Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34342f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34342f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          nundhIufD6F5oQy0VS5ZEtR7vVcLfopMehJKBrR0AF0=
Subject key identifier:   CC:59:EC:90:CF:CC:1E:3A:BE:ED:03:AA:54:86:AA:C9:E7:B9:4E:C8
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       067B9264A88E78E8107D6340E4B3657A0D8C3792
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34342f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:11 +0000
ROA not before:           Tue 15 Sep 2026 13:25:11 +0000
ROA not after:            Tue 14 Sep 2027 13:30:11 +0000
asID:                     52266
IP address blocks:        201.219.252.44/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:92:64:a8:8e:78:e8:10:7d:63:40:e4:b3:65:7a:0d:8c:37:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:11 2026 GMT
            Not After : Sep 14 13:30:11 2027 GMT
        Subject: CN=CC59EC90CFCC1E3ABEED03AA5486AAC9E7B94EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:da:13:8e:70:86:51:0a:8c:8d:2d:8c:0b:
                    15:f7:6b:ed:fb:9a:a9:e7:87:ad:d1:63:4c:17:74:
                    bf:23:73:71:37:4d:24:3f:d0:76:37:0e:07:5e:64:
                    8c:68:39:54:d6:44:17:41:d5:95:a6:0a:52:1d:65:
                    57:97:af:de:c1:e0:ec:7d:aa:99:59:b3:fb:ba:39:
                    81:cc:a2:59:a6:e0:af:72:54:8f:3c:df:40:ca:ad:
                    43:37:9c:5c:2c:dd:08:3c:a0:78:23:88:70:97:70:
                    d6:c9:32:82:68:7e:d5:60:b9:b6:8b:55:eb:e2:33:
                    87:1a:5f:a6:5b:62:9c:d6:18:0d:d7:e6:80:e8:4d:
                    64:92:1e:40:9c:74:57:a4:6d:be:77:e3:6a:66:30:
                    bd:ab:61:76:d6:3c:6a:70:c3:9d:74:f4:ee:e4:e8:
                    21:08:57:81:24:7b:b4:fb:a1:1d:31:51:e6:ea:07:
                    05:68:29:f7:aa:95:a1:b8:2a:66:88:72:8d:7a:ef:
                    b5:77:bd:85:01:99:d8:e8:cc:49:58:ba:07:80:73:
                    e0:af:c2:70:ec:ca:a6:ca:f0:22:70:13:80:d8:25:
                    9b:9d:ac:67:b7:b3:35:1d:61:2d:b7:31:0f:9f:0e:
                    a2:75:a5:88:50:b3:49:5d:ca:6a:7b:2b:b0:43:d6:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:EC:90:CF:CC:1E:3A:BE:ED:03:AA:54:86:AA:C9:E7:B9:4E:C8
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34342f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.44/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:15:21:5f:09:27:60:5d:97:48:7d:ee:89:f5:7d:39:a3:
         76:69:f9:ba:99:4f:a5:5b:f5:e5:b8:55:29:bb:c5:80:4b:3a:
         82:6c:02:a5:3c:6c:c7:29:47:ab:98:7a:61:3d:28:5e:ac:2b:
         ad:91:b3:b9:cb:7f:19:b8:77:a0:db:6d:aa:e0:1c:02:cb:58:
         c9:f7:21:1d:01:5a:47:f9:83:a6:dd:d6:bb:f0:37:65:86:65:
         1b:68:d6:63:f6:94:47:3b:a2:f2:e9:6d:53:76:35:5a:30:b8:
         f6:2f:66:8f:78:43:b5:f0:3c:dc:76:ac:ca:87:55:02:7d:b4:
         50:29:e0:fb:a8:ef:fe:61:77:ef:f5:99:4e:25:ad:37:ef:1f:
         57:88:f0:79:de:6b:ee:5d:2b:4c:0a:e3:ac:2a:e7:e4:79:e7:
         94:a6:75:00:63:c0:af:ad:fd:2a:0f:e5:35:38:24:4b:de:af:
         ab:b5:d0:d2:5e:76:da:fe:4a:88:2b:3a:bd:f9:37:b8:5c:2d:
         8f:1a:d6:79:0c:5c:77:c6:dd:6c:20:25:79:ac:e4:c4:05:82:
         34:93:3c:b7:15:a0:28:7f:6d:77:a8:2e:2c:1b:cd:cf:7a:59:
         50:13:7c:4d:dc:11:24:62:6b:b8:02:e3:84:4c:88:a1:28:2e:
         89:0a:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:46 2026 by rpki-client