Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35372f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35372f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          hRdBFofPu5vM9QLSDcqTwS1y76rFr04uDwqLS7ZKcYs=
Subject key identifier:   75:81:3A:0C:5D:58:B5:DA:5B:70:C5:C3:10:D3:4C:2E:A0:5C:7E:7B
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       11375E72EF05C972F0B8549D1BFF258CCCBB9744
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35372f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:16 +0000
ROA not before:           Tue 15 Sep 2026 13:25:16 +0000
ROA not after:            Tue 14 Sep 2027 13:30:16 +0000
asID:                     52266
IP address blocks:        201.219.252.57/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:37:5e:72:ef:05:c9:72:f0:b8:54:9d:1b:ff:25:8c:cc:bb:97:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:16 2026 GMT
            Not After : Sep 14 13:30:16 2027 GMT
        Subject: CN=75813A0C5D58B5DA5B70C5C310D34C2EA05C7E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:99:a7:55:69:01:3f:e0:1b:9d:fa:46:aa:
                    0a:52:49:43:ce:ff:66:55:64:8a:62:e5:4e:ae:9f:
                    b7:86:e8:af:57:18:91:fd:7c:0c:be:c3:72:f0:4e:
                    21:c4:81:de:9c:48:e4:52:65:1b:61:bf:2f:cb:3c:
                    95:d9:d1:70:5d:32:27:af:66:15:b3:27:77:9b:41:
                    c9:ce:55:b9:cd:71:f3:67:a8:c2:e7:1a:23:0c:b0:
                    d9:8f:3c:5f:a9:20:a9:35:63:f0:73:61:0b:82:4c:
                    12:cc:b1:fe:96:2b:1f:7c:3a:9f:9e:b3:56:17:9e:
                    88:2e:b1:e1:87:68:28:af:3e:41:e9:86:c1:cd:9f:
                    4d:08:d0:56:ae:8a:c7:2a:e3:84:5a:2f:70:00:53:
                    d6:97:2e:fe:62:44:7f:dd:31:89:03:88:4c:89:e8:
                    de:1f:21:ea:b9:52:1f:ba:8a:f7:65:f2:c8:97:3d:
                    cc:b8:d2:40:c1:fb:47:00:78:5f:a8:17:6f:66:91:
                    68:57:bc:7a:c6:3a:37:a9:92:e5:3a:7a:e2:de:f7:
                    fb:6e:16:c2:5a:8d:44:26:93:0f:99:7e:cb:4e:b1:
                    98:7e:03:68:86:ec:fd:3c:33:92:f4:f9:0f:c9:14:
                    7f:20:b2:f9:f2:e1:92:eb:ab:c6:6f:08:4e:e2:4b:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:3A:0C:5D:58:B5:DA:5B:70:C5:C3:10:D3:4C:2E:A0:5C:7E:7B
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35372f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.57/32

    Signature Algorithm: sha256WithRSAEncryption
         da:ba:ab:67:4f:c6:1d:48:af:ec:4c:3d:8a:31:aa:ad:9f:2b:
         ad:f2:2e:7b:38:47:f2:20:f9:c2:cc:22:6b:6c:8d:42:43:42:
         bb:e1:41:7c:7d:98:f7:01:11:ed:cb:4e:4f:38:0f:66:a6:e7:
         40:bf:60:62:74:cd:d8:a5:f0:d3:58:55:6b:26:66:a2:e1:85:
         1c:c9:27:1a:55:cf:66:dc:7d:25:32:a4:35:d8:66:35:cf:61:
         2a:61:f0:8b:9e:c1:dd:dd:1f:b9:bc:5c:bb:9d:7c:19:f8:53:
         38:27:53:6e:42:75:24:df:81:75:7b:1b:da:44:6e:4b:41:e7:
         a3:68:bb:2d:69:3d:fa:17:dd:03:7d:49:2f:b9:fe:ae:de:0a:
         82:ce:eb:fe:5f:03:4b:c4:8d:3a:9c:38:b4:6f:3e:33:f8:ea:
         44:54:d1:c0:65:d2:80:20:1a:11:ee:d8:59:6c:72:46:6d:56:
         d4:88:51:8a:49:3c:cf:69:55:c0:43:c8:54:5c:6c:a1:d7:f0:
         79:37:f1:67:cf:04:20:6c:b4:76:4d:d8:55:4e:1f:e2:93:13:
         b3:63:b4:6c:68:ee:14:cf:5f:eb:80:1c:30:54:89:19:4e:bb:
         93:5e:df:85:c9:ea:9c:0a:1c:03:df:98:fa:bb:c9:48:b3:3e:
         4f:bd:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:35 2026 by rpki-client