Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33362e302f32342d3234203d3e203238353436.roa
File:                     3230312e3135302e33362e302f32342d3234203d3e203238353436.roa (raw, json)
Hash identifier:          OcEWlpyi8dW38+vsV15YoxDK+lfbnKtrKZ272SEONvU=
Subject key identifier:   F7:4B:00:B5:C0:CB:CC:E6:22:3E:5B:15:47:9E:1B:88:A5:5E:0A:2A
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       0CD48F0BDC82CAA6BBFFA1127B1E7F2CD11D3E0D
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33362e302f32342d3234203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:05 +0000
ROA not before:           Sat 26 Sep 2026 00:55:05 +0000
ROA not after:            Sat 25 Sep 2027 01:00:05 +0000
asID:                     28546
IP address blocks:        201.150.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d4:8f:0b:dc:82:ca:a6:bb:ff:a1:12:7b:1e:7f:2c:d1:1d:3e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:05 2026 GMT
            Not After : Sep 25 01:00:05 2027 GMT
        Subject: CN=F74B00B5C0CBCCE6223E5B15479E1B88A55E0A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:b2:86:a8:19:2f:40:49:f7:3c:a1:b8:d1:
                    e1:fa:43:e6:2c:90:d6:49:98:3d:db:04:12:ed:b5:
                    d1:0a:06:de:34:54:6b:56:34:d0:2f:18:a2:55:38:
                    22:c8:a7:ad:b0:9c:a7:d9:96:94:34:c2:79:f9:d8:
                    0a:52:dd:17:80:d4:91:63:8e:9f:72:a2:19:7c:ec:
                    49:c2:39:db:86:13:d9:a4:53:be:d0:7b:c2:a1:0b:
                    87:20:cb:d7:bc:6c:6c:cd:98:39:9d:f4:f3:3e:ef:
                    f3:cc:55:9c:9a:fd:df:8c:da:3b:c1:49:2f:3c:39:
                    f0:3d:60:47:e8:8d:b0:43:1c:0e:eb:9b:df:69:38:
                    f2:ad:78:55:70:00:d5:de:19:a5:c4:f2:fe:3f:a9:
                    47:6c:dd:13:34:4d:21:fd:b6:2c:91:ff:40:13:ee:
                    e7:4b:c6:c0:76:be:d7:db:58:1b:03:94:76:d4:cb:
                    3c:9b:d2:1b:34:22:bc:f2:d8:79:7b:9b:77:19:e9:
                    36:54:c9:ad:f8:b3:e9:7d:a8:63:32:d3:80:7f:a1:
                    fc:00:a2:f2:b2:2e:b8:99:8f:ad:21:22:09:5d:5a:
                    76:86:36:4d:fb:f5:49:0d:8d:9d:31:c1:f2:e9:57:
                    fc:38:2e:62:50:94:d2:98:03:89:ff:b3:57:3c:63:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4B:00:B5:C0:CB:CC:E6:22:3E:5B:15:47:9E:1B:88:A5:5E:0A:2A
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e33362e302f32342d3234203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:8a:0e:d8:10:45:b5:e8:d5:a9:49:47:cf:54:a1:b6:0a:d7:
         7e:80:66:38:b3:4f:43:f5:bf:65:5e:1c:18:11:fa:06:8f:a9:
         0c:4f:88:35:27:62:de:03:11:63:d0:e1:fa:ad:4b:b9:3c:cd:
