Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35352f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35352f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          jEkPCSRQPCLRiNCXV+Waa4vtfYfKFlPUaN8Mg6aSlZE=
Subject key identifier:   C4:AD:61:67:B7:0C:AC:43:73:26:42:5F:CF:0B:D9:4A:D7:B5:E6:04
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       144CCCD1AD8259A1E9BC7025707BAB0398F30ED2
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35352f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:09 +0000
ROA not before:           Tue 15 Sep 2026 13:25:09 +0000
ROA not after:            Tue 14 Sep 2027 13:30:09 +0000
asID:                     52266
IP address blocks:        201.219.252.55/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:cc:d1:ad:82:59:a1:e9:bc:70:25:70:7b:ab:03:98:f3:0e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:09 2026 GMT
            Not After : Sep 14 13:30:09 2027 GMT
        Subject: CN=C4AD6167B70CAC437326425FCF0BD94AD7B5E604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:a8:b9:cb:4c:52:0e:3d:f9:20:1f:46:15:
                    03:56:45:2e:4b:2a:fd:d3:a0:2e:a0:b2:fe:cd:78:
                    e6:e6:c5:24:e8:76:cf:80:a9:d2:ee:b9:19:46:04:
                    95:53:70:2d:5e:9d:3e:fc:80:cf:89:aa:62:15:d9:
                    0a:b8:fa:f7:0e:39:be:2d:1f:66:e6:50:8b:f4:33:
                    d2:91:ab:34:e9:0e:ef:99:2c:6d:ef:80:2b:6f:f1:
                    3d:31:1c:12:a0:c6:80:39:63:1f:68:e2:8d:72:11:
                    63:7b:7c:5f:f7:d6:c6:2e:08:90:2f:9a:39:6e:dc:
                    36:aa:4a:d4:7c:de:fc:83:ec:69:09:2d:f9:98:77:
                    33:06:5e:45:67:c7:d6:b1:9c:34:c6:0e:3c:13:b5:
                    61:85:da:90:14:0a:fa:07:ed:8a:65:f4:a2:98:59:
                    00:e2:b2:06:3a:fb:26:1e:43:16:1e:6a:ff:9c:40:
                    ce:24:11:75:8d:f8:74:79:b3:c3:6a:1d:00:a7:e3:
                    56:c1:ec:bb:60:ad:7d:52:ba:b0:3d:4e:5e:66:e9:
                    a4:a3:90:f2:7c:48:02:b9:d8:28:37:7b:02:b3:1f:
                    e7:74:c4:76:8e:4c:54:4b:0e:94:3e:be:a2:43:cc:
                    3d:84:2f:16:46:14:c8:fb:89:b0:4f:07:55:0d:bc:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AD:61:67:B7:0C:AC:43:73:26:42:5F:CF:0B:D9:4A:D7:B5:E6:04
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35352f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.55/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:0e:1b:2a:01:0a:51:14:a9:84:d6:7e:85:e8:cb:e0:7a:78:
         91:e2:0f:22:8e:ed:a0:38:3f:7a:63:2e:94:30:9d:17:95:05:
         a6:f6:c7:98:85:8f:12:23:7f:47:c2:39:bc:22:10:30:02:6b:
         82:08:cd:b9:ef:65:ff:dc:af:65:ec:8e:16:3f:38:c9:97:65:
         35:74:82:d3:66:c1:09:31:f2:02:fd:9d:83:41:42:09:c7:fc:
         fa:18:94:65:45:aa:f8:dc:b5:e3:c2:70:96:f3:11:01:3f:e5:
         e7:24:1c:f2:e1:e3:b9:10:4a:83:2e:05:f0:8b:ba:19:12:77:
         dd:b9:d4:2c:80:6a:f9:8e:bb:7d:78:be:5c:22:ab:2a:24:4b:
         88:b9:28:6e:f4:a4:48:66:ea:09:d7:e8:0b:1e:4e:9e:08:14:
         b2:c9:15:25:67:bf:e8:86:bc:f6:f6:25:f1:cd:07:87:b9:ca:
         46:df:85:f5:21:33:59:3f:00:23:da:bf:45:d6:91:53:6f:dd:
         c9:e9:42:5b:18:f0:34:8b:ec:06:3f:6c:c6:0d:a8:3d:23:00:
         1a:4e:f5:a1:5c:d6:0b:d9:af:24:e2:c7:48:8b:77:09:f7:25:
         65:1f:3c:49:ae:6e:71:45:83:6a:40:44:c0:2a:1a:64:9d:c6:
         a3:6c:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:11 2026 by rpki-client