Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35302f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35302f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          pLJHsUQMqOs+JqvHZQDvlb4ro7Wosm/K6i4qAzFkaUc=
Subject key identifier:   F9:C0:2B:01:58:85:2D:97:B0:8B:34:D0:4D:80:5A:04:08:EF:A0:10
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       44C2BAEA70AE425CD0194F7BAEC3AD6B881CF8F5
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35302f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:15 +0000
ROA not before:           Tue 15 Sep 2026 13:25:15 +0000
ROA not after:            Tue 14 Sep 2027 13:30:15 +0000
asID:                     52266
IP address blocks:        201.219.252.50/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:ba:ea:70:ae:42:5c:d0:19:4f:7b:ae:c3:ad:6b:88:1c:f8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:15 2026 GMT
            Not After : Sep 14 13:30:15 2027 GMT
        Subject: CN=F9C02B0158852D97B08B34D04D805A0408EFA010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:84:7f:2a:c8:82:97:f5:03:f6:38:da:29:0a:
                    b1:4a:90:14:6c:c1:56:71:61:6a:98:1c:53:81:6e:
                    7d:88:f5:16:54:94:ed:aa:6e:e0:e0:59:a2:7e:72:
                    1f:51:36:28:28:e8:70:37:a0:d1:96:3a:1f:25:15:
                    04:66:b6:94:a5:31:94:28:99:fe:18:33:ce:73:32:
                    7a:14:60:34:0e:c2:20:d4:eb:2b:5d:32:41:4a:25:
                    79:d0:3b:ee:df:d3:8b:5e:d6:86:9f:d8:21:6c:b2:
                    fa:70:65:02:2e:d0:5d:ed:53:f4:c0:e0:72:4b:6e:
                    f9:a8:77:af:3b:aa:8f:d1:d6:97:5b:69:1d:6a:ff:
                    2c:b9:78:10:d9:4e:8c:93:39:39:05:bf:1c:0d:c8:
                    a6:32:22:69:06:4c:db:c6:1d:bb:10:8f:13:32:7e:
                    e4:cd:fc:9d:f2:ed:ae:4c:35:b3:7d:af:ec:18:50:
                    be:ce:64:dc:f2:99:fb:6e:be:a8:b0:ec:fb:aa:56:
                    95:f4:fe:da:9b:f2:a4:14:5c:2f:d1:60:ad:48:82:
                    15:a4:86:4f:6d:09:cf:03:a5:8c:cc:2b:9d:81:fe:
                    03:ac:de:c0:dc:44:ed:26:43:b4:13:b5:b3:ca:28:
                    4d:10:b7:d7:e3:51:49:2e:61:a6:2a:ca:4d:bf:4f:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C0:2B:01:58:85:2D:97:B0:8B:34:D0:4D:80:5A:04:08:EF:A0:10
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35302f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.50/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e5:30:5c:91:b0:a9:f4:17:b7:ae:26:17:a4:bc:bc:55:1f:
         0a:3e:34:93:c7:dc:06:4c:63:83:4b:c2:bc:aa:1c:6d:43:72:
         0b:dd:5d:3c:e2:a0:5b:32:d8:6e:d4:e8:9f:cf:08:5a:b0:56:
         22:45:64:27:b6:35:76:a4:b7:2b:49:8b:e8:2b:87:9e:c7:e8:
         98:fa:ae:36:a9:cd:b5:77:a5:4f:ca:e0:75:0a:bb:5b:38:0a:
         c9:6e:96:b3:43:cc:7d:1b:87:89:04:5d:72:ee:29:6b:b3:81:
         38:61:e6:e8:6c:b6:1d:86:0b:3d:ea:d2:e5:9f:ec:7c:33:32:
         a0:a5:d3:d9:d3:02:fc:ca:f9:62:3e:7b:d3:43:0c:72:97:8a:
         8d:d5:ca:55:8a:80:94:53:56:93:ff:a6:d0:68:5c:54:7c:b9:
         2b:89:ab:3f:ca:a2:18:9c:1d:f6:4f:aa:2f:34:ec:e6:06:10:
         35:55:43:49:fc:87:bd:55:ae:84:1d:65:9d:3b:52:08:7e:42:
         af:f0:f7:4e:a6:7f:16:d1:42:f4:36:a4:17:c8:a2:3d:99:3d:
         a4:7f:4a:21:d2:9b:1d:fe:07:d4:17:72:af:be:2c:37:7a:7b:
         da:9f:38:3f:63:0f:dd:91:1f:de:48:94:54:4f:4e:2a:5b:ce:
         8a:fd:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:41 2026 by rpki-client