Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3232302e39362e302f31392d3234203d3e203134313137.roa
File:                     3230312e3232302e39362e302f31392d3234203d3e203134313137.roa (raw, json)
Hash identifier:          +LLfsSgfeJsXRlHNbiK71YYfZzIXKKR8insFKsRWBlE=
Subject key identifier:   18:EC:45:DB:4C:F3:37:6A:98:E1:EE:7B:69:70:55:48:D1:22:9C:1A
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       60FE2EFF3F19451F0FF53A2F10F1C212380D1B10
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3232302e39362e302f31392d3234203d3e203134313137.roa
Signing time:             Tue 02 Jun 2026 19:46:14 +0000
ROA not before:           Tue 02 Jun 2026 19:41:14 +0000
ROA not after:            Tue 01 Jun 2027 19:46:14 +0000
asID:                     14117
IP address blocks:        201.220.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 07:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fe:2e:ff:3f:19:45:1f:0f:f5:3a:2f:10:f1:c2:12:38:0d:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jun  2 19:41:14 2026 GMT
            Not After : Jun  1 19:46:14 2027 GMT
        Subject: CN=18EC45DB4CF3376A98E1EE7B69705548D1229C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:46:e5:d8:1f:3f:9a:ee:62:68:d0:56:d0:
                    53:05:ed:4f:d9:8e:5b:c3:1a:43:66:30:f2:86:1b:
                    3e:db:a1:bb:64:f7:0e:ea:21:a4:8e:e2:62:7e:1b:
                    24:43:d8:b8:69:5d:83:fb:b3:8e:09:be:08:53:70:
                    1a:8b:a1:40:ce:a2:92:63:53:6c:93:34:8f:b7:ca:
                    48:fc:56:66:87:a6:e1:c9:d9:ca:50:80:ba:f1:47:
                    89:66:fd:4c:98:3e:4c:42:cd:7b:e4:73:4d:7f:6d:
                    e1:eb:70:da:a0:d5:33:32:85:4b:18:59:c9:cb:67:
                    80:c4:42:74:ee:ea:77:d0:56:8a:ec:aa:40:30:66:
                    8f:0c:87:a4:a2:ea:b5:91:53:07:32:a2:a0:e5:24:
                    3d:06:06:98:57:51:d3:5b:3d:c0:9c:61:f0:36:13:
                    e4:95:b6:42:b4:b8:26:be:b3:3e:8f:2c:32:26:e7:
                    92:01:e3:9f:07:02:16:be:48:7a:6c:cb:2e:51:a8:
                    f8:1f:e6:b4:4e:9a:78:eb:98:e1:a4:77:b5:7e:8a:
                    b1:8f:1d:55:1b:d2:af:eb:47:37:ba:47:5e:53:9b:
                    ef:e6:84:b3:69:fe:42:56:63:7d:5b:bf:df:32:42:
                    31:81:39:3d:4a:0f:59:e5:a1:3c:75:ca:55:9f:2c:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EC:45:DB:4C:F3:37:6A:98:E1:EE:7B:69:70:55:48:D1:22:9C:1A
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3232302e39362e302f31392d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:60:e1:9d:92:64:71:f7:8e:1e:79:5d:70:f3:0f:ad:ae:
         33:89:92:d3:a0:cf:df:64:8a:2d:ef:4d:62:75:cc:c4:0c:f2:
         f4:f8:a2:b1:88:e9:a0:e6:b5:de:ee:c9:19:a9:21:9d:a4:46:
         16:07:bd:06:4d:5d:1e:3d:bc:8a:4c:37:ab:3b:25:6c:45:19:
         b9:23:70:a5:4f:a2:2e:15:c3:b6:13:66:f4:3f:01:51:3b:c9:
         f1:35:09:d6:12:31:79:26:62:4b:18:a6:1b:8d:48:e9:5a:6b:
         9f:94:07:4e:50:e7:26:1c:fc:f7:68:8f:6e:1f:bf:58:a5:86:
         8a:34:21:90:b5:77:3b:ec:be:9d:b1:db:b2:35:53:bc:b1:c6:
         b0:9d:d3:be:ee:4a:79:68:ff:4b:1c:d5:18:79:d2:68:f7:24:
         e3:22:15:9b:46:8e:4e:1e:ed:83:fd:8e:77:5a:18:06:e7:5a:
         e9:1a:7e:26:b4:04:34:59:a1:38:69:f2:5f:fb:53:64:a0:db:
         0e:80:c4:5e:01:4c:59:0f:19:04:b8:95:24:61:c2:e8:b9:04:
         73:b8:02:21:c7:0d:68:13:e0:d7:a2:69:b0:27:af:c6:8b:5b:
         bd:9c:02:a3:12:fc:fb:eb:54:40:e3:6b:07:3d:61:ed:d3:db:
         67:65:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:30 2026 by rpki-client