Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33392f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33392f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          +INc1J86O4mEtIbziG2rFJAZ9HqFddjIBwq0DKNnDFU=
Subject key identifier:   84:E0:1A:AC:40:B7:30:84:CA:A8:F3:54:BA:98:B0:D7:4B:32:62:53
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       66C26D7F092ED172F28B558262865CF7326D9700
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33392f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:11 +0000
ROA not before:           Tue 15 Sep 2026 13:25:11 +0000
ROA not after:            Tue 14 Sep 2027 13:30:11 +0000
asID:                     52266
IP address blocks:        201.219.252.39/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c2:6d:7f:09:2e:d1:72:f2:8b:55:82:62:86:5c:f7:32:6d:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:11 2026 GMT
            Not After : Sep 14 13:30:11 2027 GMT
        Subject: CN=84E01AAC40B73084CAA8F354BA98B0D74B326253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:08:60:b8:20:72:f0:84:fb:13:56:63:5f:
                    c9:4f:0d:b5:e3:3d:5a:39:42:87:e7:da:7a:ce:f2:
                    f4:23:d1:9e:3a:cf:f3:49:98:16:7d:93:ee:66:79:
                    a1:51:f8:be:fe:fe:4b:0a:2f:06:12:fd:40:3a:fa:
                    73:c4:21:55:54:e3:91:34:10:a6:13:11:eb:34:99:
                    67:0f:0e:43:e9:3d:4a:e0:83:5e:32:5c:96:fe:4c:
                    75:fd:31:5b:43:98:28:19:b0:48:30:ce:b5:3e:94:
                    0d:7c:2b:9a:47:68:38:a8:05:75:34:b4:47:86:83:
                    61:0d:05:63:5e:2f:f7:b7:30:89:96:ef:7f:cc:78:
                    52:9b:b5:6c:e0:87:9d:a9:1b:e4:e8:6e:87:34:6f:
                    2a:58:cb:6f:05:d7:8c:8f:51:55:a0:84:1c:17:ef:
                    a8:9b:0f:41:42:f4:7b:16:be:66:80:31:48:75:0d:
                    be:ef:53:2d:c1:2a:b8:ac:c9:04:81:2a:5e:3b:28:
                    80:04:69:bc:dd:21:43:0d:93:e8:cc:4e:61:1c:32:
                    d4:0b:5d:bd:27:e0:8e:31:a5:d1:85:f7:c0:b6:26:
                    06:e2:23:ea:41:d7:61:ba:7a:be:9e:35:ed:e4:ff:
                    69:ca:a4:a9:ff:5d:3e:5b:17:a0:9d:b3:4e:b0:a8:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E0:1A:AC:40:B7:30:84:CA:A8:F3:54:BA:98:B0:D7:4B:32:62:53
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33392f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.39/32

    Signature Algorithm: sha256WithRSAEncryption
         41:09:0e:68:af:3b:0c:ba:ee:c0:33:32:0c:a3:eb:c5:0e:1e:
         9f:b1:d3:97:54:85:2f:0d:80:9e:d6:f4:b1:43:c4:b9:90:d4:
         49:8a:67:97:00:63:6d:7c:b2:39:2b:d8:4b:dc:28:d3:15:6e:
         62:3c:1f:2b:86:17:9c:c6:af:34:b1:19:fd:d9:7c:4a:fa:ff:
         f3:f9:a7:e5:6b:4b:3b:1c:4d:36:9e:8f:d2:2f:6a:06:cd:18:
         28:79:4b:50:d3:e5:ac:26:c9:aa:91:62:c1:ff:19:d8:9d:c3:
         27:f6:3b:38:c0:4e:29:2d:ae:99:89:00:30:f3:17:4a:72:b7:
         27:48:e5:d1:eb:4c:a7:53:8b:90:ac:6e:03:5c:a7:85:39:3c:
         d1:c1:95:a5:6d:1f:4a:e5:79:fe:df:24:f1:bd:b1:36:d3:ba:
         54:82:72:fa:db:4d:c1:f3:3d:64:e5:82:fa:61:26:f3:14:ab:
         a1:cf:94:54:3b:42:b8:d3:b1:18:f7:8b:48:81:00:e7:8b:7f:
         ef:aa:88:5f:bf:dd:39:da:e9:f6:e0:87:48:eb:4e:63:b7:e2:
         ae:e4:2a:fa:94:60:ad:b7:d5:e2:59:eb:14:95:0c:12:eb:77:
         ef:32:56:8f:b8:05:be:63:1b:0b:dd:59:a1:43:2e:4f:4e:46:
         bb:55:fd:b4
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUZsJtfwku0XLyi1WCYoZc9zJtlwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MTFaFw0yNzA5MTQxMzMwMTFaMDMxMTAvBgNV
BAMTKDg0RTAxQUFDNDBCNzMwODRDQUE4RjM1NEJBOThCMEQ3NEIzMjYyNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmwhguCBy8IT7E1ZjX8lPDbXj
PVo5Qofn2nrO8vQj0Z46z/NJmBZ9k+5meaFR+L7+/ksKLwYS/UA6+nPEIVVU45E0
EKYTEes0mWcPDkPpPUrgg14yXJb+THX9MVtDmCgZsEgwzrU+lA18K5pHaDioBXU0
tEeGg2ENBWNeL/e3MImW73/MeFKbtWzgh52pG+Toboc0bypYy28F14yPUVWghBwX
76ibD0FC9HsWvmaAMUh1Db7vUy3BKrisyQSBKl47KIAEabzdIUMNk+jMTmEcMtQL
Xb0n4I4xpdGF98C2JgbiI+pB12G6er6eNe3k/2nKpKn/XT5bF6Cds06wqBSHAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUhOAarEC3MITKqPNUupiw10syYlMwHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMzMzkyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wnMA0GCSqGSIb3DQEBCwUAA4IBAQBBCQ5orzsMuu7AMzIMo+vFDh6fsdOXVIUv
DYCe1vSxQ8S5kNRJimeXAGNtfLI5K9hL3CjTFW5iPB8rhhecxq80sRn92XxK+v/z
+afla0s7HE02no/SL2oGzRgoeUtQ0+WsJsmqkWLB/xnYncMn9js4wE4pLa6ZiQAw
8xdKcrcnSOXR60ynU4uQrG4DXKeFOTzRwZWlbR9K5Xn+3yTxvbE207pUgnL6203B
8z1k5YL6YSbzFKuhz5RUO0K407EY94tIgQDni3/vqohfv9052un24IdI605jt+Ku
5Cr6lGCtt9XiWesUlQwS63fvMlaPuAW+YxsL3VmhQy5PTka7Vf20
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:08 2026 by rpki-client