Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e392f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e392f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          MIFAqjU3pWZarVcIUqGSBve11hkT+sXxxpWP4ojt/QE=
Subject key identifier:   FC:11:E2:87:2D:8D:62:A0:7F:E1:6A:5E:4B:B4:F6:DA:ED:A7:ED:A6
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       756F36F2CBB97BB53312BC24B08209619DECB21A
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e392f33322d3332203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:14 +0000
ROA not before:           Tue 15 Sep 2026 13:25:14 +0000
ROA not after:            Tue 14 Sep 2027 13:30:14 +0000
asID:                     52266
IP address blocks:        201.219.252.9/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:36:f2:cb:b9:7b:b5:33:12:bc:24:b0:82:09:61:9d:ec:b2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:14 2026 GMT
            Not After : Sep 14 13:30:14 2027 GMT
        Subject: CN=FC11E2872D8D62A07FE16A5E4BB4F6DAEDA7EDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:85:11:ab:62:1b:b9:03:cf:fe:7b:a7:d0:
                    3b:09:04:28:c2:c5:a4:3a:ce:b0:1a:2e:9e:82:ce:
                    f5:05:27:19:49:9b:56:cf:ac:ff:4d:56:2b:1d:bf:
                    0a:3f:72:a3:c5:60:13:09:4b:60:40:81:67:0a:f1:
                    1d:ac:2b:4a:3f:24:37:40:93:ed:a3:ce:2a:ff:c6:
                    e6:0c:bb:dd:71:b5:7a:6b:d6:ab:61:7d:95:cb:36:
                    88:83:29:a5:ca:c7:10:3b:c6:29:4d:cc:96:7d:2b:
                    87:ff:a3:96:46:0f:44:56:17:b2:c3:1b:20:17:2e:
                    79:90:c4:30:a4:83:d5:30:1e:8c:b4:00:25:f5:6b:
                    60:57:75:52:a1:3f:a6:66:3c:35:9a:3a:12:24:66:
                    7f:82:b1:cf:0b:72:d4:86:4e:3c:1c:02:a0:58:2b:
                    ea:41:30:16:cd:cb:9b:98:d3:3c:ff:48:71:88:98:
                    55:8e:54:35:49:da:67:24:eb:e9:0c:fd:94:22:a5:
                    80:45:5b:51:08:04:6f:d3:81:c2:a0:b8:0e:a6:0e:
                    4c:fc:23:09:fa:b9:11:50:05:e4:ce:60:9b:84:6f:
                    9f:1b:6b:f2:3b:00:d3:d9:68:e5:ef:80:fa:ce:72:
                    43:7a:ee:3c:d7:03:5e:24:55:a7:7f:11:6a:cb:20:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:11:E2:87:2D:8D:62:A0:7F:E1:6A:5E:4B:B4:F6:DA:ED:A7:ED:A6
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e392f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.9/32

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:1c:c1:68:5a:37:b9:c4:a0:6f:cc:cc:57:be:ab:f8:ad:
         bb:d8:95:f1:51:56:d4:4e:46:66:ee:d3:95:9e:c5:21:03:50:
         7b:fc:b6:97:83:ba:a5:13:5d:ec:a5:5d:ab:87:68:e0:32:f1:
         61:a9:fd:53:45:c7:72:a4:01:35:a6:11:a6:a3:71:a6:c4:45:
         2e:00:cb:ea:9a:03:36:f5:1f:4b:47:8d:9a:27:15:f4:3d:82:
         19:81:7d:23:44:2e:31:23:eb:10:6e:fd:76:75:ba:66:29:ee:
         8f:7b:38:91:17:2d:9d:b0:df:e2:93:7d:8f:ae:6a:a1:a5:b9:
         24:3a:7a:3e:5c:99:76:5b:8e:70:05:e1:0c:60:f2:25:0a:13:
         79:05:99:1f:53:23:cf:9c:bd:f2:32:0f:ae:ef:10:5a:4b:5b:
         97:9f:7d:44:ad:e3:72:0b:e3:ba:83:b7:4f:57:93:1f:f9:68:
         b2:3b:af:f4:ac:b8:88:38:ae:58:7a:ee:68:cd:de:ce:f5:f9:
         b1:89:91:18:7c:de:e9:a2:6b:30:ee:66:40:42:12:e9:21:27:
         69:54:da:c0:90:a0:f9:40:f8:c7:1c:a2:c7:b4:c2:67:cb:df:
         5a:b1:ad:80:e1:23:8e:12:a1:c2:58:e0:f2:c0:76:20:65:0e:
         7c:95:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:37 2026 by rpki-client