Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa
File:                     3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa (raw, json)
Hash identifier:          F/zhd7mmRjViEVzQV+BVLmYAu1YXMzmwEVeucT1BlKw=
Subject key identifier:   81:80:62:80:43:3A:68:61:18:2E:34:AE:CC:5E:04:B7:04:C8:43:32
Certificate issuer:       /CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Certificate serial:       71F1D7BC1BAB966EA2F2340BFCD34781E24FFC78
Authority key identifier: DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa
Signing time:             Fri 10 Jul 2026 21:30:00 +0000
ROA not before:           Fri 10 Jul 2026 21:25:00 +0000
ROA not after:            Fri 09 Jul 2027 21:30:00 +0000
asID:                     28466
IP address blocks:        189.201.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f1:d7:bc:1b:ab:96:6e:a2:f2:34:0b:fc:d3:47:81:e2:4f:fc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
        Validity
            Not Before: Jul 10 21:25:00 2026 GMT
            Not After : Jul  9 21:30:00 2027 GMT
        Subject: CN=81806280433A6861182E34AECC5E04B704C84332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:4b:52:3c:68:12:b3:66:db:8f:09:0b:8d:
                    94:72:94:03:5d:4a:10:06:e4:3b:fb:3a:17:9d:61:
                    5d:66:aa:88:33:8a:d9:9e:d8:e7:d9:fc:74:3f:0e:
                    d8:57:90:9e:48:b7:02:62:13:4c:46:0f:3d:58:37:
                    7f:21:c0:3f:71:f1:8d:20:d7:39:c5:12:f3:cd:98:
                    b1:ad:30:44:4f:3e:eb:05:c8:9a:81:26:47:4f:09:
                    a9:f9:68:24:f6:63:ae:4e:3d:bc:32:e9:7d:b9:f5:
                    a4:9c:b0:57:02:de:21:1a:88:b1:a7:a2:ff:ab:7c:
                    27:6d:5f:11:55:42:3d:d4:89:1c:48:00:54:01:4d:
                    4a:7f:db:91:91:33:4c:7e:d3:eb:29:90:7b:67:e6:
                    f4:c5:f7:47:97:ee:b6:40:cc:71:d8:50:c3:e7:37:
                    d3:2c:74:e3:aa:69:d7:7a:2f:30:27:64:d1:fa:a2:
                    5c:8a:4f:0a:87:d5:ae:8d:a7:17:0a:d9:be:16:73:
                    3b:87:87:87:21:23:47:e1:61:52:5d:78:64:28:9b:
                    87:90:6d:09:49:3b:9b:69:1c:ee:63:60:a8:73:d9:
                    bb:21:49:12:50:ec:26:51:cb:83:4c:e6:bb:69:c6:
                    9f:90:3c:fd:43:90:67:b6:c6:d0:cd:80:ac:68:00:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:80:62:80:43:3A:68:61:18:2E:34:AE:CC:5E:04:B7:04:C8:43:32
            X509v3 Authority Key Identifier:
                keyid:DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:16:c9:49:cc:fe:13:8f:a9:4b:9b:c6:65:a6:5b:18:ef:e1:
         aa:97:ed:23:20:b1:66:b3:47:6b:b0:6d:27:64:39:54:60:0c:
         fa:a9:3e:71:01:a8:ef:17:2f:6d:15:81:06:15:dd:fb:88:74:
         75:5d:7a:1a:9e:66:57:6a:94:40:04:26:61:ec:7d:73:cf:88:
         02:1a:b4:8b:58:aa:5e:e9:9c:9b:7b:74:58:ed:0b:2d:d5:a0:
         e4:53:4c:4f:5f:34:38:dd:60:14:a4:f3:4a:83:cf:67:bf:1a:
         56:8c:51:fd:f8:6f:a5:4e:6f:cd:b7:52:cc:26:ad:52:e7:7c:
         89:26:29:a1:78:63:e4:fc:96:2f:98:25:d1:19:60:a9:0a:94:
         62:93:03:a3:31:9d:a8:c3:27:d5:6a:51:97:db:f9:08:24:1f:
         b0:94:9f:70:10:f8:a9:bf:b3:c5:9f:9b:1f:2d:69:49:24:86:
         34:4d:df:c1:ac:05:b3:6f:29:1b:2c:53:c2:59:3b:88:f8:dd:
         54:e8:c6:18:2e:19:29:b7:e9:39:5c:d4:e4:65:ef:85:b9:45:
         f0:94:d0:73:a9:e4:98:d0:4d:b7:2e:2f:62:85:b4:aa:a5:33:
         4b:3c:6e:9f:d3:72:d2:38:43:7a:bb:47:ad:d4:59:0e:ad:d7:
         06:5b:6f:b6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcfHXvBurlm6i8jQL/NNHgeJP/HgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3QkY4Q0Y4ODkyNkIxNjkwMzUwQ0ExNDc3QzM0MzFF
N0E2Q0M3RTAeFw0yNjA3MTAyMTI1MDBaFw0yNzA3MDkyMTMwMDBaMDMxMTAvBgNV
BAMTKDgxODA2MjgwNDMzQTY4NjExODJFMzRBRUNDNUUwNEI3MDRDODQzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAUtSPGgSs2bbjwkLjZRylANd
ShAG5Dv7OhedYV1mqogzitme2OfZ/HQ/DthXkJ5ItwJiE0xGDz1YN38hwD9x8Y0g
1znFEvPNmLGtMERPPusFyJqBJkdPCan5aCT2Y65OPbwy6X259aScsFcC3iEaiLGn
ov+rfCdtXxFVQj3UiRxIAFQBTUp/25GRM0x+0+spkHtn5vTF90eX7rZAzHHYUMPn
N9MsdOOqadd6LzAnZNH6olyKTwqH1a6NpxcK2b4WczuHh4chI0fhYVJdeGQom4eQ
bQlJO5tpHO5jYKhz2bshSRJQ7CZRy4NM5rtpxp+QPP1DkGe2xtDNgKxoAA85AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgYBigEM6aGEYLjSuzF4EtwTIQzIwHwYDVR0j
BBgwFoAU33v4z4iSaxaQNQyhR3w0MeemzH4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTI1RDJDNUE3MDEyMTE2MDMyQUE0RUE5MEJBRTY2QUI1
RkNENTAwQTlBMkYxNkUyQUJCQzI4MzEwNDlBMUU5LzAvREY3QkY4Q0Y4ODkyNkIx
NjkwMzUwQ0ExNDc3QzM0MzFFN0E2Q0M3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjdCRjhDRjg4OTI2QjE2OTAz
NTBDQTE0NzdDMzQzMUU3QTZDQzdFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkyNUQyQzVBNzAxMjExNjAzMkFBNEVBOTBCQUU2NkFCNUZDRDUwMEE5
QTJGMTZFMkFCQkMyODMxMDQ5QTFFOS8wLzMxMzgzOTJlMzIzMDMxMmUzMjM1MzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4MzQzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvcn8
MA0GCSqGSIb3DQEBCwUAA4IBAQCSFslJzP4Tj6lLm8ZlplsY7+Gql+0jILFms0dr
sG0nZDlUYAz6qT5xAajvFy9tFYEGFd37iHR1XXoanmZXapRABCZh7H1zz4gCGrSL
WKpe6Zybe3RY7Qst1aDkU0xPXzQ43WAUpPNKg89nvxpWjFH9+G+lTm/Nt1LMJq1S
53yJJimheGPk/JYvmCXRGWCpCpRikwOjMZ2owyfValGX2/kIJB+wlJ9wEPipv7PF
n5sfLWlJJIY0Td/BrAWzbykbLFPCWTuI+N1U6MYYLhkpt+k5XNTkZe+FuUXwlNBz
qeSY0E23Li9ihbSqpTNLPG6f03LSOEN6u0et1FkOrdcGW2+2
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:49 2026 by rpki-client