         89:81:0d:3f:29:93:5f:21:ac:e4:a6:6e:c7:a4:51:a7:eb:06:
         70:cf:e8:b2:69:f0:41:bf:cd:67:10:5c:df:17:da:36:06:e9:
         f1:05:78:2f:6f:92:54:9d:37:5c:28:97:3e:70:71:42:14:3f:
         9a:a0:8d:18:7a:8b:0e:63:04:78:31:39:fc:0c:a6:ca:f7:22:
         80:62:fe:af:77:57:f1:db:6f:ad:87:84:88:98:bd:a7:b9:5f:
         0f:64:35:e3:2a:dd:b4:07:96:73:de:7c:93:14:66:8c:2f:12:
         ff:2a:ab:4f:d8:9b:ae:1f:92:47:5a:ad:87:7e:f6:9e:7d:12:
         10:84:f9:c8:b0:c8:63:f2:8d:06:e6:d6:bb:b7:ae:e7:b6:f1:
         f2:bc:15:36:dc:41:22:cd:cc:2b:88:df:07:d9:92:69:6b:76:
         de:0a:36:b8:e7:42:f0:9e:00:a0:9b:58:09:df:83:93:83:c7:
         d5:b0:26:1f:89:48:55:61:04:fa:d0:38:44:f7:93:b9:ee:7e:
         3c:a6:7e:08
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDNSPC9yCyqa7/6ESex5/LNEdPg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNEREMkZFNzE0MDIyMzM3NDgwNzRFNzJGMzUxMzFG
MzA1QjY1QjAeFw0yNjA5MjYwMDU1MDVaFw0yNzA5MjUwMTAwMDVaMDMxMTAvBgNV
BAMTKEY3NEIwMEI1QzBDQkNDRTYyMjNFNUIxNTQ3OUUxQjg4QTU1RTBBMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYlbKGqBkvQEn3PKG40eH6Q+Ys
kNZJmD3bBBLttdEKBt40VGtWNNAvGKJVOCLIp62wnKfZlpQ0wnn52ApS3ReA1JFj
jp9yohl87EnCOduGE9mkU77Qe8KhC4cgy9e8bGzNmDmd9PM+7/PMVZya/d+M2jvB
SS88OfA9YEfojbBDHA7rm99pOPKteFVwANXeGaXE8v4/qUds3RM0TSH9tiyR/0AT
7udLxsB2vtfbWBsDlHbUyzyb0hs0Irzy2Hl7m3cZ6TZUya34s+l9qGMy04B/ofwA
ovKyLriZj60hIgldWnaGNk379UkNjZ0xwfLpV/w4LmJQlNKYA4n/s1c8Y55xAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU90sAtcDLzOYiPlsVR54biKVeCiowHwYDVR0j
BBgwFoAUEwTdL+cUAiM3SAdOcvNRMfMFtlswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODk5NkNEMjY1QkEzNDIwQjJDQjIwM0Y1NTQzNTI2RUM5
RTVBREIzRTMzRDk5REE4REVCMzFEQTIzMjIzRUVCLzAvMTMwNEREMkZFNzE0MDIy
MzM3NDgwNzRFNzJGMzUxMzFGMzA1QjY1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzA0REQyRkU3MTQwMjIzMzc0
ODA3NEU3MkYzNTEzMUYzMDVCNjVCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg5OTZDRDI2NUJBMzQyMEIyQ0IyMDNGNTU0MzUyNkVDOUU1QURCM0Uz
M0Q5OURBOERFQjMxREEyMzIyM0VFQi8wLzMyMzAzMTJlMzEzNTMwMmUzMzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM1MzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmWJDAN
BgkqhkiG9w0BAQsFAAOCAQEAWYoO2BBFtejVqUlHz1ShtgrXfoBmOLNPQ/W/ZV4c
GBH6Bo+pDE+INSdi3gMRY9Dh+q1LuTzNiYENPymTXyGs5KZux6RRp+sGcM/osmnw
Qb/NZxBc3xfaNgbp8QV4L2+SVJ03XCiXPnBxQhQ/mqCNGHqLDmMEeDE5/Aymyvci
gGL+r3dX8dtvrYeEiJi9p7lfD2Q14yrdtAeWc958kxRmjC8S/yqrT9ibrh+SR1qt
h372nn0SEIT5yLDIY/KNBubWu7eu57bx8rwVNtxBIs3MK4jfB9mSaWt23go2uOdC
8J4AoJtYCd+Dk4PH1bAmH4lIVWEE+tA4RPeTue5+PKZ+CA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:35:06 2026 by rpki-client