Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          r25WOibr9M1pS6jPl/YHUllgRocimv7hYzxqq0lr8RQ=
Subject key identifier:   47:84:99:C1:87:40:48:45:66:C6:F4:FA:BC:F7:84:1E:D2:2E:08:C3
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       098730AFC3153F9B1AAFA14139969DF9FAAF25A6
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:17 +0000
ROA not before:           Tue 15 Sep 2026 13:25:17 +0000
ROA not after:            Tue 14 Sep 2027 13:30:17 +0000
asID:                     52266
IP address blocks:        201.219.252.47/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:87:30:af:c3:15:3f:9b:1a:af:a1:41:39:96:9d:f9:fa:af:25:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:17 2026 GMT
            Not After : Sep 14 13:30:17 2027 GMT
        Subject: CN=478499C18740484566C6F4FABCF7841ED22E08C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:2c:7e:29:77:64:4e:50:82:20:3d:9b:fc:
                    ff:3a:f2:76:23:87:16:ce:34:9a:d0:59:13:cb:02:
                    80:78:d8:97:36:4e:05:2b:2b:29:12:00:9b:0a:7f:
                    17:9a:38:c0:19:82:10:90:b6:be:bf:66:54:fc:86:
                    90:6a:83:13:f5:7d:4b:26:6d:cc:16:dc:56:6d:75:
                    b4:71:b9:70:7e:5a:f1:76:a4:66:f9:54:09:db:31:
                    df:33:b6:ac:f7:8b:3d:09:36:08:15:e6:94:4f:2f:
                    f3:a8:63:51:19:79:ea:22:a4:80:ff:d5:50:2d:d7:
                    5f:9d:d1:f7:9a:bb:84:d4:c0:c4:c5:61:1f:6d:86:
                    8f:62:f2:bc:ea:f3:ec:f1:34:c7:e7:06:ad:ef:9a:
                    cf:2c:fb:df:b4:69:f8:e0:5e:46:51:74:4a:12:59:
                    47:d1:9f:b4:83:2f:f4:4d:dc:d0:2e:ad:63:66:0a:
                    46:26:e4:64:2b:e3:1e:5d:d0:dc:64:d0:0d:48:8f:
                    9f:d1:94:fb:3b:83:ee:89:d3:99:f2:77:2a:e2:2f:
                    fd:ff:73:da:13:63:f9:74:49:27:a9:05:34:8e:6e:
                    52:da:73:e1:8e:82:7f:2a:75:97:e2:8b:a2:27:a2:
                    8e:c9:4b:87:0d:24:57:84:24:59:a6:ca:fe:da:33:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:84:99:C1:87:40:48:45:66:C6:F4:FA:BC:F7:84:1E:D2:2E:08:C3
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.47/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:3b:3a:7e:78:3b:d7:4f:42:ec:79:62:a8:9b:36:90:05:
         97:f9:eb:c5:7f:9d:82:d7:d3:ad:16:bd:ae:24:30:4a:42:53:
         d7:ef:78:54:40:67:c2:91:64:af:a5:bc:1b:85:65:a6:cf:8e:
         6e:85:d9:04:c1:99:af:7d:e4:62:b8:da:b5:87:4e:7f:98:93:
         96:ec:56:8b:12:b7:3f:52:71:bf:a1:0c:93:50:ce:40:ca:5d:
         ec:f2:45:fa:6f:e1:5f:bd:c9:d8:ab:7d:31:13:43:9c:02:ee:
         06:ee:7d:f0:2c:57:b7:91:d8:e2:5a:4d:1a:3a:63:4c:b4:65:
         c2:c2:b6:d1:6c:89:96:c1:82:29:8e:a9:2d:8e:b8:2f:1b:23:
         73:81:a0:b8:a2:25:1f:20:86:2b:4b:0a:11:75:2a:51:e8:79:
         50:fe:57:18:8d:fa:9c:18:d5:6e:19:dd:e2:c1:1c:b5:77:d7:
         91:5c:f2:a8:9e:bd:6b:30:a0:74:55:cc:cc:46:bc:54:bf:20:
         68:73:54:65:69:6d:43:86:c2:ba:74:c7:48:99:be:5f:c4:36:
         82:96:26:a0:38:44:4f:62:99:e5:1a:65:54:5d:d4:40:63:42:
         c3:a1:56:a0:ae:b7:1a:3f:d0:09:24:d1:00:c6:b3:a8:dc:dc:
         1c:69:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:39 2026 by rpki-client