Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34322e302f32342d3234203d3e203238353436.roa
File:                     3230312e3135302e34322e302f32342d3234203d3e203238353436.roa (raw, json)
Hash identifier:          +zSHBhLxEiib5uvjv+b7aFc1TbS6Y0+Zbp/2KKiYlzs=
Subject key identifier:   3C:0F:0A:5A:AB:F1:5E:D4:70:AE:8D:7C:66:B9:CD:4D:50:20:89:BC
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       7121278D4758A9582F98A28689CEEDE5CCA944E1
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34322e302f32342d3234203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:09 +0000
ROA not before:           Sat 26 Sep 2026 00:55:09 +0000
ROA not after:            Sat 25 Sep 2027 01:00:09 +0000
asID:                     28546
IP address blocks:        201.150.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:21:27:8d:47:58:a9:58:2f:98:a2:86:89:ce:ed:e5:cc:a9:44:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:09 2026 GMT
            Not After : Sep 25 01:00:09 2027 GMT
        Subject: CN=3C0F0A5AABF15ED470AE8D7C66B9CD4D502089BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:45:e9:f3:fa:8e:45:94:f4:6c:68:97:8c:
                    81:2c:4c:7e:d9:5b:44:0e:26:b5:90:da:69:1a:50:
                    48:ec:20:66:26:a1:65:31:09:48:19:e5:06:02:b6:
                    da:3b:91:03:49:e0:14:c2:fe:72:ca:bd:6f:95:f0:
                    0b:a7:d8:94:3b:06:10:49:18:da:28:e6:a8:a4:bc:
                    9f:f7:a3:99:6b:80:e7:58:ef:09:cb:17:55:0e:8d:
                    62:64:af:83:d0:1d:d0:03:27:ac:a7:65:6d:96:68:
                    66:79:2d:b6:7a:14:39:7c:3f:3a:2c:24:67:8a:a7:
                    da:12:5e:7d:c7:21:7f:b3:34:39:90:27:0c:c4:08:
                    90:b1:a8:7d:43:db:5b:3e:5b:90:83:e0:3a:8b:77:
                    82:67:bf:9f:4e:93:47:30:34:ed:8f:b1:5f:99:bb:
                    18:6f:74:7f:af:e0:53:88:ce:f6:9c:a9:12:9f:5b:
                    d2:88:b3:ce:c5:10:71:27:ed:4c:25:98:ca:7c:ed:
                    25:9d:d6:62:83:33:82:35:06:1b:91:cd:74:03:e9:
                    f6:3d:89:b4:51:2e:4e:36:ea:9b:56:5e:d8:0e:fb:
                    0b:91:54:a8:6a:89:4d:82:ac:48:74:dc:99:9d:a6:
                    6a:38:81:1e:52:6a:4b:50:29:4a:76:82:64:f2:1d:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0F:0A:5A:AB:F1:5E:D4:70:AE:8D:7C:66:B9:CD:4D:50:20:89:BC
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34322e302f32342d3234203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:62:4f:4b:3b:8a:04:14:41:a7:95:6f:c6:97:3d:d1:c4:
         f2:be:e4:aa:fd:65:bf:04:9c:cd:d3:bb:e5:56:f0:13:96:b7:
         6a:99:ec:75:b0:f6:75:26:5a:3f:54:35:e4:04:1c:63:3a:57:
         ab:a5:96:8b:c9:66:d5:e2:8a:2e:74:d5:db:2a:fb:e3:3c:55:
         3f:03:6c:e7:8a:35:f5:1b:f2:38:19:9e:9f:9b:ea:a2:27:56:
         9d:10:f9:35:9d:9a:fb:d8:2c:f0:53:7f:5d:78:b9:59:be:50:
         1e:c3:ff:1f:86:53:4b:44:ae:b6:57:da:5e:36:8c:b5:03:45:
         b7:37:5a:ed:fb:1c:de:6d:35:24:63:c1:d1:39:c5:bb:6e:27:
         8a:d2:26:6c:ac:a7:f9:b6:e4:48:fa:30:be:f4:df:2e:7f:34:
         b1:95:9f:d6:a3:ee:58:52:56:03:06:b4:f9:36:98:a4:94:53:
         90:75:67:ff:f0:d7:66:c4:ce:90:13:d6:2f:6a:44:1e:f5:d6:
         c3:6d:45:2b:4d:aa:31:09:00:58:7e:ec:2a:66:50:00:58:c2:
         e5:e0:9d:d7:37:cc:e5:5a:b4:79:19:28:56:65:bd:1a:d5:f7:
         91:d6:6a:21:7d:ff:49:7c:c1:b6:c7:64:61:7a:f8:c6:0b:24:
         c2:34:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:49:30 2026 by rpki-client