Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34342e302f32332d3233203d3e203238353436.roa
File:                     3230312e3135302e34342e302f32332d3233203d3e203238353436.roa (raw, json)
Hash identifier:          cPpYUGV9xOeRJufeGQ9syb3HIKXoz/k1VhuWv+Fz9zY=
Subject key identifier:   83:C2:F3:B4:26:BB:2B:C1:29:3F:95:13:A8:E7:59:C8:5D:7E:FA:C0
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       2A12D7F2FB522AF2487088560791BAE9F69EB3A7
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34342e302f32332d3233203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:05 +0000
ROA not before:           Sat 26 Sep 2026 00:55:05 +0000
ROA not after:            Sat 25 Sep 2027 01:00:05 +0000
asID:                     28546
IP address blocks:        201.150.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:12:d7:f2:fb:52:2a:f2:48:70:88:56:07:91:ba:e9:f6:9e:b3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:05 2026 GMT
            Not After : Sep 25 01:00:05 2027 GMT
        Subject: CN=83C2F3B426BB2BC1293F9513A8E759C85D7EFAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:34:78:e3:f7:3a:0a:b6:6b:3e:e7:4a:7d:
                    a7:10:46:1b:ce:15:9c:49:1b:fd:83:d3:5e:d2:3f:
                    53:a7:b9:06:be:d9:a0:ea:5e:d8:bd:d1:10:6c:5f:
                    67:75:a9:36:ab:46:f3:25:be:72:bd:8b:78:fc:93:
                    58:61:0a:20:4f:15:b6:e4:28:f3:8b:6c:c5:d2:04:
                    75:6f:5f:2e:ee:32:1c:5b:8e:c1:f9:ea:e7:4e:23:
                    9f:ea:79:33:f3:25:44:59:81:9f:01:00:da:49:f6:
                    21:e1:dc:d3:ad:35:33:00:7d:dc:46:f5:f5:10:df:
                    41:bf:7d:83:f9:67:4b:1b:67:79:72:00:ec:eb:35:
                    8d:44:09:23:2e:5c:93:7d:93:9e:43:4a:63:b6:f6:
                    cc:95:6a:a9:49:77:f5:fd:63:be:24:a2:60:16:08:
                    b7:a7:78:08:c1:f8:12:fe:d4:02:81:45:b7:71:13:
                    dc:7e:ed:b2:a4:65:06:b6:76:1e:df:3b:36:b9:ad:
                    39:78:b4:59:c7:3b:30:bb:99:1c:99:17:45:fc:d4:
                    1d:e7:f6:d7:6b:27:f6:1e:fd:c8:a0:36:7a:49:ff:
                    e1:7c:99:51:6e:1f:db:b3:93:69:bd:1d:ed:9f:ba:
                    d2:3c:1b:66:7b:c8:0d:18:71:c3:ca:59:6c:0d:0d:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:F3:B4:26:BB:2B:C1:29:3F:95:13:A8:E7:59:C8:5D:7E:FA:C0
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34342e302f32332d3233203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:b7:f7:b5:9f:ef:be:38:2e:31:48:7f:59:c9:e7:00:a1:
         5c:4b:01:82:7e:ae:cc:12:15:be:3b:d9:f9:1e:f1:c9:5d:f4:
         d1:08:86:e6:78:ca:d2:ee:6e:3e:61:29:0d:a8:18:31:23:e2:
         c4:39:37:dc:23:78:5d:dc:9e:83:33:06:cc:a0:88:c8:69:0c:
         b4:4c:d4:ae:b7:5d:70:e9:bd:c2:dc:a4:c6:d6:d0:2c:f2:2c:
         88:bf:bc:65:0d:3b:0a:4a:98:49:ff:2c:c9:1b:2b:79:72:d3:
         3b:1b:a3:40:03:f0:5b:4e:74:bb:b7:c2:06:ec:80:17:76:14:
         e5:be:60:bc:41:ae:55:05:fa:79:17:18:70:20:f7:4b:e4:54:
         14:cd:f1:be:c4:75:d7:b5:8f:ef:f0:72:b4:27:28:9d:2e:b8:
         2b:3c:a7:0f:27:ac:9a:5a:fb:7c:14:2e:93:99:d9:ef:a2:27:
         2b:bd:f8:cb:21:ff:60:b3:d6:05:1e:6a:96:90:78:e8:62:c6:
         be:69:5c:2b:61:a8:67:d5:24:6e:ba:6c:6f:75:c2:fd:de:e0:
         da:e5:a8:69:8c:cf:e9:72:65:03:67:e9:40:45:d2:32:19:ca:
         74:40:7e:95:00:7b:0f:47:c2:a1:35:a4:9e:91:7e:0a:51:2a:
         4f:76:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:32:55 2026 by rpki-client