Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34302e302f32312d3231203d3e203238353436.roa
File:                     3230312e3135302e34302e302f32312d3231203d3e203238353436.roa (raw, json)
Hash identifier:          T6ZqKJZjB9vSuTEACo8FeSdCzy6qiFFi8hDojavyzTQ=
Subject key identifier:   E6:60:F5:34:35:B9:55:27:C9:2C:11:EF:02:24:B7:F9:4B:BA:58:D1
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       0F89DC2D63BBD355A1B58D1C60EF1336820C28DA
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34302e302f32312d3231203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:08 +0000
ROA not before:           Sat 26 Sep 2026 00:55:08 +0000
ROA not after:            Sat 25 Sep 2027 01:00:08 +0000
asID:                     28546
IP address blocks:        201.150.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:dc:2d:63:bb:d3:55:a1:b5:8d:1c:60:ef:13:36:82:0c:28:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:08 2026 GMT
            Not After : Sep 25 01:00:08 2027 GMT
        Subject: CN=E660F53435B95527C92C11EF0224B7F94BBA58D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:ec:58:9b:70:1c:25:3c:9c:6f:46:f3:73:
                    64:f4:b3:9e:ce:29:e3:1a:da:e9:b7:8d:2c:c3:ec:
                    f5:85:3d:b6:4c:a5:de:98:74:51:fe:5b:1d:52:3c:
                    8f:f4:55:96:64:18:68:d4:e7:db:2f:eb:fc:c1:6d:
                    2c:65:e7:b0:03:0d:37:fa:8f:39:e7:44:99:ac:da:
                    58:08:ca:37:5e:d5:39:9e:ab:26:47:d9:af:57:d1:
                    17:0c:76:be:d2:2f:07:87:cc:aa:86:fb:a9:b8:e0:
                    bb:ad:02:bf:38:b1:4d:49:09:07:b5:f1:de:11:0d:
                    02:29:fe:de:26:65:88:26:79:2d:bb:c0:48:c4:b6:
                    64:5e:1e:45:01:a5:9e:5f:82:fa:e0:ed:f3:95:74:
                    be:c9:23:79:05:80:06:8a:c5:be:75:48:bf:5c:94:
                    5b:a4:89:ea:ff:3e:9f:75:ce:fd:68:cc:fb:96:7a:
                    2c:01:0e:99:8d:66:69:2d:85:ac:4a:72:db:60:c4:
                    65:c2:7b:13:b1:59:05:92:fb:ee:2a:90:c8:a4:7e:
                    5b:c4:86:85:8f:41:22:e3:9a:01:5c:9c:07:bb:cf:
                    bf:25:1a:1c:bb:7b:08:06:85:a3:16:dd:f1:db:91:
                    3d:48:d7:69:62:62:dc:19:92:4e:f9:7e:08:21:a6:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:60:F5:34:35:B9:55:27:C9:2C:11:EF:02:24:B7:F9:4B:BA:58:D1
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34302e302f32312d3231203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:08:52:d8:ea:dc:d2:81:1d:57:f3:92:5f:4f:fb:ab:70:
         37:18:61:5a:f5:3d:86:1b:2f:c4:76:ba:bb:b8:35:b1:75:9c:
         cc:14:27:5b:0d:fe:dc:83:96:6d:5c:f2:6a:d4:27:ff:f4:f2:
         13:54:48:b8:a4:9c:ac:be:f9:bb:37:ea:57:49:61:dd:71:17:
         64:38:01:a4:e7:87:53:ba:16:3d:15:90:2e:30:0f:36:54:c1:
         77:22:fe:3f:5c:85:1b:f4:2a:97:fc:da:6a:91:2e:00:bc:ad:
         27:54:e9:c7:a7:58:d0:f1:58:3a:7b:7c:1f:53:46:f0:52:7f:
         42:cc:f5:03:fb:f0:f9:d7:ff:cf:24:24:cf:2e:43:e5:f0:25:
         8b:49:f9:aa:c7:e0:a8:3c:a9:35:f1:0d:6f:04:2d:95:00:1c:
         dc:e3:bc:ad:8b:31:a8:b4:10:09:ad:53:8d:09:e5:3b:76:1a:
         29:2c:31:d5:e4:23:5a:a1:3a:38:b7:6b:e6:34:1e:db:cf:55:
         dd:85:80:aa:f2:44:aa:22:78:13:9d:5e:03:81:38:f2:2a:a4:
         20:c8:b0:3d:61:35:83:e2:3c:8a:7c:d4:de:e4:7c:fb:1a:31:
         ed:de:7c:9d:14:82:53:db:d7:71:34:f2:3b:cf:63:81:9f:aa:
         ba:0b:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:38:26 2026 by rpki-client