Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33342e302f32342d3234203d3e203238353436.roa
File:                     3230312e3135302e33342e302f32342d3234203d3e203238353436.roa (raw, json)
Hash identifier:          mE5iKCE14677S95lPjgmfI1yEICPwVb5rmMi0369bic=
Subject key identifier:   E7:D9:CE:00:31:9F:04:69:E7:BA:68:B9:D4:B7:D0:16:D9:CA:70:D5
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       45722C92C65FDE12787330D8D828B4832A827DD4
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33342e302f32342d3234203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:02 +0000
ROA not before:           Sat 26 Sep 2026 00:55:02 +0000
ROA not after:            Sat 25 Sep 2027 01:00:02 +0000
asID:                     28546
IP address blocks:        201.150.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:72:2c:92:c6:5f:de:12:78:73:30:d8:d8:28:b4:83:2a:82:7d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:02 2026 GMT
            Not After : Sep 25 01:00:02 2027 GMT
        Subject: CN=E7D9CE00319F0469E7BA68B9D4B7D016D9CA70D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:27:16:c2:65:af:bb:19:72:49:6c:f6:99:
                    15:51:a8:fa:ae:77:c3:dd:70:5d:7c:2e:e1:59:f2:
                    4d:19:8d:a8:ec:dc:09:57:29:48:c9:97:07:b1:47:
                    37:ed:0b:69:f5:65:28:b7:c0:6a:22:ab:60:b1:d8:
                    64:9d:49:96:b3:38:f4:cf:13:6e:0e:90:cb:33:6f:
                    86:c6:59:5e:50:05:a0:02:be:80:f5:a0:63:58:c2:
                    b4:b7:81:0b:83:48:cb:0d:2c:5d:fa:f6:d5:ee:6c:
                    9d:4f:7c:d1:42:1b:d0:ee:cf:3d:08:3a:28:1d:a2:
                    46:1d:91:76:f5:22:6d:07:98:0b:c5:cf:50:bf:2c:
                    c8:bb:99:0e:8f:2c:e8:01:ab:94:09:d1:aa:69:c7:
                    99:76:f4:0d:86:ba:e1:05:81:25:d1:ad:65:22:1b:
                    c4:bb:61:32:46:f8:36:d0:e1:8b:a0:63:ed:a1:54:
                    e1:1a:4d:fa:a7:56:39:53:90:3c:57:9f:3a:de:6c:
                    8c:9d:23:77:60:35:3b:79:96:1a:87:29:e5:58:1b:
                    6e:ae:56:49:44:97:a1:29:13:d3:97:98:50:6c:57:
                    ad:6a:71:13:97:4c:cf:5e:b8:7e:73:81:ab:fe:af:
                    c3:0e:93:79:32:45:1b:a6:b0:2c:08:b0:36:5b:55:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D9:CE:00:31:9F:04:69:E7:BA:68:B9:D4:B7:D0:16:D9:CA:70:D5
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33342e302f32342d3234203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:ab:cc:a7:79:25:83:fc:fc:b8:94:4a:8b:31:76:4b:c8:
         dc:60:38:64:f4:12:30:d7:c5:5a:ed:84:5c:78:d2:a8:69:ed:
         e0:aa:84:4d:98:0c:c9:71:56:f7:f3:57:58:59:2e:8f:88:bc:
         de:ec:18:86:94:5c:95:5d:90:83:e3:49:fa:bb:ef:2e:a5:7e:
         e3:5e:06:3a:6d:9e:f1:eb:0f:c3:81:01:e1:3b:39:43:6f:63:
         8d:a9:a3:89:03:81:ee:4a:e6:49:50:2f:76:ab:61:94:08:d7:
         fb:14:bc:b7:25:4f:94:5a:0f:de:15:ba:39:fd:0e:18:a1:fd:
         e5:a6:6e:6a:b2:43:62:13:3d:21:22:d1:22:d2:52:d8:a5:78:
         49:56:8a:49:68:46:d7:aa:9f:74:18:54:df:ae:18:73:71:c1:
         c6:3b:8f:c2:5a:45:2b:13:25:9c:db:1c:51:c3:4e:ba:b3:2c:
         1a:59:4e:66:a3:dd:8e:fb:e0:22:99:eb:3f:e7:25:a9:4b:75:
         33:d7:58:5f:0b:d0:78:ba:0f:ab:44:5e:35:39:b9:2a:e5:5b:
         e8:a8:9f:94:1c:8c:70:b6:e5:86:0e:c2:f4:8d:16:dd:0e:ce:
         5c:c4:66:3f:a9:69:0b:eb:47:c3:db:04:e7:89:46:23:40:2a:
         82:9a:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:38:52 2026 by rpki-client