Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33322f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33322f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          uNv/zUxxN0+D67HZ7RMD35fVXUH4ZGGW8H2iB0H6j7A=
Subject key identifier:   FF:DC:80:2E:9E:F1:C9:A8:F3:24:05:33:16:12:C1:C1:0A:5A:9E:E5
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       3EA6F759443F0C3E82A242BD505045274930DDD0
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33322f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:11 +0000
ROA not before:           Tue 15 Sep 2026 13:25:11 +0000
ROA not after:            Tue 14 Sep 2027 13:30:11 +0000
asID:                     52266
IP address blocks:        201.219.252.32/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a6:f7:59:44:3f:0c:3e:82:a2:42:bd:50:50:45:27:49:30:dd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:11 2026 GMT
            Not After : Sep 14 13:30:11 2027 GMT
        Subject: CN=FFDC802E9EF1C9A8F32405331612C1C10A5A9EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:89:8e:8c:af:27:57:45:2f:a5:f6:1e:8f:
                    d3:a7:99:80:94:5c:69:21:9e:10:57:df:cc:88:7c:
                    d8:b4:1a:93:69:94:32:d5:6a:5e:ae:fd:0e:51:09:
                    b9:a8:c7:aa:08:e9:2b:6d:40:af:79:7b:43:cf:9b:
                    a8:d5:3a:27:b0:48:7d:0d:af:5f:fa:e1:5c:52:cb:
                    5c:5f:2c:de:28:39:07:65:76:e7:db:b4:3f:f3:9b:
                    b3:38:01:c8:bd:d9:68:4f:85:cb:c0:9e:53:37:9c:
                    a2:7c:bf:51:51:b4:5c:26:ae:ed:59:ed:d6:b9:e4:
                    8c:8d:21:e6:2c:ac:49:96:91:7a:b1:33:aa:59:0e:
                    5f:7c:a3:ba:3c:08:70:cc:e3:51:ca:48:26:80:bd:
                    4a:a5:0e:47:73:28:eb:c7:1c:73:44:67:65:03:3d:
                    e3:c6:ac:f7:0c:f9:44:98:1c:22:d6:bd:28:d8:5a:
                    73:3c:12:fc:c4:96:9c:e2:d1:c8:5c:6e:7c:a9:37:
                    af:36:bb:56:df:10:0a:19:39:c7:fe:89:83:57:60:
                    24:67:e9:b3:d6:f6:07:b7:6d:ca:5d:1a:58:c7:7c:
                    24:52:c8:d7:c7:27:ed:be:89:9c:0a:d5:a1:22:82:
                    0f:4d:07:87:dc:38:a9:1d:7b:bf:96:8f:58:f7:cc:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DC:80:2E:9E:F1:C9:A8:F3:24:05:33:16:12:C1:C1:0A:5A:9E:E5
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33322f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.32/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:3e:98:ba:c8:48:78:21:28:b8:0a:ba:8d:4e:50:88:ec:e6:
         8f:71:47:71:24:d8:a1:7d:16:95:61:5d:0b:91:d5:97:10:4e:
         19:d4:8c:f0:1c:df:0f:2d:90:7b:eb:9b:d6:ce:16:f5:39:f7:
         0e:dd:6d:16:98:ad:f8:c3:96:0c:25:2e:2f:26:4b:a4:d8:03:
         8a:1a:14:1e:76:56:04:80:ad:40:3b:37:93:e0:21:0e:c6:b1:
         87:5b:72:40:8c:d8:10:1a:99:83:b4:9e:f8:0d:53:82:53:94:
         52:45:51:98:43:ac:4c:09:41:85:c1:00:11:8c:0e:ae:c7:f6:
         57:cc:04:ab:7e:5b:39:90:f4:74:00:53:f1:ca:32:a9:75:b6:
         84:80:ff:71:5d:5f:6e:fa:e5:1e:dd:05:f8:6b:d1:2f:7b:8f:
         6f:21:76:b5:27:ed:34:4c:77:06:3f:92:0f:7b:00:8e:e9:0a:
         ee:0c:7d:bc:39:db:9b:a0:ed:e2:83:0f:ae:1e:e3:bc:fa:00:
         7a:c9:1e:d2:aa:fd:af:98:5c:6e:31:a7:00:3b:48:58:c4:3a:
         93:c0:1b:bb:8f:0c:ea:a1:48:d2:50:5e:dc:df:68:49:34:c1:
         4a:59:4c:7a:ed:e1:3e:54:33:67:56:0b:af:a8:a1:51:76:ca:
         e5:a3:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:23 2026 by rpki-client