Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          0qholIkBLncZ0e7HiEnO92QSWdDx/ClXI91gRMHnNh0=
Subject key identifier:   1F:CF:04:3A:39:3B:C6:BF:B2:1C:0E:89:DF:DD:28:23:C6:6F:14:FB
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       17886166714BBEC0C8DDF576E7671538449758EA
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:20 +0000
ROA not before:           Tue 15 Sep 2026 13:25:20 +0000
ROA not after:            Tue 14 Sep 2027 13:30:20 +0000
asID:                     52266
IP address blocks:        201.219.252.58/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:88:61:66:71:4b:be:c0:c8:dd:f5:76:e7:67:15:38:44:97:58:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:20 2026 GMT
            Not After : Sep 14 13:30:20 2027 GMT
        Subject: CN=1FCF043A393BC6BFB21C0E89DFDD2823C66F14FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:13:e8:5d:b1:87:5c:8f:68:4d:cb:a0:bb:
                    46:a5:70:9c:3b:32:5a:80:fc:fc:32:93:77:5e:e8:
                    16:ec:b6:93:68:a4:ac:50:70:b5:da:87:f6:72:1c:
                    a7:91:74:34:c1:77:57:07:82:ae:31:fc:66:91:72:
                    a0:da:52:e0:7b:dc:cb:08:4a:6c:d3:57:d4:44:84:
                    63:dc:3b:cf:72:9f:cc:43:f9:42:e2:9a:6c:7e:b6:
                    ea:4b:aa:7b:e5:34:d5:50:49:4a:1f:fe:91:85:ed:
                    58:d6:4d:ee:2c:cf:18:4e:16:6a:57:a2:62:2e:60:
                    89:2b:f3:54:43:d6:63:be:55:ac:95:f0:b1:5c:7e:
                    cc:3b:c0:d4:20:db:6f:c7:e5:7c:0c:9c:a7:68:08:
                    df:e8:88:ff:73:74:1b:80:5e:6e:b5:ec:7e:37:f2:
                    12:a7:86:b1:bf:f4:09:5c:0f:4a:66:5f:d8:8a:6f:
                    31:6f:65:65:7d:63:2c:ce:8d:f7:70:28:ce:e9:40:
                    ad:51:63:f1:9f:ec:8e:3a:c4:9e:99:a9:27:0a:a8:
                    60:c3:0c:0e:84:5b:31:2c:6d:85:88:d5:e6:9a:e5:
                    92:9e:d0:7a:7a:d4:08:38:c7:f7:37:1d:da:85:20:
                    8d:84:06:cf:4c:66:ef:d7:f9:f3:6b:46:e9:a3:13:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:04:3A:39:3B:C6:BF:B2:1C:0E:89:DF:DD:28:23:C6:6F:14:FB
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.58/32

    Signature Algorithm: sha256WithRSAEncryption
         23:65:d6:d6:69:ab:f9:22:c7:24:07:a1:42:ea:e1:8e:86:96:
         b0:80:a8:06:22:25:b7:83:0a:b2:7c:67:74:ae:e8:32:cc:c3:
         75:76:47:36:65:73:91:d8:94:41:61:9c:9c:b7:66:44:c6:c9:
         4f:91:3f:03:41:08:57:cc:f4:70:9b:52:2f:e1:11:5c:4c:53:
         4f:a8:d9:f7:f0:89:99:99:a9:06:a6:e9:96:20:e4:5d:b5:31:
         e9:4c:de:92:e1:56:3c:49:39:38:a8:f3:be:a1:19:b4:22:c5:
         ba:92:ae:f2:ac:10:85:78:87:f4:f5:01:89:6b:0b:2e:47:87:
         ee:2a:c7:e5:0a:24:78:ec:0d:8b:9a:b8:1f:b5:d7:88:56:90:
         9c:42:bd:58:44:7e:2c:89:28:5f:62:90:64:d7:42:88:ff:69:
         6d:bb:73:6c:42:12:21:65:4e:cc:c6:6c:e6:66:16:cf:6c:ba:
         27:b4:01:0a:d0:23:0e:d5:0e:0c:25:6f:7d:12:62:b5:4f:92:
         8f:07:37:33:98:64:78:f6:1c:e7:0f:b0:87:9b:2c:54:4b:26:
         cb:24:35:c1:4b:1c:0e:81:06:fe:2b:6c:40:b6:a6:d8:15:e7:
         25:09:85:1b:e6:e8:d1:44:72:ac:f7:33:41:3b:86:a4:03:e7:
         81:f9:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:13 2026 by rpki-client