Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34352e302f32342d3234203d3e203238353436.roa
File:                     3230312e3135302e34352e302f32342d3234203d3e203238353436.roa (raw, json)
Hash identifier:          GIUDV6eVpdL0jzpG5tljyRTYVs9BwlfizbdHjC08ujk=
Subject key identifier:   01:9D:84:36:D1:B9:D8:AA:D0:66:20:E6:CB:72:32:CC:3E:46:B9:23
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       64CD5DC0885C24741051D9643B071C1B43845615
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34352e302f32342d3234203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:10 +0000
ROA not before:           Sat 26 Sep 2026 00:55:10 +0000
ROA not after:            Sat 25 Sep 2027 01:00:10 +0000
asID:                     28546
IP address blocks:        201.150.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cd:5d:c0:88:5c:24:74:10:51:d9:64:3b:07:1c:1b:43:84:56:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:10 2026 GMT
            Not After : Sep 25 01:00:10 2027 GMT
        Subject: CN=019D8436D1B9D8AAD06620E6CB7232CC3E46B923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:a4:4b:12:57:ee:fc:ee:a4:8a:c4:d0:2e:
                    68:4f:66:6f:d2:88:a0:5f:71:ee:7c:84:b2:04:69:
                    a0:d7:58:6c:1a:23:a4:28:2a:e1:26:d3:88:22:19:
                    94:b3:f0:c2:f5:2e:71:15:5b:d8:0c:b8:41:df:0c:
                    d2:f3:9f:b1:5c:08:e0:31:6d:28:9f:27:19:11:d6:
                    14:c7:e1:34:e8:93:81:06:6c:b9:cc:da:b8:c6:c3:
                    a2:7b:fa:17:74:6b:00:86:3d:5e:69:c5:c1:cd:06:
                    38:0a:17:45:ee:31:85:29:dd:62:07:58:c3:0e:ce:
                    07:01:fb:4d:54:45:76:38:20:a9:0d:3d:ea:4b:b1:
                    58:cb:65:38:88:72:f9:1e:bb:c4:e7:51:c9:9d:f0:
                    11:5d:7a:9c:94:0f:0b:37:e4:4b:f5:22:44:63:e1:
                    4c:b8:70:92:02:12:66:ca:12:2a:a4:e2:a1:b9:4d:
                    39:c4:87:de:91:0c:bc:31:f8:f2:5c:41:41:3d:9b:
                    c9:90:eb:ac:ff:68:0b:03:7a:7a:bd:ba:18:4d:49:
                    c5:0e:67:03:85:f6:ed:d2:d3:ed:89:0d:66:83:4f:
                    25:17:0b:40:da:bc:23:e0:53:d8:2e:4c:20:22:63:
                    00:0e:0b:10:01:16:2d:aa:9d:78:fd:45:68:48:18:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9D:84:36:D1:B9:D8:AA:D0:66:20:E6:CB:72:32:CC:3E:46:B9:23
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/3230312e3135302e34352e302f32342d3234203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:14:1d:42:df:bc:d6:ca:b3:f0:1d:1b:f0:06:d0:a3:3b:85:
         6f:3c:bc:4e:4a:98:fb:83:4a:98:3f:5f:b0:74:1f:d1:c2:af:
         ab:09:ae:e6:9e:0e:af:11:62:49:08:e8:c5:eb:39:12:7c:b7:
         f7:c9:bf:3e:5f:ba:f3:88:65:40:15:db:3f:ef:fc:1f:cf:bf:
         0b:96:72:b1:13:31:56:02:a4:a0:74:a6:89:dd:eb:cc:f8:a9:
         25:69:c8:91:0a:9e:48:49:b0:6e:2e:a9:2e:85:9e:91:4d:b9:
         cd:6c:4e:64:64:ce:4c:fa:dd:04:df:1a:40:f1:43:20:5e:e9:
         6f:37:c4:19:bc:e6:c3:62:2c:e8:af:a5:91:88:9f:d3:e9:3e:
         f2:9a:1a:10:36:24:70:5b:54:98:8a:41:8f:50:c4:e2:9f:f6:
         9d:b6:da:45:ab:33:dd:df:44:81:17:53:78:e1:a5:40:37:d3:
         de:d8:1f:e7:eb:14:32:a7:ae:77:6c:fa:a4:e3:70:6a:f7:ce:
         79:68:30:34:a6:88:d5:71:0f:72:f9:ff:2c:13:19:16:4e:e4:
         2f:3f:a7:a8:e4:fe:50:b7:27:25:82:e4:e0:c8:cd:e5:47:85:
         09:b2:00:e9:ad:e8:94:c8:1f:fd:0c:a7:96:63:25:92:87:4f:
         b4:2c:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:57:49 2026 by rpki-client