Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F0BC90CAFA781D419067B416B93896DB13C2372A8714973CFC38BE7884224EE7/0/3230312e3135392e3137362e302f32322d3234203d3e203238333733.roa
File:                     3230312e3135392e3137362e302f32322d3234203d3e203238333733.roa (raw, json)
Hash identifier:          oyagxXIMlcXMZAMtsTmN6q2c7zsKA5NPoDCyWe+lltw=
Subject key identifier:   C2:49:7A:BB:E4:99:A2:9A:11:AF:D9:3C:68:4C:03:03:2C:8A:B7:15
Certificate issuer:       /CN=B0CA9C74E5B77473A2309207997EC7DA0F6186FF
Certificate serial:       0C768A8065E5E75594679194664E9E220C741D2C
Authority key identifier: B0:CA:9C:74:E5:B7:74:73:A2:30:92:07:99:7E:C7:DA:0F:61:86:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CA9C74E5B77473A2309207997EC7DA0F6186FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BC90CAFA781D419067B416B93896DB13C2372A8714973CFC38BE7884224EE7/0/3230312e3135392e3137362e302f32322d3234203d3e203238333733.roa
Signing time:             Wed 26 Aug 2026 18:45:00 +0000
ROA not before:           Wed 26 Aug 2026 18:40:00 +0000
ROA not after:            Wed 25 Aug 2027 18:45:00 +0000
asID:                     28373
IP address blocks:        201.159.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BC90CAFA781D419067B416B93896DB13C2372A8714973CFC38BE7884224EE7/0/B0CA9C74E5B77473A2309207997EC7DA0F6186FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BC90CAFA781D419067B416B93896DB13C2372A8714973CFC38BE7884224EE7/0/B0CA9C74E5B77473A2309207997EC7DA0F6186FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CA9C74E5B77473A2309207997EC7DA0F6186FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:76:8a:80:65:e5:e7:55:94:67:91:94:66:4e:9e:22:0c:74:1d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CA9C74E5B77473A2309207997EC7DA0F6186FF
        Validity
            Not Before: Aug 26 18:40:00 2026 GMT
            Not After : Aug 25 18:45:00 2027 GMT
        Subject: CN=C2497ABBE499A29A11AFD93C684C03032C8AB715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:43:81:42:10:6b:ae:37:99:7e:71:b9:17:
                    1f:ab:99:b7:29:47:3c:b4:d3:53:b9:a4:05:fa:2a:
                    96:06:41:c8:78:04:eb:ce:52:19:ac:0f:9f:4c:0b:
                    15:41:bb:c2:af:23:d3:40:dd:37:05:fc:e8:48:29:
                    70:bc:48:54:9c:b3:f4:2d:77:7e:99:8e:a7:b8:0a:
                    c9:72:88:6a:0c:15:96:88:c2:79:c0:f5:e9:35:fd:
                    77:07:c0:d5:d6:a6:c3:4f:40:99:79:9c:89:8b:5a:
                    10:35:01:f6:2c:56:86:7b:be:50:34:35:6b:d1:27:
                    8c:37:ff:8b:28:66:15:39:7f:66:58:a6:bb:36:43:
                    4d:a7:6a:f8:73:36:a4:f9:08:13:b8:2b:3c:6f:16:
                    a6:a5:56:65:2a:a0:2e:bf:26:6f:3a:59:73:41:42:
                    50:09:8a:15:f1:c4:2d:02:46:aa:d6:2d:a7:4a:14:
                    fc:5a:1e:1c:8a:29:3e:5c:12:68:55:13:d8:5f:7c:
                    8b:91:09:4e:e8:29:24:76:4a:d6:32:a4:98:b4:3f:
                    b2:66:00:61:85:08:d7:3e:6a:fe:e5:3a:71:be:ad:
                    e9:a5:65:6c:e6:36:ea:c4:7b:4e:30:a4:57:4c:8c:
                    5f:22:68:1b:71:2b:ee:45:6a:5b:8d:fc:6c:a9:2c:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:49:7A:BB:E4:99:A2:9A:11:AF:D9:3C:68:4C:03:03:2C:8A:B7:15
            X509v3 Authority Key Identifier:
                keyid:B0:CA:9C:74:E5:B7:74:73:A2:30:92:07:99:7E:C7:DA:0F:61:86:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BC90CAFA781D419067B416B93896DB13C2372A8714973CFC38BE7884224EE7/0/B0CA9C74E5B77473A2309207997EC7DA0F6186FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CA9C74E5B77473A2309207997EC7DA0F6186FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BC90CAFA781D419067B416B93896DB13C2372A8714973CFC38BE7884224EE7/0/3230312e3135392e3137362e302f32322d3234203d3e203238333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:1b:26:68:f8:1e:db:76:ed:ba:47:4f:5c:4b:c0:75:82:
         87:e6:bb:b1:68:4a:77:a4:0f:5b:b8:16:26:63:e6:4d:d7:3c:
         b1:be:1d:9f:66:90:04:8e:45:91:05:05:2d:71:cd:4b:e5:58:
         de:85:79:1a:3b:57:1d:93:f7:3e:c2:24:89:02:c6:47:08:0e:
         eb:26:c6:fc:87:a0:5f:b0:9e:58:dd:59:be:f4:37:71:a6:85:
         35:4a:cd:6c:76:9f:6d:b8:c5:e2:f6:38:98:46:e3:4d:40:71:
         a2:0e:0a:dd:09:98:9f:22:16:64:07:2e:f9:e4:87:a2:b0:1b:
         ac:79:c5:99:0c:ea:78:81:38:f6:e2:41:1c:d5:51:48:d0:62:
         ff:c6:ab:3d:5a:95:84:cf:2b:22:49:1e:07:95:3a:bf:a7:4b:
         74:8e:f0:f6:c1:17:94:55:bc:e1:d5:84:41:f1:19:27:8a:de:
         72:92:17:69:7c:b5:18:dc:96:76:b1:f6:1f:58:80:55:0c:f6:
         de:91:ac:da:69:40:ee:5a:15:1b:ed:27:31:bd:70:15:7e:e7:
         4a:dd:0d:8f:8d:d0:44:6a:53:cc:c5:53:05:51:32:5e:46:ee:
         7d:ab:6c:19:62:c8:e9:82:37:49:01:04:4a:cb:1b:da:97:e4:
         f1:a2:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:42:03 2026 by rpki-client