Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e203133343839.roa
File:                     3230312e3135302e39362e302f32322d3234203d3e203133343839.roa (raw, json)
Hash identifier:          g+W/z7udKej2yfpiAehk1P7E1LRVB96njlejPVwoCN0=
Subject key identifier:   C1:CB:6C:E9:76:C6:4F:18:30:8B:49:D3:2D:5C:9B:C6:89:3D:D9:88
Certificate issuer:       /CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
Certificate serial:       5FAD107A587FA941545565C528A616AB049AD2B3
Authority key identifier: 6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e203133343839.roa
Signing time:             Fri 06 Mar 2026 23:33:12 +0000
ROA not before:           Fri 06 Mar 2026 23:28:12 +0000
ROA not after:            Fri 05 Mar 2027 23:33:12 +0000
asID:                     13489
IP address blocks:        201.150.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Mar 2026 20:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:10:7a:58:7f:a9:41:54:55:65:c5:28:a6:16:ab:04:9a:d2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
        Validity
            Not Before: Mar  6 23:28:12 2026 GMT
            Not After : Mar  5 23:33:12 2027 GMT
        Subject: CN=C1CB6CE976C64F18308B49D32D5C9BC6893DD988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:05:52:3e:49:d7:df:95:e9:aa:07:a7:e8:
                    9c:94:0b:80:63:40:40:ac:49:18:c6:c9:48:09:30:
                    87:d4:c2:35:d0:5d:31:95:0c:38:02:39:59:ce:d0:
                    a1:f2:f3:a6:1e:c6:60:a6:04:4c:3f:b5:75:b7:cf:
                    d0:77:66:5d:ac:0d:d2:54:cb:fe:a0:4d:1d:62:e0:
                    34:2c:1a:ff:26:a2:9c:9c:d7:bc:e2:b8:10:fc:0b:
                    c9:fc:fd:f3:f1:13:c0:cc:e5:9e:f4:7c:9a:0b:a9:
                    7f:61:0f:75:07:e8:4d:cb:6f:ff:c7:bb:86:27:b1:
                    81:dd:f7:e6:c1:69:dc:86:9d:d1:27:21:24:36:ab:
                    27:5d:e0:cb:67:97:9d:ac:bb:2c:d6:35:f0:62:4e:
                    5e:31:a1:d6:31:ab:55:46:b3:7d:0a:f7:ff:b7:68:
                    5a:9b:3a:d1:93:5e:d2:d6:a9:2c:f7:f1:cb:86:a6:
                    d9:70:6e:42:ca:74:bc:35:5b:25:36:f5:47:81:8d:
                    a9:11:f5:2f:c0:34:63:5c:08:08:54:aa:df:76:af:
                    be:8b:37:30:cf:ab:c2:ac:84:99:8d:64:e2:14:65:
                    ea:f9:97:55:6d:96:21:8d:94:e3:81:d8:13:60:1c:
                    18:06:2e:97:67:f4:68:3c:05:e4:72:3d:c7:52:a9:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CB:6C:E9:76:C6:4F:18:30:8B:49:D3:2D:5C:9B:C6:89:3D:D9:88
            X509v3 Authority Key Identifier:
                keyid:6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:d2:4b:42:39:33:88:5d:0b:1b:87:ad:fe:f1:ee:04:e0:
         7c:11:04:1e:5f:01:19:05:fb:5a:62:cd:4d:46:98:8d:e9:bc:
         2b:4e:c7:02:9c:d7:22:18:b5:2f:9f:c7:6b:f2:2d:af:99:44:
         08:7a:42:eb:04:97:b8:cd:e1:3e:56:dd:9d:24:3c:93:52:5e:
         09:dd:17:1b:e0:a9:4a:f0:dd:9d:0f:0b:df:1a:31:8f:3d:88:
         4e:20:40:41:c2:5f:cd:55:19:af:ab:3b:f5:a6:64:89:0f:db:
         91:95:f5:20:45:eb:2a:13:b0:ca:3e:d3:38:62:56:f8:79:63:
         8d:e0:35:b1:0c:8e:ff:3b:c2:f1:d1:72:ac:5e:8e:87:69:42:
         68:c5:6d:3f:28:7d:22:5e:2b:1c:80:bd:68:97:61:d9:68:ff:
         bb:1b:0d:4c:47:5a:63:fb:95:4d:8b:59:76:f3:74:72:1e:a6:
         41:e6:31:eb:21:65:5c:09:ad:ce:4c:a2:c7:52:90:51:29:28:
         a3:00:d6:98:9b:b7:d1:13:87:8b:23:ef:4f:f6:70:11:fc:ec:
         55:2c:70:c5:1f:4a:19:c7:e3:d5:8c:1e:c2:e9:14:a3:dd:2b:
         f6:a1:e1:d6:e7:28:8e:3a:a4:14:16:83:20:5c:af:4c:56:a0:
         0a:bc:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 08:42:44 2026 by rpki-client