Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32322f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32322f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          X4dVR0SNOmGS1BtMDckXg2Thgf1qjpkRrtwhEV6nvjU=
Subject key identifier:   3C:9E:BE:75:1B:C7:6C:80:BD:50:29:E7:DB:63:DB:EE:63:45:84:1B
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       66F6203DD8D6D2DD47901A517D08922DDACFE61A
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32322f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:00 +0000
ROA not before:           Tue 15 Sep 2026 13:25:00 +0000
ROA not after:            Tue 14 Sep 2027 13:30:00 +0000
asID:                     52266
IP address blocks:        201.219.252.22/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f6:20:3d:d8:d6:d2:dd:47:90:1a:51:7d:08:92:2d:da:cf:e6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:00 2026 GMT
            Not After : Sep 14 13:30:00 2027 GMT
        Subject: CN=3C9EBE751BC76C80BD5029E7DB63DBEE6345841B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:f4:f3:4a:f3:2c:2d:06:77:f6:83:fa:0c:
                    95:8d:ec:67:9d:97:65:cd:51:c3:12:2b:6c:1b:93:
                    5c:a0:db:cc:7b:5b:27:ac:fd:82:29:3f:01:84:42:
                    7e:36:f7:a5:c1:e1:30:94:6e:97:db:9f:f3:6f:e4:
                    2d:61:fd:14:f1:80:49:47:30:17:5f:3f:06:1f:b9:
                    61:94:2f:da:c4:ae:15:56:0f:65:07:7a:22:34:28:
                    e1:90:ca:60:a9:3c:e4:6d:5e:a2:26:41:fc:4b:2e:
                    5c:43:92:7b:a5:62:98:1f:d2:1f:ce:07:86:df:74:
                    71:db:b2:ee:e4:37:6b:f8:f5:38:6b:76:4e:ac:ac:
                    56:a3:ec:5e:25:ef:a4:be:70:26:e7:c1:1c:47:c9:
                    bb:c9:b4:75:97:89:de:5c:05:4b:34:c1:61:6f:91:
                    1d:bb:28:23:6f:f7:9b:55:f3:23:a5:1a:f7:b8:5c:
                    17:70:27:f1:6e:93:01:75:ac:88:70:05:43:4c:78:
                    af:c5:19:65:6c:a0:45:4e:5d:c1:3e:fb:24:e8:6a:
                    9e:58:2c:c4:2d:f3:57:cb:86:2f:08:fe:e1:8e:f1:
                    f3:b4:25:91:46:54:6a:01:47:6b:5c:29:19:6a:3e:
                    d5:f4:61:e7:df:80:4b:b0:a7:ec:da:b8:e1:7d:a7:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9E:BE:75:1B:C7:6C:80:BD:50:29:E7:DB:63:DB:EE:63:45:84:1B
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32322f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.22/32

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:52:66:b2:75:13:ae:12:5d:23:4c:a4:05:ec:7a:4a:10:
         06:52:a5:ea:c7:c6:63:07:e5:6f:b4:a0:a7:bf:99:d3:64:a6:
         b9:2e:0e:03:a7:ed:89:1d:1e:a7:f8:e4:4c:69:ed:ad:db:5c:
         d3:fa:4a:f9:ca:ca:d3:06:7e:13:3f:e6:5b:38:53:75:9f:76:
         d1:aa:9d:2f:8b:68:f3:59:eb:20:38:bf:04:84:f5:17:05:b8:
         22:c1:da:e6:2e:f6:e4:c3:82:bb:27:6b:29:17:42:9c:99:11:
         fd:4e:fb:6e:bd:76:f2:de:43:d3:a0:b0:3d:98:3c:5f:6f:5e:
         86:5b:3c:c7:10:ed:3c:f9:05:04:be:bf:6c:98:8d:0c:9c:1a:
         c2:0a:c9:bf:5e:73:fa:01:f4:8e:0f:e6:eb:a1:a2:24:61:61:
         6f:bd:d3:dc:b0:92:84:f6:81:2c:f1:68:5e:62:1a:55:1f:d5:
         24:60:06:13:e1:ac:eb:bd:b3:fa:7f:bf:9d:a4:7a:39:0a:a4:
         1b:c8:43:de:31:c8:bc:3d:48:9a:09:ec:43:49:a4:46:ef:f1:
         70:1f:9f:13:c7:4d:e1:e3:80:5c:ed:24:d6:cd:28:6b:31:57:
         60:b7:49:e9:98:cc:a5:80:00:36:c7:d1:25:c0:ac:24:1b:8a:
         5c:4b:4c:8c
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUZvYgPdjW0t1HkBpRfQiSLdrP5howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDBaFw0yNzA5MTQxMzMwMDBaMDMxMTAvBgNV
BAMTKDNDOUVCRTc1MUJDNzZDODBCRDUwMjlFN0RCNjNEQkVFNjM0NTg0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjLvTzSvMsLQZ39oP6DJWN7Ged
l2XNUcMSK2wbk1yg28x7Wyes/YIpPwGEQn4296XB4TCUbpfbn/Nv5C1h/RTxgElH
MBdfPwYfuWGUL9rErhVWD2UHeiI0KOGQymCpPORtXqImQfxLLlxDknulYpgf0h/O
B4bfdHHbsu7kN2v49Thrdk6srFaj7F4l76S+cCbnwRxHybvJtHWXid5cBUs0wWFv
kR27KCNv95tV8yOlGve4XBdwJ/FukwF1rIhwBUNMeK/FGWVsoEVOXcE++yToap5Y
LMQt81fLhi8I/uGO8fO0JZFGVGoBR2tcKRlqPtX0YeffgEuwp+zauOF9py6xAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUPJ6+dRvHbIC9UCnn22Pb7mNFhBswHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMyMzIyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wWMA0GCSqGSIb3DQEBCwUAA4IBAQAz/VJmsnUTrhJdI0ykBex6ShAGUqXqx8Zj
B+VvtKCnv5nTZKa5Lg4Dp+2JHR6n+ORMae2t21zT+kr5ysrTBn4TP+ZbOFN1n3bR
qp0vi2jzWesgOL8EhPUXBbgiwdrmLvbkw4K7J2spF0KcmRH9TvtuvXby3kPToLA9
mDxfb16GWzzHEO08+QUEvr9smI0MnBrCCsm/XnP6AfSOD+broaIkYWFvvdPcsJKE
9oEs8WheYhpVH9UkYAYT4azrvbP6f7+dpHo5CqQbyEPeMci8PUiaCexDSaRG7/Fw
H58Tx03h44Bc7STWzShrMVdgt0npmMylgAA2x9ElwKwkG4pcS0yM
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:12 2026 by rpki-client