Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e362f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e362f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          rXtcccdg66Lu4HmfTnvHwNOti5uWVGwnvwij49cCPc0=
Subject key identifier:   11:ED:B7:8A:D5:F6:C8:98:3C:8A:47:6F:D2:AB:AA:94:54:BE:AD:24
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       5237960CD771734EE8E453599F4015716CC4431E
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e362f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:15 +0000
ROA not before:           Tue 15 Sep 2026 13:25:15 +0000
ROA not after:            Tue 14 Sep 2027 13:30:15 +0000
asID:                     52266
IP address blocks:        201.219.252.6/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:37:96:0c:d7:71:73:4e:e8:e4:53:59:9f:40:15:71:6c:c4:43:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:15 2026 GMT
            Not After : Sep 14 13:30:15 2027 GMT
        Subject: CN=11EDB78AD5F6C8983C8A476FD2ABAA9454BEAD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:b6:e4:72:49:68:16:d3:87:de:4e:51:68:
                    f9:b4:44:ed:87:d5:74:65:08:0f:6a:8c:61:d0:18:
                    62:89:76:e1:e8:91:43:43:ba:08:d8:7d:73:e7:64:
                    b8:a6:b4:26:a8:5b:b8:cf:09:49:bc:89:3a:a9:57:
                    1b:8b:38:15:5e:e9:aa:e9:84:11:d1:b1:f1:24:38:
                    a3:13:de:ec:cc:49:d1:cf:9b:9a:c0:c7:c9:6f:0c:
                    29:cf:d4:0e:61:d1:43:fe:de:f6:db:6a:87:61:c0:
                    7a:1e:9d:0b:ee:ea:f9:5e:e2:38:0d:dd:2a:a0:81:
                    48:4b:67:4a:16:c3:52:ba:63:43:a6:1c:e3:ce:4a:
                    67:50:32:e8:0b:8d:1d:3e:90:ec:23:e8:61:38:71:
                    ce:c5:2e:77:7b:0b:ec:e3:5a:cc:ab:bb:96:76:bd:
                    72:76:0a:30:63:5d:1b:d8:48:cc:a3:5a:70:e1:35:
                    34:2f:ae:b9:7a:81:02:75:91:1f:05:1c:c9:29:0a:
                    72:14:6f:c0:4d:b9:89:f7:5f:e6:0e:1b:61:ea:0b:
                    25:61:64:91:20:31:0d:77:13:4a:07:7c:a7:3c:94:
                    32:66:ec:8e:ba:8d:b0:f2:19:aa:c9:c0:33:4f:8b:
                    8c:e2:23:28:0e:1d:0f:26:98:60:14:df:6f:d9:62:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:B7:8A:D5:F6:C8:98:3C:8A:47:6F:D2:AB:AA:94:54:BE:AD:24
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e362f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.6/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:5c:26:d7:01:77:b7:e0:0a:4c:10:e8:4f:74:00:a6:e4:0f:
         9c:7a:93:46:65:d2:f4:b7:5e:63:4f:a9:a7:0e:c4:3f:3c:f1:
         62:c1:12:85:e3:49:f1:90:42:a9:36:f7:65:6c:86:30:2f:72:
         2a:9b:43:a2:1a:5f:b1:fd:d8:ff:ee:e7:66:fe:85:e9:4e:61:
         2a:5d:9e:74:e8:4a:38:87:56:7a:20:65:35:f2:b7:5e:7f:0d:
         3d:9d:9a:94:34:67:52:84:11:9e:01:c2:65:88:f3:ca:47:21:
         f9:b4:ce:e7:d2:18:7c:5d:21:ab:91:d3:36:b2:62:1e:bf:bc:
         03:49:fa:b2:65:76:32:77:cd:b3:d9:5b:00:80:9c:fa:41:ab:
         76:75:0e:2e:d2:7e:f5:72:17:1c:2c:d7:ef:a0:2f:80:d2:ce:
         7e:66:5a:dc:51:fe:b5:e5:a8:53:36:07:b0:a2:c7:0a:54:dc:
         67:e8:31:9f:d3:02:30:5f:32:e4:36:fa:56:fc:5d:88:d0:e6:
         b1:a0:d4:60:ab:7f:f8:0e:8b:a0:c3:96:6a:74:d3:96:e5:f8:
         91:1b:ff:88:34:40:32:f5:cb:36:d1:7c:23:b5:3f:16:58:6d:
         09:a3:9e:e8:f2:45:ac:36:df:71:f7:2f:3c:5e:42:d6:d7:60:
         dc:f2:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:31 2026 by rpki-client