Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32342f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32342f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          7yv44L9kx67wjuNC1X2Z+wP1TcrmQNV2ggn4/xA/84g=
Subject key identifier:   03:95:99:85:59:95:65:A1:91:8B:7A:F9:E3:B0:F1:50:29:9C:B1:A4
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       13968ACA0920BDEA605C738BC45B5A409153D1F8
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32342f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:02 +0000
ROA not before:           Tue 15 Sep 2026 13:25:02 +0000
ROA not after:            Tue 14 Sep 2027 13:30:02 +0000
asID:                     52266
IP address blocks:        201.219.252.24/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:96:8a:ca:09:20:bd:ea:60:5c:73:8b:c4:5b:5a:40:91:53:d1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:02 2026 GMT
            Not After : Sep 14 13:30:02 2027 GMT
        Subject: CN=03959985599565A1918B7AF9E3B0F150299CB1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:e7:e2:54:f5:1d:61:e3:07:da:51:d4:61:
                    9e:44:b9:ee:14:e7:da:b3:b8:e2:f4:8d:2e:42:98:
                    86:90:6b:5c:38:9e:7e:b1:73:ad:a0:4e:cb:01:1b:
                    db:25:fc:24:6d:d3:e3:27:65:1d:29:46:41:fc:b8:
                    55:f2:9c:3c:b9:29:c6:da:00:a6:0d:ea:ec:01:47:
                    c9:b9:a1:59:85:ad:57:3e:d8:75:31:ed:c6:34:9d:
                    b5:23:20:90:ea:af:93:88:5e:f0:ba:41:27:0f:88:
                    a6:6f:d2:eb:0a:2f:a0:fb:f4:fe:9d:b2:53:8c:08:
                    cc:82:a1:7b:a3:5b:61:38:5f:f0:8a:03:7a:3c:03:
                    41:96:1c:12:33:3e:b3:45:ce:bc:1f:bd:44:b9:a1:
                    ee:87:d7:c6:fd:57:5d:94:45:45:0e:d6:9f:f7:65:
                    da:89:74:de:93:64:37:b3:b7:77:7c:d8:da:32:21:
                    5d:d9:36:a8:3a:fc:0b:8b:2c:07:8a:92:0a:af:45:
                    4f:66:52:59:03:7a:ca:da:7c:51:0a:74:49:f0:8d:
                    b3:c0:a0:b6:8a:16:42:29:a5:2a:1d:ce:7d:c5:d8:
                    72:9d:a7:78:42:18:80:41:96:ec:d9:66:20:d5:94:
                    44:b9:3b:62:90:43:8f:2c:bf:48:4f:30:aa:e7:2a:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:95:99:85:59:95:65:A1:91:8B:7A:F9:E3:B0:F1:50:29:9C:B1:A4
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32342f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.24/32

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:20:46:8b:19:54:28:22:16:5b:5a:46:f6:48:bc:a3:f1:
         c9:94:5c:14:da:03:55:12:f1:67:47:72:24:38:d6:24:22:c3:
         b9:88:25:46:6c:5a:62:97:4e:fc:2f:74:a7:57:45:e8:39:16:
         94:88:aa:9b:ae:db:4f:84:de:34:24:1b:b2:56:f0:78:5e:79:
         8d:f9:36:fc:1b:00:9c:ea:ac:97:e6:0f:dc:11:9f:08:0a:5e:
         7d:96:48:6a:74:79:9b:c1:9a:d1:2f:11:18:c8:d0:b5:a6:60:
         da:b8:d6:56:ff:09:69:09:2a:c3:8f:99:00:28:98:84:45:f8:
         0e:15:32:6b:50:33:35:77:41:91:81:2a:d2:75:86:9b:e9:9d:
         78:09:70:5d:2f:9c:98:2d:44:fa:90:e5:c3:66:8e:27:65:87:
         f2:a3:04:75:e8:cc:06:bc:e8:ab:01:2a:e5:b7:be:b8:65:6a:
         13:c6:4f:66:fd:8c:d7:dd:c8:83:92:ed:48:40:19:8a:a5:88:
         94:b1:89:ac:cb:39:86:5a:f1:e9:ad:89:8b:52:13:47:0a:5b:
         c5:54:a2:33:87:8b:13:67:72:2e:a5:42:05:7b:99:1f:fa:34:
         74:43:93:65:66:ad:8a:74:0d:a0:a2:5f:dd:33:15:90:4e:40:
         8f:a2:b9:b1
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUE5aKygkgvepgXHOLxFtaQJFT0fgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDJaFw0yNzA5MTQxMzMwMDJaMDMxMTAvBgNV
BAMTKDAzOTU5OTg1NTk5NTY1QTE5MThCN0FGOUUzQjBGMTUwMjk5Q0IxQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhOfiVPUdYeMH2lHUYZ5Eue4U
59qzuOL0jS5CmIaQa1w4nn6xc62gTssBG9sl/CRt0+MnZR0pRkH8uFXynDy5Kcba
AKYN6uwBR8m5oVmFrVc+2HUx7cY0nbUjIJDqr5OIXvC6QScPiKZv0usKL6D79P6d
slOMCMyCoXujW2E4X/CKA3o8A0GWHBIzPrNFzrwfvUS5oe6H18b9V12URUUO1p/3
ZdqJdN6TZDezt3d82NoyIV3ZNqg6/AuLLAeKkgqvRU9mUlkDesrafFEKdEnwjbPA
oLaKFkIppSodzn3F2HKdp3hCGIBBluzZZiDVlES5O2KQQ48sv0hPMKrnKgDTAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUA5WZhVmVZaGRi3r547DxUCmcsaQwHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMyMzQyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wYMA0GCSqGSIb3DQEBCwUAA4IBAQBRXCBGixlUKCIWW1pG9ki8o/HJlFwU2gNV
EvFnR3IkONYkIsO5iCVGbFpil078L3SnV0XoORaUiKqbrttPhN40JBuyVvB4XnmN
+Tb8GwCc6qyX5g/cEZ8ICl59lkhqdHmbwZrRLxEYyNC1pmDauNZW/wlpCSrDj5kA
KJiERfgOFTJrUDM1d0GRgSrSdYab6Z14CXBdL5yYLUT6kOXDZo4nZYfyowR16MwG
vOirASrlt764ZWoTxk9m/YzX3ciDku1IQBmKpYiUsYmsyzmGWvHprYmLUhNHClvF
VKIzh4sTZ3IupUIFe5kf+jR0Q5NlZq2KdA2gol/dMxWQTkCPormx
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:18 2026 by rpki-client