Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35392f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35392f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          r6u+Zhp4dkObjlmtkvslsLqqleKJ9FNGle9UGlLQrTA=
Subject key identifier:   C3:FD:EE:FE:23:24:11:07:E7:45:7B:17:F9:CE:1C:C2:4E:77:FB:A4
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       6AE85E1964FE5AA65A1A813B3880A90C4DB5EA74
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35392f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:14 +0000
ROA not before:           Tue 15 Sep 2026 13:25:14 +0000
ROA not after:            Tue 14 Sep 2027 13:30:14 +0000
asID:                     52266
IP address blocks:        201.219.252.59/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e8:5e:19:64:fe:5a:a6:5a:1a:81:3b:38:80:a9:0c:4d:b5:ea:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:14 2026 GMT
            Not After : Sep 14 13:30:14 2027 GMT
        Subject: CN=C3FDEEFE23241107E7457B17F9CE1CC24E77FBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:d9:52:b3:58:e7:cf:bc:c8:b8:6c:96:e8:
                    5b:ef:26:7b:44:2d:d1:d6:16:19:b0:9c:32:b8:cf:
                    75:ad:17:59:08:11:37:83:e7:d8:61:ad:62:a8:a6:
                    ab:b6:0a:bd:1b:b0:b3:e7:20:f2:73:39:a7:56:4c:
                    62:88:0e:a5:9e:ec:69:34:42:b2:d6:f4:d5:c4:7e:
                    d4:af:51:cf:5b:70:ac:6d:a3:fd:af:01:19:e3:f0:
                    ff:62:bc:3e:ef:f0:e2:90:77:39:8c:00:76:a7:dc:
                    0d:a7:61:67:18:2d:cb:fe:e4:c9:f1:ad:60:3c:39:
                    81:15:05:54:d2:cc:49:e3:4f:95:2d:9e:3f:a7:e0:
                    ed:92:7f:07:ac:9a:e9:c5:74:ba:11:d7:38:2a:28:
                    4c:f7:2f:4a:83:db:54:2e:1c:b9:c5:df:02:b4:ba:
                    c8:c1:ca:28:16:07:04:f7:13:1f:94:b3:d2:9a:3f:
                    3e:24:63:11:64:01:26:63:22:65:bb:a5:8e:0a:e3:
                    74:23:26:65:8b:34:39:ee:e7:15:36:c8:73:f2:6d:
                    b3:c7:80:bd:8b:c2:99:a8:67:e6:74:04:4c:b1:a6:
                    96:c6:ef:61:e4:16:5a:0b:24:65:ff:8c:4d:d0:55:
                    1d:18:60:2a:5a:89:fa:ce:30:ca:d7:9a:f3:b2:92:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FD:EE:FE:23:24:11:07:E7:45:7B:17:F9:CE:1C:C2:4E:77:FB:A4
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35392f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.59/32

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:b4:ce:87:17:1a:ed:6e:3f:0a:b9:eb:fe:be:95:95:87:
         ca:3a:86:c1:84:b5:85:b9:f3:55:76:de:85:06:f1:17:5b:13:
         84:bb:90:6a:28:d6:1a:66:c3:ce:22:ed:ac:4f:21:81:c8:08:
         de:c2:c5:a4:16:fe:17:c2:3e:e1:ad:6f:db:d3:ef:c8:b7:2f:
         d7:e9:a8:58:72:44:7d:64:77:e9:93:c6:1a:bc:d8:a3:63:9a:
         75:0f:57:11:01:25:33:d8:d3:6e:51:65:62:0f:48:5d:9d:1f:
         06:14:7a:b8:82:64:bc:bd:4e:8a:61:af:7e:7d:5c:4f:1b:c5:
         9d:61:27:74:3a:cd:0a:43:9c:ff:3d:e9:63:13:bb:6c:dc:2f:
         bf:c4:61:2b:db:bb:2f:9d:91:c7:df:c5:11:f7:36:f6:1c:10:
         0d:1d:d3:0d:ac:6e:6a:21:27:03:82:ae:ae:4b:ea:6b:dc:6b:
         95:a4:ab:08:1b:01:dc:1b:f3:fb:20:3b:16:a6:11:cd:a1:c6:
         35:da:2f:46:ce:9c:ed:eb:6f:7b:ad:8a:65:4d:70:21:e7:42:
         cb:21:7c:00:d1:26:ca:3e:4d:7f:3b:6b:b8:49:42:7b:3a:5a:
         91:69:cf:4b:a0:9b:30:33:95:9a:0e:90:51:7c:5b:c1:d9:70:
         8e:cd:12:30
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUauheGWT+WqZaGoE7OICpDE216nQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MTRaFw0yNzA5MTQxMzMwMTRaMDMxMTAvBgNV
BAMTKEMzRkRFRUZFMjMyNDExMDdFNzQ1N0IxN0Y5Q0UxQ0MyNEU3N0ZCQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/NlSs1jnz7zIuGyW6FvvJntE
LdHWFhmwnDK4z3WtF1kIETeD59hhrWKopqu2Cr0bsLPnIPJzOadWTGKIDqWe7Gk0
QrLW9NXEftSvUc9bcKxto/2vARnj8P9ivD7v8OKQdzmMAHan3A2nYWcYLcv+5Mnx
rWA8OYEVBVTSzEnjT5Utnj+n4O2SfwesmunFdLoR1zgqKEz3L0qD21QuHLnF3wK0
usjByigWBwT3Ex+Us9KaPz4kYxFkASZjImW7pY4K43QjJmWLNDnu5xU2yHPybbPH
gL2LwpmoZ+Z0BEyxppbG72HkFloLJGX/jE3QVR0YYCpaifrOMMrXmvOykvqJAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUw/3u/iMkEQfnRXsX+c4cwk53+6QwHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTM1MzkyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/w7MA0GCSqGSIb3DQEBCwUAA4IBAQBWtbTOhxca7W4/Crnr/r6VlYfKOobBhLWF
ufNVdt6FBvEXWxOEu5BqKNYaZsPOIu2sTyGByAjewsWkFv4Xwj7hrW/b0+/Ity/X
6ahYckR9ZHfpk8YavNijY5p1D1cRASUz2NNuUWViD0hdnR8GFHq4gmS8vU6KYa9+
fVxPG8WdYSd0Os0KQ5z/PeljE7ts3C+/xGEr27svnZHH38UR9zb2HBANHdMNrG5q
IScDgq6uS+pr3GuVpKsIGwHcG/P7IDsWphHNocY12i9Gzpzt6297rYplTXAh50LL
IXwA0SbKPk1/O2u4SUJ7OlqRac9LoJswM5WaDpBRfFvB2XCOzRIw
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:14 2026 by rpki-client