Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          TM3HyMUH1vPA4tfe8hzithKGpwJPPfRbZdw3/owdpzM=
Subject key identifier:   FF:F2:1B:BE:D3:3E:58:B2:5B:F3:68:FC:A4:A3:FF:80:2B:C4:7F:A3
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       50265759DA2BA5BA5B07563556BCEAC9399EB04A
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:11 +0000
ROA not before:           Tue 15 Sep 2026 13:25:11 +0000
ROA not after:            Tue 14 Sep 2027 13:30:11 +0000
asID:                     52266
IP address blocks:        201.219.252.29/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:26:57:59:da:2b:a5:ba:5b:07:56:35:56:bc:ea:c9:39:9e:b0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:11 2026 GMT
            Not After : Sep 14 13:30:11 2027 GMT
        Subject: CN=FFF21BBED33E58B25BF368FCA4A3FF802BC47FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:fb:78:b1:8e:5e:36:26:e7:cc:f4:d4:f6:
                    05:eb:13:42:cf:e6:7e:12:1b:27:35:db:09:9b:f4:
                    63:96:58:d8:c0:bb:a7:7c:b9:bf:b2:5e:2f:3a:b8:
                    b3:d9:8d:7b:7c:c1:a9:0f:7a:ec:55:57:dd:5e:a4:
                    0f:e3:73:f4:bf:fd:a0:04:a0:12:01:7c:ec:c9:82:
                    17:4f:82:09:3e:f3:8f:16:6c:67:40:31:28:5c:4d:
                    d2:1b:f3:2c:1c:3a:41:b3:e1:be:47:8e:c8:98:2b:
                    d2:4f:fa:2a:9f:b4:5c:70:a2:92:f3:be:85:77:4d:
                    6d:83:4f:8c:27:b4:5d:86:2d:9d:38:86:63:06:ac:
                    c3:be:be:4e:33:b2:b4:ea:51:0c:03:45:ba:9d:3f:
                    d3:e3:4f:98:93:8f:94:96:66:c2:23:02:9c:1c:d5:
                    13:ea:76:af:69:6a:4b:3d:e8:00:f7:34:1f:76:a2:
                    5d:d5:65:ae:ee:9e:4e:cd:11:ed:e1:49:bf:82:85:
                    1f:da:99:7b:03:0f:df:41:f0:48:16:ec:fe:7c:a9:
                    0b:27:e0:70:c2:3b:c3:5d:02:31:36:75:02:e6:3b:
                    76:45:4b:bf:d7:e8:31:d3:d4:47:af:42:4b:43:3c:
                    a1:c4:d3:ce:c4:83:a5:2f:e1:a3:66:cb:4c:a4:6d:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:1B:BE:D3:3E:58:B2:5B:F3:68:FC:A4:A3:FF:80:2B:C4:7F:A3
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.29/32

    Signature Algorithm: sha256WithRSAEncryption
         23:67:71:2c:70:8f:d7:2f:30:62:94:25:f4:2c:d8:2c:9d:2f:
         51:45:6f:9e:bd:b4:76:87:77:da:c8:af:fc:9a:b7:35:49:da:
         c2:bf:0a:b8:71:b0:a7:49:9b:97:34:e7:24:2d:cb:4b:d6:d0:
         06:fb:e8:3a:80:eb:11:8c:17:93:f6:f9:d7:0e:fd:c1:3b:05:
         08:d4:de:e9:51:94:46:b8:37:6e:2a:ae:1e:76:62:bf:9a:77:
         39:36:49:f8:7c:41:23:8b:3b:0d:72:0e:9b:17:72:4d:12:7a:
         97:31:28:df:a5:39:fd:7a:91:37:c0:74:8c:d9:90:d4:ce:9b:
         ec:61:a1:c2:48:f2:1b:ff:e0:ff:57:2f:60:4b:21:98:e2:8b:
         8d:a7:ce:cc:4d:9c:32:38:00:ec:59:b8:c7:6f:42:c8:74:1a:
         06:d9:ec:8a:f1:03:7c:ed:a9:e2:9e:52:d8:e1:34:0a:86:13:
         7c:ae:b2:34:40:85:f7:82:67:89:08:cd:80:40:d2:77:f3:32:
         71:af:9d:12:41:71:7f:50:73:ce:07:c7:cb:53:e1:ba:05:b2:
         78:cb:82:25:d6:f2:b7:7a:23:69:0a:80:d6:ab:6b:74:e8:77:
         2b:79:b3:fa:4a:d2:a4:42:bc:bb:a3:98:bd:cf:45:c0:cb:cf:
         4c:76:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:58 2026 by rpki-client