Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          gNkFucZrlXwn+nSLLWXiS1Kr/7lQqzV+weelF+GVsAA=
Subject key identifier:   34:2C:DA:9A:D4:8F:28:79:64:4C:8B:08:D7:51:D2:78:75:94:CD:7F
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       0E5ACE244452226801883F6C14941F6668BF7779
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:12 +0000
ROA not before:           Tue 15 Sep 2026 13:25:12 +0000
ROA not after:            Tue 14 Sep 2027 13:30:12 +0000
asID:                     52266
IP address blocks:        201.219.252.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5a:ce:24:44:52:22:68:01:88:3f:6c:14:94:1f:66:68:bf:77:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:12 2026 GMT
            Not After : Sep 14 13:30:12 2027 GMT
        Subject: CN=342CDA9AD48F2879644C8B08D751D2787594CD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:7e:6e:6b:8b:30:bc:c4:74:36:16:d8:6c:
                    52:bc:d0:a7:b6:85:8a:7a:d7:d7:ae:32:d2:b3:c4:
                    ac:63:5c:77:79:f7:bd:32:9a:ed:a6:60:79:d2:a8:
                    fd:87:b3:b4:92:36:6e:65:bc:cb:69:35:44:f4:85:
                    c4:9b:af:99:9a:ed:18:14:df:ef:d2:fb:8e:92:9c:
                    26:9e:ec:d7:27:92:03:db:bc:8d:ad:dc:c9:59:48:
                    8c:7f:91:a3:59:7c:63:92:c3:f1:67:9b:52:74:2c:
                    d3:09:eb:85:3f:01:e1:60:09:a3:51:4d:ae:01:83:
                    5f:6a:7d:7a:2d:f3:c7:a7:3d:9f:23:56:ed:52:83:
                    cb:27:ad:0e:38:cf:6a:b1:3c:69:21:33:26:87:9c:
                    6a:43:e9:59:e2:26:3c:84:8a:76:b5:1a:7d:fc:99:
                    2f:22:80:7a:95:96:17:74:65:75:a7:0e:f5:d6:57:
                    a1:48:de:96:fe:de:9f:0c:ae:be:b5:dd:07:c2:0a:
                    b4:05:43:f9:4a:39:bb:62:0a:6d:ae:3f:c8:59:66:
                    1c:da:a3:18:92:8a:00:cd:08:0c:08:9a:8b:a9:6a:
                    ff:fc:7c:fe:bf:87:67:89:2e:2b:76:0c:3b:5a:74:
                    b1:50:34:6f:ad:58:ab:cc:04:70:b1:2f:33:60:63:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2C:DA:9A:D4:8F:28:79:64:4C:8B:08:D7:51:D2:78:75:94:CD:7F
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.30/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:40:83:50:25:63:7a:ad:2c:f8:a3:39:6c:78:56:bc:f3:d7:
         f4:e6:c5:50:d0:6a:01:80:4f:e0:b3:7b:3c:a7:26:60:96:f8:
         94:81:6a:7e:a1:0d:7e:78:02:0c:3b:48:55:e2:c7:7d:bf:b6:
         78:fe:5e:77:c4:10:04:9f:76:64:e2:9a:39:56:9d:86:9f:14:
         82:40:ea:18:81:51:53:bf:d0:18:08:9e:a4:7a:91:76:04:71:
         cd:f4:54:7c:06:e5:de:e7:26:2b:7e:8e:f3:b7:0d:72:5e:45:
         19:21:e4:69:49:11:ef:80:95:c7:da:e3:b0:51:44:2d:6b:ab:
         43:a9:d6:eb:5d:6f:ce:a0:f5:20:4c:39:25:04:8a:d1:37:c2:
         77:b0:c9:22:07:a5:93:12:03:a3:ed:19:b6:f5:ed:04:a2:5a:
         21:6b:24:27:f4:ce:7b:d6:fb:bf:1f:d9:e0:d5:c5:9d:3a:56:
         65:9e:df:e3:79:c5:56:68:a4:9e:7d:3f:a1:2b:b3:d4:c1:ea:
         e3:18:b4:a2:cc:6f:28:2f:4f:f3:a1:26:63:5f:6c:57:a7:83:
         ec:16:1a:49:4c:eb:eb:58:bb:94:0d:26:c7:a8:9e:53:f1:c3:
         64:3b:15:c3:13:3d:b5:ae:42:ea:35:e7:41:63:c2:db:bb:bc:
         25:df:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:33 2026 by rpki-client