Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31302e302f32342d3234203d3e203131313732.roa
File:                     3230312e3133392e31302e302f32342d3234203d3e203131313732.roa (raw, json)
Hash identifier:          eL9hjln2C1oE3FsFY9gvN5ZD5DgNUbiYPF6L/Kl68mE=
Subject key identifier:   E3:34:CF:4C:CC:B2:05:F9:92:22:0F:FB:F3:6E:DE:64:40:D5:83:4C
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       5D77F0694EC7C17E26A118E3CFF7FFE4959CA3C6
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31302e302f32342d3234203d3e203131313732.roa
Signing time:             Tue 05 May 2026 21:41:22 +0000
ROA not before:           Tue 05 May 2026 21:36:22 +0000
ROA not after:            Tue 04 May 2027 21:41:22 +0000
asID:                     11172
IP address blocks:        201.139.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:77:f0:69:4e:c7:c1:7e:26:a1:18:e3:cf:f7:ff:e4:95:9c:a3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: May  5 21:36:22 2026 GMT
            Not After : May  4 21:41:22 2027 GMT
        Subject: CN=E334CF4CCCB205F992220FFBF36EDE6440D5834C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:3e:3b:72:63:1b:dc:64:c7:c6:3f:cb:e9:
                    63:b3:86:95:b9:bc:6d:9e:a9:a3:16:6d:5d:c7:7e:
                    35:ba:26:a1:cc:e5:06:fd:4f:a9:2a:80:e4:27:9f:
                    38:4e:47:5b:34:a2:56:8d:1c:57:7b:dc:62:a8:1c:
                    53:a2:3a:1d:d0:30:f5:ff:a2:08:74:ae:9b:96:07:
                    41:58:c7:fb:1d:0a:68:84:fb:21:3c:2d:e4:59:d6:
                    3b:b0:82:79:a5:1d:42:c6:f5:30:92:de:67:79:2d:
                    75:89:ee:e5:ee:eb:86:3e:b7:42:cc:ee:b5:cc:50:
                    45:90:1d:a3:0e:a7:71:0a:98:9b:b5:24:58:d5:dd:
                    57:0d:70:49:e4:83:ec:0e:c1:63:fb:26:07:0d:c5:
                    99:ea:de:79:cb:4c:76:d8:46:f8:cc:76:ba:87:8d:
                    32:7a:eb:dd:0f:8e:6e:ab:fe:b0:d9:66:7d:2f:da:
                    5f:05:84:81:5e:12:73:4e:5c:9c:1e:c9:e8:42:84:
                    7b:d1:fb:a1:4d:4e:63:9a:07:91:f7:e2:ad:d3:32:
                    b6:23:14:8a:35:1a:2b:fc:38:86:ac:c6:ad:ba:e5:
                    94:5c:04:79:a4:f3:2c:e6:cd:56:c8:b8:23:dd:54:
                    dc:e4:81:5e:d4:17:1a:23:7b:9c:3e:2a:1b:ae:a6:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:34:CF:4C:CC:B2:05:F9:92:22:0F:FB:F3:6E:DE:64:40:D5:83:4C
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31302e302f32342d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:e3:70:cd:19:85:68:cf:c9:e3:cc:45:96:34:a9:9a:48:
         3e:4e:34:55:7d:0a:6b:ef:5e:48:7e:35:83:bf:39:e4:a6:10:
         09:ec:c6:ba:2a:8b:64:bc:f2:93:7e:ff:c6:7c:10:8c:e3:44:
