Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          OIAx8fnxwQiij1e5/WWhYmjFp4EYGpBlgyWNd75kZGE=
Subject key identifier:   3D:A4:F0:E0:A4:CF:2F:A6:9D:27:A7:BB:0D:72:C1:32:A3:C9:74:35
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       1F4C4E7CF2CCC05F6F29F6FA52657E5E4632C6B8
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:05 +0000
ROA not before:           Tue 15 Sep 2026 13:25:05 +0000
ROA not after:            Tue 14 Sep 2027 13:30:05 +0000
asID:                     52266
IP address blocks:        201.219.252.3/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4c:4e:7c:f2:cc:c0:5f:6f:29:f6:fa:52:65:7e:5e:46:32:c6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:05 2026 GMT
            Not After : Sep 14 13:30:05 2027 GMT
        Subject: CN=3DA4F0E0A4CF2FA69D27A7BB0D72C132A3C97435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:fc:77:d9:32:67:95:f2:b5:77:3f:d3:54:
                    0d:51:1a:84:3e:cc:03:d4:73:43:19:be:8c:2c:e0:
                    ce:ea:77:aa:7f:15:4d:68:42:71:c8:1a:fe:b0:8e:
                    eb:bf:73:41:0d:a9:f3:96:16:7d:df:d5:ad:00:8c:
                    b9:4b:4e:d4:54:76:08:e6:09:b7:9a:59:2f:5f:c4:
                    10:c5:d5:3f:89:7d:c4:c2:29:8d:8b:da:7b:ac:de:
                    74:8e:2f:47:5c:7f:73:07:ca:55:d0:74:a6:cc:bc:
                    8f:53:62:aa:f7:9e:c2:9d:1a:cf:0b:53:c5:60:4f:
                    82:09:02:fc:8e:d8:5f:d4:92:99:71:4b:e8:d3:3a:
                    9b:78:1d:8a:4b:ca:70:2e:8d:47:13:d6:1a:07:f6:
                    8f:c6:c8:ad:d1:34:e2:82:e9:e6:10:b5:9f:df:43:
                    d7:08:df:74:28:27:ba:94:5b:ba:ad:a2:6a:3e:39:
                    65:ea:60:17:58:e4:aa:93:59:02:5c:41:75:70:56:
                    40:0c:c0:19:bd:24:82:c3:df:a2:6c:2f:36:a3:d5:
                    53:ec:be:cd:a5:d3:0f:22:e3:62:26:da:82:e2:38:
                    25:30:72:43:84:f9:c7:c8:20:6a:52:93:1c:37:bc:
                    c6:e4:ff:f8:02:11:77:9e:af:ef:4a:dd:7d:67:9e:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A4:F0:E0:A4:CF:2F:A6:9D:27:A7:BB:0D:72:C1:32:A3:C9:74:35
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.3/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:a4:66:b0:c1:13:b7:2a:e6:52:98:97:5d:d9:d8:f4:8a:7e:
         c8:e0:2a:07:0c:14:1f:f4:54:56:43:2e:0a:9c:46:b6:43:ef:
         53:60:2d:c1:d5:1b:a3:59:35:90:e6:79:6b:fc:4e:79:14:6a:
         55:93:98:28:cf:cd:e4:27:10:43:23:48:92:e0:a5:99:40:d5:
         60:3b:43:bf:ae:94:3c:9b:3d:94:ba:ca:54:87:7b:bf:dc:98:
         9a:ec:40:0b:3d:db:af:7e:3f:50:6b:16:57:4a:e8:6d:bd:28:
         72:ae:6d:c6:89:68:9f:1b:a5:19:52:9a:f4:e7:06:63:34:fe:
         98:28:7f:f4:e4:7a:f5:2d:a6:c3:e4:b1:f4:79:92:c4:ea:e0:
         78:16:20:63:d4:1e:9c:73:3e:b8:62:c1:e7:36:66:2a:4d:a6:
         1a:a2:82:6f:50:a6:75:58:fa:b1:7e:da:c3:32:e3:d4:dd:f3:
         b1:d4:26:ae:46:8e:3f:af:27:d5:61:42:59:82:20:9b:94:67:
         73:24:d1:07:56:01:e3:59:ae:ca:5f:3f:fa:c7:83:02:23:fd:
         28:aa:70:f6:8a:8a:20:b7:88:9f:c3:33:92:c3:5c:5a:22:2b:
         9c:02:1a:c0:4b:01:62:a5:fb:a7:a8:37:d8:a4:8a:ce:4c:1b:
         e1:01:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:28 2026 by rpki-client