Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33352f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33352f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          mWPNUEpLQGwXwT7cpph8PS6S2QGjwEZOVJZKa/uwWME=
Subject key identifier:   0B:E7:39:25:15:98:35:5A:9B:C2:03:C4:23:6B:0E:C3:59:81:E8:11
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       67F7D50C72C4DB579C5F2C011064681B890B045A
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33352f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:00 +0000
ROA not before:           Tue 15 Sep 2026 13:25:00 +0000
ROA not after:            Tue 14 Sep 2027 13:30:00 +0000
asID:                     52266
IP address blocks:        201.219.252.35/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f7:d5:0c:72:c4:db:57:9c:5f:2c:01:10:64:68:1b:89:0b:04:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:00 2026 GMT
            Not After : Sep 14 13:30:00 2027 GMT
        Subject: CN=0BE739251598355A9BC203C4236B0EC35981E811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:5e:ec:82:0a:26:7c:22:a5:c7:92:f1:6f:
                    ac:44:6a:e7:d8:25:12:ca:98:d1:0f:c6:e8:24:12:
                    f4:53:e5:f1:c1:d9:aa:82:12:c9:2a:3d:93:36:8d:
                    8a:1e:bf:5f:36:64:2f:d8:eb:db:b4:04:e3:cb:16:
                    a7:03:62:38:e4:16:03:12:6a:43:f1:75:19:74:28:
                    f7:47:c3:31:98:db:c5:bb:f1:f3:3d:62:e0:64:e2:
                    0d:1e:bf:3d:a4:84:12:d3:31:cd:ab:ab:61:17:d2:
                    3b:07:6c:ce:cd:7d:9b:61:41:af:bf:f9:1e:81:a9:
                    3d:0f:43:db:32:49:0c:c0:b8:1d:36:24:da:fe:7e:
                    98:58:b2:79:04:21:4a:71:41:2f:11:7a:dc:56:63:
                    b8:e5:bb:5e:6f:53:3f:ae:68:4a:59:ea:c0:93:82:
                    70:58:5e:44:4b:ec:98:31:c9:51:11:d5:4c:23:e8:
                    5e:1d:d7:9c:13:61:7f:22:a6:16:01:dc:37:4c:81:
                    cf:a8:f8:49:f0:90:22:51:06:4b:2d:3a:1b:f3:de:
                    11:69:e5:57:98:d8:6e:7d:a3:9d:9a:32:9c:06:f3:
                    b3:51:ca:01:eb:93:bb:69:e5:68:6b:f7:ee:0e:07:
                    06:43:1b:de:a8:3f:d9:41:d6:1c:4a:42:9e:0a:c1:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E7:39:25:15:98:35:5A:9B:C2:03:C4:23:6B:0E:C3:59:81:E8:11
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33352f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.35/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:d2:50:8d:9c:05:93:93:01:9d:b9:46:3c:5c:74:e3:20:5d:
         33:64:6d:34:50:55:4e:8b:d4:05:ea:32:4e:9a:16:4b:02:b7:
         cb:ca:04:22:54:49:a9:35:a8:0e:f5:4b:36:8e:25:bc:6e:ca:
         7d:24:8e:59:ec:f0:38:55:6e:62:ca:5a:2c:89:95:05:44:34:
         af:41:0a:01:01:1f:ec:08:24:64:0b:b7:f9:3d:95:15:8a:d5:
         1d:1c:f2:c0:51:73:f7:42:25:1d:37:2c:1d:72:af:a7:31:ae:
         4c:35:ea:47:75:e5:aa:63:32:5d:02:0d:80:d7:f5:4e:0c:ff:
         7f:9b:92:d4:56:51:d7:2e:b1:ba:28:b0:db:14:ea:4e:d1:b8:
         85:90:3c:ef:00:12:0b:96:ef:4b:5d:95:bf:34:65:95:b8:ea:
         33:44:3d:32:6d:a9:3f:88:5e:0c:dc:ec:f2:a2:95:7f:24:44:
         06:3d:37:4b:9a:6d:33:33:f4:55:2f:c1:b2:4d:e1:78:2b:16:
         6c:12:80:a8:28:cc:83:47:73:7c:71:91:b2:dd:45:35:cc:75:
         d4:8b:b1:44:ed:a7:95:6d:5b:a5:ba:8f:e1:2a:ad:c4:45:03:
         ca:1f:7d:df:fd:74:7d:75:41:b8:e5:fc:dd:d3:fc:1a:1d:18:
         94:66:ed:8b
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUZ/fVDHLE21ecXywBEGRoG4kLBFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDBaFw0yNzA5MTQxMzMwMDBaMDMxMTAvBgNV
BAMTKDBCRTczOTI1MTU5ODM1NUE5QkMyMDNDNDIzNkIwRUMzNTk4MUU4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo317sggomfCKlx5Lxb6xEaufY
JRLKmNEPxugkEvRT5fHB2aqCEskqPZM2jYoev182ZC/Y69u0BOPLFqcDYjjkFgMS
akPxdRl0KPdHwzGY28W78fM9YuBk4g0evz2khBLTMc2rq2EX0jsHbM7NfZthQa+/
+R6BqT0PQ9sySQzAuB02JNr+fphYsnkEIUpxQS8RetxWY7jlu15vUz+uaEpZ6sCT
gnBYXkRL7JgxyVER1Uwj6F4d15wTYX8iphYB3DdMgc+o+EnwkCJRBkstOhvz3hFp
5VeY2G59o52aMpwG87NRygHrk7tp5Whr9+4OBwZDG96oP9lB1hxKQp4KwWaRAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUC+c5JRWYNVqbwgPEI2sOw1mB6BEwHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMzMzUyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wjMA0GCSqGSIb3DQEBCwUAA4IBAQDT0lCNnAWTkwGduUY8XHTjIF0zZG00UFVO
i9QF6jJOmhZLArfLygQiVEmpNagO9Us2jiW8bsp9JI5Z7PA4VW5iylosiZUFRDSv
QQoBAR/sCCRkC7f5PZUVitUdHPLAUXP3QiUdNywdcq+nMa5MNepHdeWqYzJdAg2A
1/VODP9/m5LUVlHXLrG6KLDbFOpO0biFkDzvABILlu9LXZW/NGWVuOozRD0ybak/
iF4M3OzyopV/JEQGPTdLmm0zM/RVL8GyTeF4KxZsEoCoKMyDR3N8cZGy3UU1zHXU
i7FE7aeVbVuluo/hKq3ERQPKH33f/XR9dUG45fzd0/waHRiUZu2L
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:31 2026 by rpki-client