Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32372f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32372f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          R/JFHtORUSGnd3RummA4aGeccsJT6gA6Jmxem61FvlI=
Subject key identifier:   CA:BD:69:65:E8:EB:FA:84:6D:8F:FA:25:5E:8F:04:57:CD:AE:31:A2
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       171498C0A69141298E50A0496C318EE73A027BE8
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32372f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:18 +0000
ROA not before:           Tue 15 Sep 2026 13:25:18 +0000
ROA not after:            Tue 14 Sep 2027 13:30:18 +0000
asID:                     52266
IP address blocks:        201.219.252.27/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:14:98:c0:a6:91:41:29:8e:50:a0:49:6c:31:8e:e7:3a:02:7b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:18 2026 GMT
            Not After : Sep 14 13:30:18 2027 GMT
        Subject: CN=CABD6965E8EBFA846D8FFA255E8F0457CDAE31A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:75:94:c1:da:b4:bd:7b:aa:59:ab:48:3c:
                    e9:62:3a:a7:12:76:25:26:21:32:a2:83:61:48:29:
                    70:a2:4d:a3:46:3b:17:61:6e:7d:20:1a:84:76:da:
                    29:ff:b1:a5:89:3c:22:09:4b:73:8e:af:80:b2:92:
                    1b:4e:5b:07:1c:a8:94:aa:eb:41:aa:bd:1a:8f:55:
                    1a:78:eb:6c:ce:61:e5:4b:8f:f5:a2:2b:35:6c:1b:
                    0c:7e:a8:a8:5a:28:90:24:d9:e4:cc:df:08:be:38:
                    5c:93:d8:08:a2:c0:06:cb:fb:25:89:24:68:e1:92:
                    bd:ec:2c:f4:83:44:75:95:db:79:cf:06:2c:17:16:
                    d8:f0:cc:4a:97:22:48:14:8d:d1:a9:56:e2:a1:6a:
                    2f:39:ab:fd:b8:46:41:1d:24:24:75:83:92:b3:bf:
                    2f:9f:02:8b:53:dd:d2:0f:db:76:1b:a3:e7:ed:44:
                    c1:91:55:5b:f7:7c:49:fd:b4:8d:56:46:96:c3:dd:
                    6f:8e:38:5d:e1:38:55:9c:34:c2:10:6c:55:56:c4:
                    a0:39:1d:21:dd:39:7d:37:95:08:c8:97:72:0f:31:
                    14:fb:2b:d3:f0:65:2e:43:ac:d5:de:fe:e8:6d:ee:
                    62:8d:af:e1:15:ca:32:65:10:01:46:11:1e:04:d1:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:69:65:E8:EB:FA:84:6D:8F:FA:25:5E:8F:04:57:CD:AE:31:A2
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32372f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.27/32

    Signature Algorithm: sha256WithRSAEncryption
         78:80:7e:20:bf:7f:c9:4c:2f:32:09:76:c4:04:24:30:0f:ff:
         44:a3:2e:af:a5:67:ac:18:6c:77:2d:93:e5:8f:e6:2c:80:b5:
         a1:8e:e7:cf:56:c5:3d:e1:54:75:69:bb:bb:6c:04:d3:28:49:
         6b:7c:96:70:7b:96:51:83:ff:8a:cb:88:3b:89:7b:25:05:65:
         c0:c5:65:e4:45:4a:8c:0b:1e:6d:4b:b8:2a:fa:98:6d:9d:55:
         82:e0:c7:9a:5f:24:7c:e2:e3:3f:2c:c2:89:6b:83:da:92:be:
         ca:d0:c4:fa:67:50:1f:05:20:c9:3a:54:c4:19:da:71:1a:73:
         c1:a9:f7:cf:22:b8:51:cc:b6:b0:b8:d9:52:ea:b9:8f:db:7d:
         90:62:26:15:db:9d:e9:35:da:a7:31:df:f9:f5:f4:14:c3:a5:
         f5:ef:ff:37:3c:34:b6:43:d1:49:86:87:42:75:5d:3f:98:2d:
         28:7c:8a:b2:3c:40:14:88:05:1d:03:62:9b:2b:bb:6b:ec:79:
         59:c0:44:ad:a8:41:54:0d:7d:ed:37:9a:81:b1:58:a7:99:2a:
         71:08:6a:5c:49:c6:cd:41:be:c1:25:7f:f4:82:b1:01:fa:0f:
         61:9a:43:a3:30:66:9c:34:3c:ba:cc:2a:2d:e5:cb:19:4b:91:
         a4:34:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:02 2026 by rpki-client