Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33312f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33312f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          NRhQQb7WcZuN0WBiqu1yQdi6Nmt0Eb9mb9ICnIRBZRY=
Subject key identifier:   9E:76:29:52:16:CD:25:AC:DD:47:2C:2B:76:38:FD:45:F1:A8:DA:C5
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       42FECEE839A8D2D897654C00DA7693DB3D265916
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33312f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:04 +0000
ROA not before:           Tue 15 Sep 2026 13:25:04 +0000
ROA not after:            Tue 14 Sep 2027 13:30:04 +0000
asID:                     52266
IP address blocks:        201.219.252.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fe:ce:e8:39:a8:d2:d8:97:65:4c:00:da:76:93:db:3d:26:59:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:04 2026 GMT
            Not After : Sep 14 13:30:04 2027 GMT
        Subject: CN=9E76295216CD25ACDD472C2B7638FD45F1A8DAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:6b:b3:de:0d:ec:21:33:65:77:7d:76:c0:
                    f1:81:58:15:fa:2c:25:33:e6:a2:7a:cb:b0:1a:2b:
                    6b:e8:78:c0:41:6d:3a:99:a5:11:22:05:38:bb:9f:
                    70:19:04:78:69:41:a3:75:e5:b0:e6:0a:14:87:46:
                    48:c1:60:54:0c:c3:2a:74:b3:ab:8b:d1:db:61:63:
                    87:9a:56:b4:aa:fc:62:b4:30:7a:45:b5:5f:d2:36:
                    3f:65:d7:38:2c:d1:d4:14:6d:95:25:15:37:28:eb:
                    9f:a6:8a:ef:e5:5b:5e:42:64:f6:b9:87:6e:56:fb:
                    84:14:8b:bc:e8:f6:68:29:31:c4:3f:f5:32:0e:ac:
                    b6:0a:18:f1:a2:a4:26:21:e3:4b:1e:34:d4:9b:b8:
                    e2:ae:17:ce:33:2c:f8:44:c5:07:25:04:dc:95:f0:
                    db:88:11:08:2e:96:9a:d4:65:22:cd:80:82:54:ca:
                    c1:42:68:eb:3f:74:b8:44:c3:1c:b2:93:31:98:0d:
                    78:fe:04:b0:45:76:1a:62:9b:1f:03:13:cd:32:dc:
                    24:7d:c0:67:b3:13:3e:a9:1d:04:73:21:65:7c:7c:
                    5a:7f:81:ef:14:5e:ab:e0:3d:c1:59:d0:73:69:f9:
                    31:d7:e7:0a:77:0a:f6:b8:5d:45:c0:2a:1e:a5:78:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:29:52:16:CD:25:AC:DD:47:2C:2B:76:38:FD:45:F1:A8:DA:C5
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33312f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.31/32

    Signature Algorithm: sha256WithRSAEncryption
         43:47:d1:a6:91:5f:3e:ac:bd:81:c6:96:9e:2f:bb:00:c8:b4:
         17:e7:a3:7f:d6:4e:27:60:81:8e:51:ec:3c:11:14:4f:49:03:
         c9:3c:31:58:3b:80:82:71:92:23:29:6f:ba:89:62:b6:6c:f4:
         58:f4:71:16:a8:5d:d9:b1:7b:cc:87:de:f7:a3:00:86:f1:8b:
         db:77:29:52:37:6e:7b:56:79:4c:00:00:df:b7:b1:0a:d0:0b:
         6e:2e:21:20:11:78:53:78:bb:60:67:3b:1a:5c:c1:60:3c:dc:
         94:f4:d7:d6:49:07:7c:89:af:13:10:be:79:bb:e1:1c:46:78:
         b1:52:5b:cf:e8:06:c1:50:79:c6:6a:13:c4:86:b6:37:a9:65:
         39:d4:96:80:a3:70:8e:0e:65:f7:3b:78:d1:ab:f3:6c:c5:48:
         c6:94:3f:df:d1:2d:c3:ac:55:85:5f:53:5c:2e:20:aa:c0:84:
         ef:01:db:4a:18:fa:7f:97:c6:1c:df:e0:d4:ef:29:41:17:5e:
         13:5b:dc:36:15:b9:29:56:b2:c2:c2:99:fc:60:13:ea:f1:4f:
         66:ea:79:fd:0e:cb:04:f0:f9:10:67:36:40:26:a0:e6:5c:9f:
         22:c7:a7:d6:3d:74:20:77:e8:23:e9:96:b1:d6:9c:5a:61:e4:
         a7:4c:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:10:57 2026 by rpki-client