Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35342f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35342f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          U/3jpbRJykb/AWItE4bEhmtxK5fnG0YWckCxjrNHAr4=
Subject key identifier:   8E:74:69:90:27:53:6E:7C:CB:39:DB:0D:CE:7E:6F:8D:86:7C:75:6F
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       7661B42352AE4AA166B2453FAE162FC63919F7D6
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35342f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:19 +0000
ROA not before:           Tue 15 Sep 2026 13:25:19 +0000
ROA not after:            Tue 14 Sep 2027 13:30:19 +0000
asID:                     52266
IP address blocks:        201.219.252.54/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:61:b4:23:52:ae:4a:a1:66:b2:45:3f:ae:16:2f:c6:39:19:f7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:19 2026 GMT
            Not After : Sep 14 13:30:19 2027 GMT
        Subject: CN=8E74699027536E7CCB39DB0DCE7E6F8D867C756F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:28:d6:5e:19:1c:ac:85:ed:bc:fd:ce:96:
                    1a:03:e6:ec:f6:48:eb:c0:ad:cc:45:cb:6e:31:91:
                    3b:eb:d9:4d:5b:04:58:ac:f3:85:7c:04:de:ae:6c:
                    9c:1f:77:37:d7:3c:59:d3:b2:52:fd:4f:36:9e:a2:
                    31:38:73:7e:c1:4c:58:58:43:ba:b5:61:0d:0a:4e:
                    85:16:75:89:78:94:aa:46:cd:26:bd:df:9f:66:75:
                    82:43:7d:6b:0a:04:05:30:d0:93:fc:c9:97:d2:35:
                    8d:47:9e:68:30:90:b5:8a:2b:28:1f:41:6a:27:69:
                    2e:99:05:cf:0a:37:1c:c7:5a:8a:f8:45:fa:c1:15:
                    86:1e:88:24:fb:d7:f3:d7:99:69:ee:f5:8f:3b:f1:
                    3d:8a:98:fd:71:cc:d7:27:dd:5b:82:3d:96:76:68:
                    4b:31:72:08:00:96:7c:ba:b3:bc:d2:20:c9:6c:93:
                    dc:eb:7f:ff:5e:fd:74:a0:69:fa:06:eb:4f:7e:3f:
                    66:19:ce:44:9d:94:b1:d1:52:c6:0c:0e:10:77:9d:
                    3b:d2:10:44:ac:3e:dc:e6:a4:3f:1b:0d:8e:d1:e6:
                    d8:52:f4:aa:6b:2f:2b:7e:3e:e1:fc:2a:d7:85:04:
                    58:13:4a:8d:29:26:11:d3:27:d7:62:cb:71:5d:68:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:74:69:90:27:53:6E:7C:CB:39:DB:0D:CE:7E:6F:8D:86:7C:75:6F
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35342f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.54/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:f4:36:34:01:de:a7:63:28:7a:d9:4b:e2:49:9b:d6:a9:d3:
         79:f3:0d:46:3c:b1:3c:18:08:41:7a:30:75:8c:ac:ff:93:27:
         5a:86:2a:06:d5:64:94:74:06:fb:87:05:b3:a8:7d:60:06:b3:
         ea:af:4e:d0:ce:73:83:5d:a6:8c:cc:c7:cb:41:1a:db:15:1e:
         89:90:2e:73:82:d3:b9:35:a6:9c:51:cd:2a:f9:c2:47:a9:dd:
         ad:dd:57:27:55:aa:70:03:83:00:84:8e:5c:74:71:c1:9e:06:
         e3:89:27:97:70:e4:68:95:68:41:77:3c:ad:5a:c1:88:d3:4a:
         12:c8:de:74:94:3e:0f:06:30:2c:55:95:fd:d6:9e:c7:18:13:
         bd:e8:73:4b:a3:87:88:62:32:19:33:e6:f6:77:58:62:7e:7b:
         e0:69:e4:73:29:37:e2:ff:ea:83:72:19:ba:5d:8a:33:95:96:
         94:a0:d3:82:74:ff:41:01:19:c2:12:7e:29:c9:8e:ae:64:8b:
         86:d9:2f:bd:0e:62:3b:8d:aa:42:5b:46:46:56:4c:5e:c0:a1:
         30:2d:19:bb:ae:4a:7c:f1:d5:da:29:e6:6b:fd:e8:35:e8:5f:
         33:09:39:31:c4:ee:e0:92:7a:61:c4:f7:2c:b8:6e:a6:7c:1b:
         ce:8c:18:16
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUdmG0I1KuSqFmskU/rhYvxjkZ99YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MTlaFw0yNzA5MTQxMzMwMTlaMDMxMTAvBgNV
BAMTKDhFNzQ2OTkwMjc1MzZFN0NDQjM5REIwRENFN0U2RjhEODY3Qzc1NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRyjWXhkcrIXtvP3OlhoD5uz2
SOvArcxFy24xkTvr2U1bBFis84V8BN6ubJwfdzfXPFnTslL9TzaeojE4c37BTFhY
Q7q1YQ0KToUWdYl4lKpGzSa9359mdYJDfWsKBAUw0JP8yZfSNY1HnmgwkLWKKygf
QWonaS6ZBc8KNxzHWor4RfrBFYYeiCT71/PXmWnu9Y878T2KmP1xzNcn3VuCPZZ2
aEsxcggAlny6s7zSIMlsk9zrf/9e/XSgafoG609+P2YZzkSdlLHRUsYMDhB3nTvS
EESsPtzmpD8bDY7R5thS9KprLyt+PuH8KteFBFgTSo0pJhHTJ9diy3FdaNtTAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUjnRpkCdTbnzLOdsNzn5vjYZ8dW8wHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTM1MzQyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/w2MA0GCSqGSIb3DQEBCwUAA4IBAQDR9DY0Ad6nYyh62UviSZvWqdN58w1GPLE8
GAhBejB1jKz/kydahioG1WSUdAb7hwWzqH1gBrPqr07QznODXaaMzMfLQRrbFR6J
kC5zgtO5NaacUc0q+cJHqd2t3VcnVapwA4MAhI5cdHHBngbjiSeXcORolWhBdzyt
WsGI00oSyN50lD4PBjAsVZX91p7HGBO96HNLo4eIYjIZM+b2d1hifnvgaeRzKTfi
/+qDchm6XYozlZaUoNOCdP9BARnCEn4pyY6uZIuG2S+9DmI7japCW0ZGVkxewKEw
LRm7rkp88dXaKeZr/eg16F8zCTkxxO7gknphxPcsuG6mfBvOjBgW
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:27 2026 by rpki-client