Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31362e302f32322d3234203d3e203131313732.roa
File:                     3230312e3133392e31362e302f32322d3234203d3e203131313732.roa (raw, json)
Hash identifier:          3dXrRAbRnMk9pmgVNF4jNPbMC6q4oSGaZ9u/rESJke8=
Subject key identifier:   BE:29:69:27:61:B9:89:6D:4E:8B:A7:39:15:04:F5:AC:E6:3D:D5:C3
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       4880958F052AE29245BE7BF04B409F006E87F09B
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31362e302f32322d3234203d3e203131313732.roa
Signing time:             Tue 05 May 2026 21:41:24 +0000
ROA not before:           Tue 05 May 2026 21:36:24 +0000
ROA not after:            Tue 04 May 2027 21:41:24 +0000
asID:                     11172
IP address blocks:        201.139.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:95:8f:05:2a:e2:92:45:be:7b:f0:4b:40:9f:00:6e:87:f0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: May  5 21:36:24 2026 GMT
            Not After : May  4 21:41:24 2027 GMT
        Subject: CN=BE29692761B9896D4E8BA7391504F5ACE63DD5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:10:73:03:e5:e5:bc:1d:cb:b9:b0:38:95:f2:
                    c2:49:88:a3:43:cf:cd:9f:6c:a6:9f:62:33:99:94:
                    32:9b:aa:d4:b8:b4:57:27:11:29:9c:85:f6:96:f3:
                    d9:20:4f:d8:7e:ca:60:b3:d4:ce:c3:c9:8f:71:18:
                    2f:63:16:3a:28:e0:ae:72:d5:a2:a9:13:1c:73:a4:
                    b4:5e:a9:df:49:ec:93:af:62:4f:ac:20:f0:16:3b:
                    0e:4c:d7:04:74:01:9a:a1:fb:45:7b:31:13:0e:0b:
                    d3:58:b8:19:94:dd:5e:f9:a3:0a:1e:e5:a1:ef:99:
                    6d:42:ed:48:29:96:98:5f:25:81:76:35:13:6e:7f:
                    7b:b1:f7:16:5b:34:32:72:24:a2:83:e5:39:49:11:
                    16:3c:43:d7:8c:e4:0d:61:fb:92:56:c3:71:33:ad:
                    28:3e:4d:fd:db:6e:3a:04:26:d5:1b:91:4a:63:7f:
                    32:dd:33:d9:2f:3c:e0:ab:70:2a:c5:26:7e:11:fa:
                    31:e4:34:5a:4c:11:77:bd:2f:78:d6:4b:1b:c1:16:
                    88:de:f3:ab:bd:06:1f:a2:4e:d9:6d:4b:f7:7a:55:
                    c1:c8:e5:61:87:79:6d:4d:bc:9c:7e:64:07:60:5d:
                    4d:5c:63:de:ab:f3:35:23:af:61:eb:05:78:69:25:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:29:69:27:61:B9:89:6D:4E:8B:A7:39:15:04:F5:AC:E6:3D:D5:C3
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e31362e302f32322d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:60:1f:ec:07:13:3d:a4:22:30:cc:9d:9a:75:b7:bf:94:0c:
         ae:5e:1c:51:8f:b5:d5:04:f6:5d:71:80:13:20:35:23:fe:07:
         a5:30:37:32:ab:2b:e3:5e:75:40:14:60:63:a5:d8:b3:78:5b:
         8b:9e:8a:71:9f:2f:4b:cb:09:08:69:f1:81:f2:86:85:48:d5:
         0c:d8:85:c1:0a:77:ac:04:68:68:11:5c:33:c2:88:ba:ea:45:
         68:9b:e2:00:41:0a:7b:db:f8:b0:04:df:09:e8:ba:cf:e8:6f:
         be:b4:17:ed:e3:79:ea:a3:87:9b:d3:e2:ea:a1:ce:65:cc:4f:
         e2:50:91:10:a2:9b:b2:ed:48:d3:c7:89:94:22:1f:1f:3f:cd:
         f7:32:0d:9f:36:bc:91:e4:81:2a:28:90:4c:5a:01:6a:56:fe:
         67:2c:ca:47:6b:f1:65:54:12:7e:48:0c:1d:aa:1c:9f:30:9b:
         9e:fb:a7:a8:c9:ab:bf:d4:53:81:fc:b5:6e:a4:8d:87:ca:c5:
         d2:b5:49:64:17:66:1f:d4:a5:ec:9a:5c:ff:a9:5c:cb:d9:56:
         25:91:8c:9b:d3:13:4f:b6:ba:c0:f7:1f:fb:90:15:dc:dd:8f:
         29:4b:93:0e:da:b4:5e:f9:8c:a0:ed:0b:c8:32:4d:3e:e7:98:
         e3:e4:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:44:55 2026 by rpki-client