Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa
File:                     3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa (raw, json)
Hash identifier:          kauT8xBbaO29IXk6PUyLvKqIHX2wQlzBzXEdogI44M0=
Subject key identifier:   EB:B2:24:6C:49:50:33:82:FE:BA:B1:AE:EF:AA:CE:46:0D:91:40:D6
Certificate issuer:       /CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Certificate serial:       1D03D0D4A7BAFF81C2B59F5310FD3545373BEA83
Authority key identifier: C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa
Signing time:             Mon 12 Oct 2026 17:40:03 +0000
ROA not before:           Mon 12 Oct 2026 17:35:03 +0000
ROA not after:            Mon 11 Oct 2027 17:40:03 +0000
asID:                     273097
IP address blocks:        201.222.46.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:d0:d4:a7:ba:ff:81:c2:b5:9f:53:10:fd:35:45:37:3b:ea:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D02995E170CE622F60579EB13D9DD037B46A52
        Validity
            Not Before: Oct 12 17:35:03 2026 GMT
            Not After : Oct 11 17:40:03 2027 GMT
        Subject: CN=EBB2246C49503382FEBAB1AEEFAACE460D9140D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:45:49:92:b9:fb:4a:d2:15:fd:e4:4d:ba:
                    3c:20:97:de:0d:32:f1:48:25:d5:d5:41:90:ca:ab:
                    f6:bc:72:d2:43:52:a8:89:4b:6f:3b:ce:da:5c:93:
                    8a:6e:a4:c2:4b:af:20:89:80:d0:a7:8d:e1:99:e5:
                    4c:c3:77:1c:28:c9:90:bb:af:19:a6:b7:40:bb:c9:
                    24:97:2d:5f:53:9b:9c:a6:c0:90:5f:14:1b:8f:92:
                    52:c9:f4:93:5f:f3:66:9b:ba:28:90:2e:68:4c:34:
                    2f:d3:3c:a6:27:2b:eb:61:f3:7b:0c:f2:f8:86:44:
                    ea:a1:89:0c:15:72:94:b5:93:9e:5a:01:36:8c:c3:
                    cd:3b:67:06:ca:8b:63:83:96:9d:e8:89:11:95:76:
                    df:da:85:7a:5e:1c:cc:ab:2b:3f:06:90:c7:49:de:
                    93:43:ba:a0:c6:29:48:53:02:66:8e:b5:21:2e:1f:
                    39:f9:8b:0c:21:55:19:bd:1a:1e:87:f2:89:0c:be:
                    55:a9:01:ab:5a:1e:fe:dc:54:04:18:ad:5d:af:21:
                    dc:99:68:ae:0b:28:f6:e6:73:58:74:fc:a6:f9:b3:
                    fe:f1:dc:e8:4a:14:76:2d:cf:6a:f5:5f:0e:25:2a:
                    18:07:9f:85:f5:c6:56:8d:6f:a0:4d:db:28:36:15:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B2:24:6C:49:50:33:82:FE:BA:B1:AE:EF:AA:CE:46:0D:91:40:D6
            X509v3 Authority Key Identifier:
                keyid:C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:f4:6b:2f:cb:58:ea:05:c3:ce:d9:3c:b2:47:1b:49:10:
         e6:d5:40:97:74:0a:79:7e:f1:61:d2:29:25:65:42:97:78:62:
