:e0:40:61:1a:a4:9d:df:7b:4f:
         e1:ea:a7:71:8e:3c:77:a3:46:dc:d7:7c:f7:a3:8b:ed:f1:0a:
         66:c7:bc:8e:26:78:f4:65:3a:6a:d0:83:8b:1e:7e:dc:84:b1:
         80:de:dc:5c:bd:49:6a:fb:9f:1f:e3:e8:c8:af:b7:11:10:1f:
         77:8f:ff:5d:60:5d:3f:c5:86:cb:b6:bc:14:37:98:5e:03:f3:
         4e:eb:32:41:a3:04:ca:c3:7f:6b:32:d4:ec:15:32:a2:b3:5d:
         7e:1b:72:8d:0d:a2:6d:e0:24:32:e2:b8:1e:50:a2:5f:18:f7:
         82:52:15:81:a2:6e:f4:d3:a5:66:57:68:ac:8c:34:2e:67:58:
         49:41:b0:e7:30:39:24:ad:1f:b4:e7:d4:a7:0f:51:2b:19:a2:
         64:36:54:3f:f6:6e:44:e2:5c:41:15:00:dc:ed:bf:d3:c6:71:
         9a:59:3b:8e:93:4d:02:b3:91:20:94:23:8e:7c:d1:9a:46:d2:
         1d:e6:a7:f4:56:a4:ca:b4:80:25:29:f5:af:7f:da:cd:e1:63:
         a1:09:49:8b:dd:65:22:c8:eb:d1:e4:fc:b6:81:0e:3d:d6:f3:
         b5:af:fd:36:3f:10:d2:b8:06:3d:16:60:a9:b2:6c:8c:dd:f3:
         84:f9:59:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:17 2026 by rpki-client