Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33352e302f32342d3234203d3e203238353436.roa
File:                     3230312e3135302e33352e302f32342d3234203d3e203238353436.roa (raw, json)
Hash identifier:          kLwBJS7+3KiQd02mi4Je01prd66Dk8d6MEaEMvwfm1Y=
Subject key identifier:   06:62:9C:FF:BD:85:7F:13:4F:E8:CA:0B:F3:5F:C1:0D:8E:64:BF:70
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       576732EA00A4C2672F7F2E4D1037764C2D48E544
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33352e302f32342d3234203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:02 +0000
ROA not before:           Sat 26 Sep 2026 00:55:02 +0000
ROA not after:            Sat 25 Sep 2027 01:00:02 +0000
asID:                     28546
IP address blocks:        201.150.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:67:32:ea:00:a4:c2:67:2f:7f:2e:4d:10:37:76:4c:2d:48:e5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:02 2026 GMT
            Not After : Sep 25 01:00:02 2027 GMT
        Subject: CN=06629CFFBD857F134FE8CA0BF35FC10D8E64BF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:a6:b6:db:f5:d5:28:10:14:01:2a:1f:dc:
                    50:e5:82:34:db:79:3c:75:c3:6d:5e:92:3a:30:8f:
                    61:6e:97:22:ef:32:36:eb:9c:37:b1:67:52:79:ad:
                    2e:c1:48:9e:d2:13:d7:47:89:a0:15:92:05:40:b3:
                    e6:f7:c7:d6:5c:df:44:f4:14:82:63:96:46:dd:ec:
                    35:b7:bd:af:ab:7f:0a:24:f6:6c:69:24:39:2b:d5:
                    79:6c:1e:e5:78:84:74:1a:81:9e:32:ef:42:2a:b4:
                    00:13:51:ac:5f:00:a5:b0:47:8b:77:56:08:a2:98:
                    9c:13:30:0d:44:7e:d7:61:cd:f3:19:3f:88:df:c7:
                    3d:36:a0:7e:9c:09:8f:f8:0c:c3:1b:64:ef:b8:49:
                    b1:ce:2c:60:e5:bf:51:83:43:fa:b2:be:c9:ce:e9:
                    93:b4:71:64:86:f5:09:8e:b0:6d:7a:a1:22:a7:d2:
                    75:d9:dc:e9:66:d0:48:d8:09:00:97:6d:51:d6:97:
                    49:fa:86:42:4c:68:95:97:9a:6b:11:51:34:54:e1:
                    76:64:47:1f:e0:21:40:66:93:a2:b4:ad:4c:7d:6d:
                    43:3c:09:8a:ec:ff:ba:0b:09:2a:7a:e0:36:b3:53:
                    8d:d6:ca:1e:1b:7b:58:fa:dc:d3:b1:b7:57:64:a1:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:9C:FF:BD:85:7F:13:4F:E8:CA:0B:F3:5F:C1:0D:8E:64:BF:70
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33352e302f32342d3234203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:f0:52:3f:0a:e2:6e:76:af:d2:e0:af:a9:49:62:a1:51:
         ac:0a:72:da:99:26:40:87:65:cb:ae:c6:7f:4b:95:da:f4:89:
         50:e3:24:42:30:27:5f:28:de:e2:06:eb:db:89:48:f4:7d:51:
         ea:93:b2:78:f6:9b:1a:2c:d1:ee:6b:56:e6:d3:74:f1:04:28:
         9d:38:ac:2c:4a:de:7c:46:d3:de:2a:b1:e7:b7:ec:85:0b:fb:
         fa:88:d2:44:4f:93:62:a3:5e:73:ea:e2:46:a8:aa:8f:6c:b6:
         9c:52:22:ef:45:0f:f4:36:f8:0e:70:6f:3e:3d:cb:55:7e:20:
         7f:b4:46:63:c6:57:83:10:00:3b:ab:20:7d:7c:cd:2c:0f:32:
         2c:09:51:85:74:1d:67:a3:90:66:b7:21:9b:46:4b:31:ba:2a:
         c1:d4:57:0d:d8:bc:85:45:59:f3:48:90:e4:de:d0:f3:98:48:
         56:c8:71:95:e9:52:b6:1b:c5:6b:32:d3:92:a2:64:60:10:d6:
         91:28:11:47:5f:27:4d:d5:9a:69:05:f0:20:60:d9:f4:58:c3:
         d4:a4:86:77:1e:3e:27:98:8f:9c:57:d1:24:b5:2d:bb:9b:a4:
         07:ed:56:32:aa:4e:69:5c:a2:fb:bf:d3:75:22:d0:cd:26:65:
         54:ca:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:34:54 2026 by rpki-client