Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34332e302f32342d3234203d3e203238353436.roa
File:                     3230312e3135302e34332e302f32342d3234203d3e203238353436.roa (raw, json)
Hash identifier:          HUlEHXdRbc3iU0KaInJt5bCDRZ9nVnRsn+rjRHeHxe0=
Subject key identifier:   0A:49:24:93:20:42:DB:2D:60:65:20:3A:BF:F9:D2:CD:11:19:F4:44
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       4B592A482F9E64F7B306C4C6B85DAE763DCA10EA
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34332e302f32342d3234203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:08 +0000
ROA not before:           Sat 26 Sep 2026 00:55:08 +0000
ROA not after:            Sat 25 Sep 2027 01:00:08 +0000
asID:                     28546
IP address blocks:        201.150.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:2a:48:2f:9e:64:f7:b3:06:c4:c6:b8:5d:ae:76:3d:ca:10:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:08 2026 GMT
            Not After : Sep 25 01:00:08 2027 GMT
        Subject: CN=0A4924932042DB2D6065203ABFF9D2CD1119F444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:7b:c3:66:76:c1:c2:64:5b:ff:a7:1b:9a:
                    56:ad:48:f3:5c:fb:8f:9d:f2:68:b5:f3:71:e4:f0:
                    c4:f1:bf:a4:1c:f9:67:3e:1f:c7:28:69:9f:e4:e7:
                    dc:3d:d3:ae:20:25:8a:60:1b:07:8e:65:02:5a:c3:
                    e9:4b:8b:54:dc:23:d3:cf:9e:38:ae:a7:8a:55:b4:
                    fb:9c:b8:3c:36:b2:17:bb:40:55:bd:fc:0c:50:2a:
                    1e:47:49:dc:e0:d6:1e:83:0f:30:c8:3b:35:a5:a7:
                    ce:c5:ec:30:d2:77:12:8d:0c:83:ea:dd:21:a0:d0:
                    a3:80:1f:02:40:e7:78:e9:20:fd:05:8d:fa:fe:30:
                    a4:4d:55:f7:94:48:c9:f7:c2:de:43:d8:25:b1:b3:
                    41:36:30:7f:27:b3:31:bb:df:61:ef:89:59:25:62:
                    59:e9:3b:c6:66:e4:ee:69:05:5f:b2:21:7d:43:e4:
                    f1:a1:df:fc:39:2b:5a:81:0b:b4:36:3c:c2:3a:14:
                    06:9f:c7:c6:63:d2:2f:34:f3:9a:25:0f:f1:08:e7:
                    da:2d:3c:37:55:83:e1:39:b4:c3:fe:91:10:4f:5e:
                    b9:d1:7c:ef:f2:fe:ed:fe:52:6e:59:b0:73:7c:f8:
                    5c:82:42:55:42:25:a2:85:28:d3:af:bc:16:81:75:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:24:93:20:42:DB:2D:60:65:20:3A:BF:F9:D2:CD:11:19:F4:44
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34332e302f32342d3234203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:25:eb:8b:ea:87:63:7d:28:c9:c2:ec:28:2a:96:67:20:
         82:0a:9a:e9:8e:4a:ec:28:b3:4b:4b:02:04:1a:c1:02:92:ec:
         b0:d9:7c:b7:4e:ee:eb:c6:a5:19:ad:47:f8:88:af:e3:70:7e:
         d0:5e:41:97:53:4f:10:ae:81:f0:a4:a7:5f:c2:1b:f3:a9:f4:
         8a:5c:30:bf:97:0a:78:83:c9:54:b1:08:08:c7:46:7b:d9:ac:
         2f:88:86:d6:5b:38:fc:3a:78:82:fd:42:09:cc:c0:72:6f:c6:
         7e:54:0a:f2:93:0f:06:0d:db:48:86:4d:c9:de:6c:1d:15:79:
         40:1a:c7:39:b6:79:f9:b1:04:c4:87:bd:61:04:14:11:64:d1:
         78:39:da:ac:47:42:6f:9d:3e:12:72:b1:64:24:3d:75:74:f6:
         33:f4:bb:0c:ef:75:c6:22:ff:dd:72:82:fc:b9:71:b8:b7:77:
         d3:ab:8b:f9:a8:69:c8:82:6f:88:95:86:77:24:33:34:93:47:
         c6:d9:47:04:af:4a:11:9e:38:87:5a:c6:be:15:e1:67:64:78:
         b6:27:ce:d5:63:d0:df:c5:91:cd:24:d8:9d:0f:a2:42:69:6f:
         9c:d7:9c:db:09:ab:b3:58:7f:01:aa:29:1e:aa:c9:9c:20:10:
         e5:64:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:20:34 2026 by rpki-client