Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          CNjPgukGeLhpxlBKwKOI0RflGSNkOhZUMzpChcWmC/k=
Subject key identifier:   A6:C4:81:20:27:DB:79:BB:C7:99:BE:06:03:1B:52:9D:1A:50:5A:A2
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       373BDC9F4B5C99A6D39D782572850CEFE20FFA2C
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:11 +0000
ROA not before:           Tue 15 Sep 2026 13:25:11 +0000
ROA not after:            Tue 14 Sep 2027 13:30:11 +0000
asID:                     52266
IP address blocks:        201.219.252.46/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3b:dc:9f:4b:5c:99:a6:d3:9d:78:25:72:85:0c:ef:e2:0f:fa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:11 2026 GMT
            Not After : Sep 14 13:30:11 2027 GMT
        Subject: CN=A6C4812027DB79BBC799BE06031B529D1A505AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:a1:f0:02:44:0f:7e:51:01:71:4f:13:96:
                    26:2a:5d:02:0d:36:e5:c3:de:55:3d:4e:ce:82:cf:
                    81:94:7d:4f:29:24:e3:65:9a:5f:8d:12:ca:bd:6a:
                    73:5e:c8:ce:b9:49:47:b1:7b:c5:8f:7c:91:dd:d7:
                    35:37:50:5f:74:8b:e3:bf:b4:27:89:52:15:f2:7c:
                    39:99:5b:1c:ce:13:40:34:69:b3:ea:00:36:be:f3:
                    d3:20:65:46:be:5d:ae:69:f6:8f:03:91:53:41:29:
                    64:5b:f0:22:c1:28:1f:c4:22:76:7e:73:69:13:fc:
                    77:31:42:d2:61:df:67:1d:cd:b7:94:e9:78:aa:51:
                    68:a0:4d:fd:a9:1e:b0:84:13:29:2f:d2:d1:dd:f1:
                    6e:bc:ce:4e:31:80:e7:1c:c7:d7:77:b9:28:bd:35:
                    10:67:ee:95:7b:3f:c8:18:19:02:6f:e9:ec:8c:cb:
                    94:ef:7b:00:8b:33:f8:90:b3:78:e7:c1:25:e8:78:
                    a6:bc:50:e0:c7:65:be:71:2d:f3:5a:1a:bf:04:5e:
                    3d:a5:7e:bb:c6:f6:99:06:8f:8f:d9:1e:30:3a:bd:
                    31:d2:d6:52:bc:ea:c3:e9:33:de:d7:06:6d:a5:dc:
                    39:a6:c5:ad:66:ce:bf:50:1b:25:8a:99:f0:1a:bd:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C4:81:20:27:DB:79:BB:C7:99:BE:06:03:1B:52:9D:1A:50:5A:A2
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.46/32

    Signature Algorithm: sha256WithRSAEncryption
         53:e6:92:f6:af:07:11:a4:df:e4:ca:87:2e:78:36:71:0e:ba:
         8d:f3:8b:1a:3a:5f:c6:4e:f5:34:08:64:53:a2:13:7b:a5:b9:
         c8:86:b7:62:54:7c:d2:2f:f7:5a:13:28:81:ab:da:9c:90:29:
         4e:8d:c6:41:d0:53:74:9c:5e:74:55:da:ff:21:66:38:e9:2f:
         d7:1a:6a:7f:99:8a:4e:d4:51:53:03:9d:4b:ba:35:85:16:0d:
         b3:fd:f8:ce:97:1e:f9:29:59:5a:9e:4c:53:77:0f:f8:60:4e:
         86:03:ab:4d:5b:1b:6c:74:b1:e8:04:e0:31:8e:40:61:48:34:
         e0:e1:db:61:a0:4e:3b:68:22:34:2b:31:f2:f8:ee:da:9e:4b:
         bd:84:89:ad:ef:0a:38:1c:b6:08:02:f7:46:a6:d8:08:ab:7b:
         e2:c2:77:b0:7a:a5:e4:fd:46:be:a6:75:05:4a:1a:37:31:ca:
         7b:e2:1e:72:c1:a1:48:5b:4a:92:31:6a:00:da:68:3e:84:03:
         e5:9e:a5:67:9a:6b:89:7a:9a:5a:8b:79:4f:06:e0:e1:75:d8:
         09:71:cf:9f:b2:41:24:74:cb:a1:13:ea:00:ab:af:bd:79:85:
         17:ad:42:8a:4e:46:55:d6:e2:05:65:e9:c6:65:83:91:e0:af:
         f2:76:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:58 2026 by rpki-client