Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34322f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34322f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          Hzgl7z8U82MEp2SMGcVI9h8IaIcHO0Ho+9s9uuWp0rw=
Subject key identifier:   90:FF:AC:F7:A0:04:C6:4F:B6:AD:E0:4E:D0:F4:40:87:67:C8:29:20
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       69E07C76125635AB9818B3D4EADBB4CF8E60B58C
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34322f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:14 +0000
ROA not before:           Tue 15 Sep 2026 13:25:14 +0000
ROA not after:            Tue 14 Sep 2027 13:30:14 +0000
asID:                     52266
IP address blocks:        201.219.252.42/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e0:7c:76:12:56:35:ab:98:18:b3:d4:ea:db:b4:cf:8e:60:b5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:14 2026 GMT
            Not After : Sep 14 13:30:14 2027 GMT
        Subject: CN=90FFACF7A004C64FB6ADE04ED0F4408767C82920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:07:05:d4:c3:6a:12:f1:b9:b2:59:71:2f:
                    21:70:43:86:0a:0b:c7:af:d3:6b:6b:4c:c8:f7:83:
                    69:a4:0f:70:44:20:d1:8c:97:03:5c:ce:ab:5f:41:
                    46:e9:e3:49:fd:17:02:a6:ff:bd:55:03:ef:62:69:
                    0b:01:14:5f:20:91:dc:f6:44:ad:47:19:8c:bd:5b:
                    b4:7b:87:60:d0:ae:cb:82:4e:56:d1:5e:56:7b:43:
                    11:74:8b:07:b5:01:48:a0:e6:3f:6c:d0:c9:a4:93:
                    65:5d:2a:b6:91:b0:cc:8c:5c:31:86:2e:04:1d:e5:
                    ab:fe:83:33:36:40:5b:62:9c:9c:ea:c0:5a:13:ef:
                    f1:5e:47:12:4c:0d:59:a6:f0:01:e7:66:5a:3c:4e:
                    4c:95:7b:b0:9c:38:9b:72:46:88:4c:59:bb:77:a5:
                    be:89:ff:6b:71:59:9c:34:0a:94:0f:de:b0:20:88:
                    37:60:68:c6:27:0c:6b:21:44:e7:64:ca:b1:f0:17:
                    f4:6c:38:fe:f0:4a:f5:84:ec:2f:25:d9:98:1e:48:
                    25:02:f9:61:bf:e0:66:ef:77:9e:c1:f9:09:25:55:
                    0f:16:0a:38:18:d2:19:44:e4:4a:02:8d:5f:bc:f2:
                    59:fa:03:f8:6e:ab:4a:6c:e6:0a:02:2d:df:9f:3f:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FF:AC:F7:A0:04:C6:4F:B6:AD:E0:4E:D0:F4:40:87:67:C8:29:20
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34322f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.42/32

    Signature Algorithm: sha256WithRSAEncryption
         40:98:7f:fe:ff:36:db:7f:2b:ab:98:1a:9c:45:c3:47:11:f6:
         6b:8e:2d:61:6b:6f:77:1d:70:95:95:1d:d9:73:36:c0:2e:9f:
         aa:d3:45:f9:49:c0:bb:3b:ef:b4:d2:35:34:9f:b7:fe:22:97:
         60:79:79:29:2f:b9:d1:82:c7:9a:dd:5d:e7:fc:d0:29:db:15:
         62:6e:d4:20:ac:32:47:c7:d9:f7:2f:63:b2:fb:45:3e:df:f9:
         70:a9:81:d9:18:10:3a:e1:0d:85:c1:27:14:61:00:19:4f:be:
         da:93:f6:38:d3:fe:a3:24:1e:4b:d1:21:7d:fc:db:54:f3:2a:
         3c:c1:c1:6a:61:94:60:13:69:72:e8:d4:80:32:91:17:4b:fc:
         b0:31:20:97:7c:d0:4e:69:3a:d5:ee:17:78:53:6b:33:24:09:
         ae:f3:bc:80:e0:ca:0f:3b:f9:0c:33:77:5a:5a:f5:6b:b8:17:
         f9:0d:86:77:4d:21:1a:58:a7:06:4c:f2:c8:1e:cc:65:86:75:
         aa:bc:68:24:92:d3:39:69:55:85:f9:e7:c7:a9:86:41:70:95:
         ff:c8:3a:b8:b0:b6:3a:ab:df:61:54:66:37:14:77:75:f4:c7:
         6a:da:6f:0c:23:68:fe:fe:fc:e7:a7:5a:bf:fa:c4:80:38:a7:
         ba:6f:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:24 2026 by rpki-client