Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          Pk3rY+hDQ2cHEP8NZutCSw4Lg7Fyt7C3KHzI/Vig5zM=
Subject key identifier:   5B:4C:7A:75:A3:E3:65:05:1F:70:33:5E:9D:14:41:2C:BD:6E:10:C9
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       61468F5C005222DBE7A493D7E75363911E56328F
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:03 +0000
ROA not before:           Tue 15 Sep 2026 13:25:03 +0000
ROA not after:            Tue 14 Sep 2027 13:30:03 +0000
asID:                     52266
IP address blocks:        201.219.252.52/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:8f:5c:00:52:22:db:e7:a4:93:d7:e7:53:63:91:1e:56:32:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:03 2026 GMT
            Not After : Sep 14 13:30:03 2027 GMT
        Subject: CN=5B4C7A75A3E365051F70335E9D14412CBD6E10C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:70:ea:4f:20:6a:fe:20:67:78:50:17:83:
                    aa:cd:0f:4f:55:13:85:59:7b:b7:3e:da:b4:f2:5e:
                    db:80:ab:be:72:58:d0:dc:bd:60:79:fd:fc:1c:e5:
                    95:85:22:a8:ec:6c:5f:7d:ea:cd:10:a1:ed:54:25:
                    6c:f2:c8:42:9b:aa:fd:30:cf:bc:f8:19:11:8d:fd:
                    8f:23:5a:c8:86:ab:34:f1:a2:21:65:2d:65:cc:d4:
                    9b:dd:9e:93:fa:0a:d3:e1:7c:c3:23:7e:af:ee:30:
                    95:1b:f7:c5:44:4a:df:d2:32:15:b6:92:60:98:d2:
                    5f:74:55:02:98:d0:f2:59:ae:c7:e3:3c:91:dd:b6:
                    0f:2d:ef:0f:03:d9:ac:bf:5a:58:98:75:d9:9f:7d:
                    b5:45:6f:42:03:8a:ac:a1:15:bc:30:b7:af:b1:23:
                    77:7f:c0:a9:76:5e:40:9f:ab:41:10:b6:44:db:ca:
                    88:9c:44:1d:39:de:82:86:4c:a0:11:2b:27:8a:71:
                    4a:d1:c9:b0:94:25:85:53:99:62:3f:af:94:da:88:
                    1f:6f:8b:a2:88:c1:d7:8c:41:28:02:72:f6:8c:cd:
                    f9:a8:f6:91:e3:ef:b1:5f:f1:c3:2d:02:dd:c5:0d:
                    dd:1d:2d:c8:25:ad:29:c0:5f:86:ca:cb:64:44:c4:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4C:7A:75:A3:E3:65:05:1F:70:33:5E:9D:14:41:2C:BD:6E:10:C9
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.52/32

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:3b:70:80:6a:cb:d9:84:84:da:d4:64:91:ba:eb:92:cc:
         38:a7:52:cd:34:a8:e8:1a:02:76:30:cd:50:7a:94:c8:6f:d8:
         86:0d:a1:4e:05:2c:91:6c:75:d5:ba:07:90:0d:d6:bc:76:6d:
         12:58:65:54:25:e0:92:0d:d5:35:45:dc:a7:01:e3:2e:7f:b4:
         a7:4f:d4:62:e8:90:f0:8e:67:45:b7:67:89:a8:9b:7d:5d:d2:
         38:ff:1f:a3:8e:df:96:a8:8f:5f:ed:50:ce:64:e7:e5:4f:52:
         c9:83:5c:1c:75:aa:92:9a:e0:c1:8b:50:1b:9b:97:8a:31:fe:
         fd:f1:6e:fe:54:3a:0a:3c:1a:1d:9b:1f:5e:70:73:09:d4:c6:
         74:48:46:a8:71:62:f4:a7:06:1b:ff:2a:95:58:47:d3:be:ea:
         9f:ad:ed:f3:b2:3f:09:58:0c:d2:89:aa:31:db:79:64:33:11:
         e0:97:dc:e5:9d:f0:f7:54:1a:96:ff:6a:67:54:ec:a0:34:5a:
         f7:3c:25:2b:48:4f:d7:48:1e:57:aa:cd:db:9e:64:19:ce:f6:
         54:f6:16:70:9b:41:9a:73:3a:18:a4:d3:78:ac:02:fa:fb:cd:
         4a:b6:b0:45:1b:2b:8a:8f:d1:01:be:21:bc:bb:ae:3b:2e:b0:
         c1:76:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:15 2026 by rpki-client