Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e39322e302f32322d3232203d3e203339383535.roa
File:                     3230312e3134392e39322e302f32322d3232203d3e203339383535.roa (raw, json)
Hash identifier:          ZuAdynlkqePKQf6q1lnMmwjx0EiEBQ6a+AJrZqtIiSI=
Subject key identifier:   48:CA:83:E6:AD:5A:21:1C:5A:F3:D2:2E:38:73:A6:29:A5:72:2A:03
Certificate issuer:       /CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
Certificate serial:       4832F296D65AD6F0D29BCD33F3643713204CAEB9
Authority key identifier: 7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e39322e302f32322d3232203d3e203339383535.roa
Signing time:             Thu 24 Sep 2026 07:20:00 +0000
ROA not before:           Thu 24 Sep 2026 07:15:00 +0000
ROA not after:            Thu 23 Sep 2027 07:20:00 +0000
asID:                     39855
IP address blocks:        201.149.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:32:f2:96:d6:5a:d6:f0:d2:9b:cd:33:f3:64:37:13:20:4c:ae:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
        Validity
            Not Before: Sep 24 07:15:00 2026 GMT
            Not After : Sep 23 07:20:00 2027 GMT
        Subject: CN=48CA83E6AD5A211C5AF3D22E3873A629A5722A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:8c:96:13:c5:c9:91:84:2f:5a:50:0b:00:
                    72:8f:04:c5:89:5a:51:1e:9c:e8:81:79:d5:d2:6e:
                    c3:e5:44:43:44:4d:aa:1e:d7:96:fe:31:37:ba:b9:
                    51:0f:f0:8e:06:d5:eb:64:7f:23:b7:2e:36:82:47:
                    8f:da:10:36:41:88:42:86:37:81:f8:14:8a:38:9c:
                    e6:e8:2a:06:0b:98:a6:98:0f:12:b8:cc:15:db:ce:
                    79:a7:d6:db:5e:cb:e9:c8:ba:2a:5c:b7:69:7e:a6:
                    b7:5c:de:83:b6:82:0f:69:2d:5c:90:ba:c3:ed:61:
                    d6:17:7f:6e:a7:04:0a:3e:37:f5:3b:e2:95:0d:bc:
                    a7:52:01:82:ad:4a:a0:65:5a:42:5b:8d:5c:57:6f:
                    de:fa:2f:9d:c7:c4:ab:1b:f5:38:bf:d2:0c:83:06:
                    c3:56:c9:8a:79:c7:8b:41:b5:dc:19:b0:85:58:18:
                    f9:5d:59:6b:63:e0:2c:03:d1:d0:d6:0a:cf:a7:96:
                    df:45:72:85:e6:7e:0e:f1:0c:8b:97:16:ee:6f:dc:
                    e5:5b:8c:5a:f6:9d:47:2c:19:92:bd:a0:84:88:30:
                    6e:7e:20:2e:83:1e:fe:56:54:c4:b0:8c:59:31:cf:
                    ff:b3:17:be:71:40:41:01:f0:c3:c7:c9:2b:a9:de:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CA:83:E6:AD:5A:21:1C:5A:F3:D2:2E:38:73:A6:29:A5:72:2A:03
            X509v3 Authority Key Identifier:
                keyid:7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3230312e3134392e39322e302f32322d3232203d3e203339383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:16:b6:ae:cd:02:02:85:74:ce:cf:e1:9a:89:a0:8f:c4:2f:
         67:5e:a9:71:2e:8b:f8:40:50:fc:41:bd:50:68:ae:d7:1d:4b:
         56:48:4a:e1:81:87:c9:24:c6:0e:04:ba:f8:7e:09:b1:54:00:
         89:01:24:f9:d1:b1:9d:51:c4:9d:f1:b5:ed:4d:31:0b:6f:d2:
         5a:e4:c1:f2:d2:49:f0:5e:31:f7:fc:a6:96:82:ee:48:fb:00:
         57:47:6e:05:95:f5:54:ee:13:ad:75:76:31:2e:86:5d:1e:15:
         1a:84:aa:31:fd:af:5c:11:c6:2a:82:0f:69:ff:f2:66:a2:72:
         16:de:a1:33:c7:6f:a5:dd:83:60:7b:a0:be:39:af:ac:cd:d0:
         77:b1:a9:37:bf:05:43:e3:f3:ed:f9:e1:d7:73:ac:a4:e1:99:
         4a:34:d8:e2:77:6d:11:2c:47:f9:57:ab:0d:78:ab:a4:02:9b:
         18:57:2e:23:30:eb:4d:25:73:6b:28:7c:f8:50:92:19:b9:6e:
         60:75:63:a9:4a:3e:60:7f:fc:72:46:e9:95:df:5f:97:30:c9:
         20:11:69:c0:76:28:96:a9:2e:b5:7b:e2:93:25:10:7b:78:99:
         6f:43:ae:73:72:d6:a2:54:a0:06:2f:06:d7:cc:1c:f9:e9:13:
         28:96:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:44:47 2026 by rpki-client