         6d:5b:ba:53:b3:5e:11:c1:26:f5:f9:1e:82:0d:a6:c1:1b:97:
         a9:5d:4b:79:33:3e:42:37:40:06:03:ec:5c:a2:50:73:7c:25:
         69:14:6d:e6:84:ca:7c:6d:66:14:cb:6a:0b:78:c6:99:3a:42:
         dc:05:b4:39:8c:61:4c:7a:5e:64:42:e5:89:53:53:6a:99:1f:
         66:a5:2c:eb:5e:41:ad:89:a6:f7:a4:80:48:d9:7f:99:72:5f:
         8d:27:20:8b:bd:4c:71:c3:0b:41:ee:5a:13:78:6f:58:f9:34:
         5c:0f:64:fa:c5:96:ed:e6:41:04:fe:1d:77:9e:95:9b:50:4f:
         2d:a8:96:bc:49:ed:a7:d1:89:87:e6:5c:7b:53:00:75:65:23:
         3e:c8:d7:d7:7f:e0:dc:33:6b:c1:09:90:60:4e:8e:ae:0f:cb:
         13:80:07:38:dd:04:36:c6:71:ee:e9:05:29:7f:50:25:b3:ab:
         76:43:b5:d0:77:19:01:61:38:73:f6:ae:c4:7b:fd:c6:c5:0b:
         cf:9a:04:a5:83:41:1e:7e:f6:7a:a5:33:6f:e7:a2:41:14:ad:
         2e:2f:a7:e5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHQPQ1Ke6/4HCtZ9TEP01RTc76oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNEMDI5OTVFMTcwQ0U2MjJGNjA1NzlFQjEzRDlERDAz
N0I0NkE1MjAeFw0yNjEwMTIxNzM1MDNaFw0yNzEwMTExNzQwMDNaMDMxMTAvBgNV
BAMTKEVCQjIyNDZDNDk1MDMzODJGRUJBQjFBRUVGQUFDRTQ2MEQ5MTQwRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrkVJkrn7StIV/eRNujwgl94N
MvFIJdXVQZDKq/a8ctJDUqiJS287ztpck4pupMJLryCJgNCnjeGZ5UzDdxwoyZC7
rxmmt0C7ySSXLV9Tm5ymwJBfFBuPklLJ9JNf82abuiiQLmhMNC/TPKYnK+th83sM
8viGROqhiQwVcpS1k55aATaMw807ZwbKi2ODlp3oiRGVdt/ahXpeHMyrKz8GkMdJ
3pNDuqDGKUhTAmaOtSEuHzn5iwwhVRm9Gh6H8okMvlWpAataHv7cVAQYrV2vIdyZ
aK4LKPbmc1h0/Kb5s/7x3OhKFHYtz2r1Xw4lKhgHn4X1xlaNb6BN2yg2Fd2xAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU67IkbElQM4L+urGu76rORg2RQNYwHwYDVR0j
BBgwFoAUw9ApleFwzmIvYFeesT2d0De0alIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMDIzQjc2MjQ4Q0NFMDdEQTI1QjE0NjI4NEQ0OTkxNDgw
NTFDMjlBNDJGMzA0MjY2MTQ5OTE0QzE0QTEwNTA3LzAvQzNEMDI5OTVFMTcwQ0U2
MjJGNjA1NzlFQjEzRDlERDAzN0I0NkE1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0QwMjk5NUUxNzBDRTYyMkY2
MDU3OUVCMTNEOUREMDM3QjQ2QTUyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDAyM0I3NjI0OENDRTA3REEyNUIxNDYyODRENDk5MTQ4MDUxQzI5QTQy
RjMwNDI2NjE0OTkxNEMxNEExMDUwNy8wLzMyMzAzMTJlMzIzMjMyMmUzNDM2MmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzIzNzMzMzAzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyd4u
MA0GCSqGSIb3DQEBCwUAA4IBAQB36PRrL8tY6gXDztk8skcbSRDm1UCXdAp5fvFh
0iklZUKXeGJtW7pTs14RwSb1+R6CDabBG5epXUt5Mz5CN0AGA+xcolBzfCVpFG3m
hMp8bWYUy2oLeMaZOkLcBbQ5jGFMel5kQuWJU1NqmR9mpSzrXkGtiab3pIBI2X+Z
cl+NJyCLvUxxwwtB7loTeG9Y+TRcD2T6xZbt5kEE/h13npWbUE8tqJa8Se2n0YmH
5lx7UwB1ZSM+yNfXf+DcM2vBCZBgTo6uD8sTgAc43QQ2xnHu6QUpf1Als6t2Q7XQ
dxkBYThz9q7Ee/3GxQvPmgSlg0EefvZ6pTNv56JBFK0uL6fl
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:13:20 2026 by rpki-client