         f5:be:61:9a:91:d0:62:71:01:75:63:f1:97:d7:2f:57:4e:1e:
         97:9b:f0:a1:d5:82:f2:3a:0a:e8:8a:a7:ef:a9:0c:ee:fe:c7:
         2a:4f:88:85:51:33:e2:3e:e4:99:7a:3e:88:6c:05:a1:bb:3b:
         27:79:2f:c8:0a:a7:bc:76:c4:5c:2c:0b:1e:f0:34:6d:23:6b:
         4a:9d:77:35:4a:73:1f:3e:64:ab:1b:4e:22:6e:41:c3:32:08:
         ed:06:bc:d2:f6:fb:7c:3d:b0:6e:3e:50:6e:11:b6:dd:17:78:
         6c:43:80:00:87:d7:e1:56:11:6d:cd:bc:13:6a:b2:38:ef:30:
         05:4c:06:dc:c8:74:1d:e2:d2:0f:5a:aa:ab:25:4f:a7:d5:46:
         46:e8:24:c4:3c:2b:05:cd:2e:4f:8f:bf:57:90:b9:08:c0:c0:
         ee:84:3c:46:d5:47:8b:bd:b3:38:8c:88:b5:35:76:e0:6b:88:
         58:51:34:6e:9e:92:b6:68:ea:55:79:24:ff:93:53:35:a2:7c:
         6f:e8:5d:63
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXXfwaU7HwX4moRjjz/f/5JWco8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZEREQwQTk3MEUwQkIxOTNGQzVCOUQ5MDI5Qjc1NDY1
RkIxNzBERDAeFw0yNjA1MDUyMTM2MjJaFw0yNzA1MDQyMTQxMjJaMDMxMTAvBgNV
BAMTKEUzMzRDRjRDQ0NCMjA1Rjk5MjIyMEZGQkYzNkVERTY0NDBENTgzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTj47cmMb3GTHxj/L6WOzhpW5
vG2eqaMWbV3HfjW6JqHM5Qb9T6kqgOQnnzhOR1s0olaNHFd73GKoHFOiOh3QMPX/
ogh0rpuWB0FYx/sdCmiE+yE8LeRZ1juwgnmlHULG9TCS3md5LXWJ7uXu64Y+t0LM
7rXMUEWQHaMOp3EKmJu1JFjV3VcNcEnkg+wOwWP7JgcNxZnq3nnLTHbYRvjMdrqH
jTJ6690Pjm6r/rDZZn0v2l8FhIFeEnNOXJweyehChHvR+6FNTmOaB5H34q3TMrYj
FIo1Giv8OIasxq265ZRcBHmk8yzmzVbIuCPdVNzkgV7UFxoje5w+KhuuptnXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4zTPTMyyBfmSIg/7827eZEDVg0wwHwYDVR0j
BBgwFoAUlt3QqXDguxk/xbnZApt1Rl+xcN0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OEQ4RkI5MTc2MDQxQUI1NzY0OTMzQUY0M0E5RjZFMUM4
QjMxQzNENjlFMEQ0MzQ2N0ExMUNBRDMxRDY2ODY5LzAvOTZEREQwQTk3MEUwQkIx
OTNGQzVCOUQ5MDI5Qjc1NDY1RkIxNzBERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkRERDBBOTcwRTBCQjE5M0ZD
NUI5RDkwMjlCNzU0NjVGQjE3MERELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhEOEZCOTE3NjA0MUFCNTc2NDkzM0FGNDNBOUY2RTFDOEIzMUMzRDY5
RTBENDM0NjdBMTFDQUQzMUQ2Njg2OS8wLzMyMzAzMTJlMzEzMzM5MmUzMTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTMxMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmLCjAN
BgkqhkiG9w0BAQsFAAOCAQEANtDjcM0ZhWjPyePMRZY0qZpIPk40VX0Ka+9eSH41
g7855KYQCezGuiqLZLzyk37/xnwQjONE9b5hmpHQYnEBdWPxl9cvV04el5vwodWC
8joK6Iqn76kM7v7HKk+IhVEz4j7kmXo+iGwFobs7J3kvyAqnvHbEXCwLHvA0bSNr
Sp13NUpzHz5kqxtOIm5BwzII7Qa80vb7fD2wbj5QbhG23Rd4bEOAAIfX4VYRbc28
E2qyOO8wBUwG3Mh0HeLSD1qqqyVPp9VGRugkxDwrBc0uT4+/V5C5CMDA7oQ8RtVH
i72zOIyItTV24GuIWFE0bp6StmjqVXkk/5NTNaJ8b+hdYw==
-----END CERTIFICATE-----
Generated at Wed May 13 17:38:49 2026 by rpki-client