Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33332f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33332f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          Cl1eg0ZrlZNZDIm53jyzTXS2wkJ/8cB1e7t8t/1EcJU=
Subject key identifier:   D0:4C:8B:7D:21:A4:78:44:1F:B6:A2:B6:89:88:EB:2E:64:61:C6:4A
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       37652899D7AD91607BEC869E96E527BE92B6C397
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33332f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:12 +0000
ROA not before:           Tue 15 Sep 2026 13:25:12 +0000
ROA not after:            Tue 14 Sep 2027 13:30:12 +0000
asID:                     52266
IP address blocks:        201.219.252.33/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:65:28:99:d7:ad:91:60:7b:ec:86:9e:96:e5:27:be:92:b6:c3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:12 2026 GMT
            Not After : Sep 14 13:30:12 2027 GMT
        Subject: CN=D04C8B7D21A478441FB6A2B68988EB2E6461C64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:14:b9:b5:4d:58:15:ba:4e:40:e6:4b:05:
                    97:60:44:f5:3c:f6:db:38:32:8e:a6:90:61:bc:3f:
                    8d:2e:b0:55:1c:2a:35:8d:ae:38:7b:fc:c4:a9:3f:
                    37:fd:10:b8:02:b9:89:53:41:25:02:15:18:dc:0a:
                    6f:35:a7:85:f9:43:4e:b9:a7:9e:7e:3b:12:02:c5:
                    22:4b:82:50:e5:a8:7f:7a:50:11:92:ce:15:40:3e:
                    9b:c5:7e:96:8f:87:28:80:b1:fe:3a:dc:1f:b4:e2:
                    e0:ff:78:50:28:f8:38:22:ae:d8:34:db:60:c7:03:
                    3c:b7:ee:b8:2a:42:8e:b6:5b:25:80:c5:66:1d:bc:
                    0e:c8:1a:13:8e:1c:2d:63:f1:06:a4:3e:6c:0d:f1:
                    80:2e:39:af:a7:bd:74:fe:79:95:26:b8:80:e0:a9:
                    72:cd:b8:4a:e9:3d:7e:20:67:69:b8:64:ba:2a:8f:
                    af:6d:8d:5b:9d:96:d8:23:69:08:c4:ed:fc:7b:0e:
                    87:99:3e:68:d5:39:33:0f:ba:6c:da:2f:74:fe:0a:
                    2b:92:37:e3:77:6b:28:e6:f2:0e:50:c2:22:00:31:
                    92:51:36:2c:7d:64:64:18:ab:1c:94:a9:0a:a9:ed:
                    47:ff:b0:cd:7b:54:a1:b3:00:29:a1:f5:69:54:91:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4C:8B:7D:21:A4:78:44:1F:B6:A2:B6:89:88:EB:2E:64:61:C6:4A
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33332f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.33/32

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:50:4e:48:90:45:83:7f:b6:6e:62:bd:06:f5:43:c3:89:
         59:58:e1:9a:93:8d:5d:ca:15:57:2a:d5:e5:7f:97:36:c4:fd:
         b4:dc:7e:9a:7b:ed:61:9e:c0:19:9c:95:cc:a4:c2:6f:84:fe:
         98:92:0b:27:ff:51:31:fa:d6:36:cd:f1:28:66:23:f5:05:92:
         52:66:5e:a3:37:9c:bb:f6:d3:4b:6a:73:7f:78:cf:8c:f9:bb:
         62:2a:46:5d:f5:72:ff:b4:f1:61:b6:8a:f5:51:82:ce:d1:33:
         bc:dd:57:75:ff:7a:74:d3:5e:68:6b:ae:35:8c:ac:64:d6:3f:
         c8:d9:86:81:1b:48:5a:ab:4a:23:9c:ee:7c:83:2a:7f:48:05:
         ef:16:7f:30:c6:19:3c:0e:6d:0d:0f:04:dc:e6:ea:7a:25:45:
         5f:be:90:4f:6e:81:03:e8:d1:ff:43:e5:45:db:98:1e:51:e1:
         43:d6:55:cb:23:eb:7e:c1:0f:13:a4:d2:52:c8:a7:ba:37:ab:
         8a:da:7a:3f:96:80:27:53:b3:01:7e:34:71:45:41:66:b3:ff:
         e6:85:fa:35:51:c9:fd:28:4c:96:89:bc:f7:29:e0:8c:52:c2:
         3f:4a:fb:b3:0c:07:37:fa:95:f1:fd:61:ae:94:c7:59:2e:25:
         d0:da:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:36 2026 by rpki-client