Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32322e302f32332d3234203d3e203131313732.roa
File:                     3230312e3133392e32322e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          e6NdmRXm+f3QCjBa73Cq2SP38Mf/7ZPSKpeuYNOSDJo=
Subject key identifier:   DF:B5:85:6D:54:3E:CB:1C:72:E7:EA:64:DF:2C:91:08:17:B0:3A:64
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       43FCB962BACB456F09BD27E25483EA066DFC55D2
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32322e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 05 May 2026 21:41:24 +0000
ROA not before:           Tue 05 May 2026 21:36:24 +0000
ROA not after:            Tue 04 May 2027 21:41:24 +0000
asID:                     11172
IP address blocks:        201.139.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fc:b9:62:ba:cb:45:6f:09:bd:27:e2:54:83:ea:06:6d:fc:55:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: May  5 21:36:24 2026 GMT
            Not After : May  4 21:41:24 2027 GMT
        Subject: CN=DFB5856D543ECB1C72E7EA64DF2C910817B03A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:35:b5:7c:1b:24:23:35:20:89:9f:d1:8e:
                    79:77:4c:6b:a4:5b:d2:fc:fc:ee:69:26:e1:c9:3a:
                    35:3a:8b:1c:60:3e:14:1f:e6:33:fc:44:4f:bd:ff:
                    51:07:f7:9e:79:ce:42:42:66:72:b7:f1:90:27:c8:
                    2a:2c:ab:77:8c:e7:8a:56:09:e8:1f:fd:c9:53:ed:
                    5b:2c:e6:e5:b4:e2:58:bb:47:71:87:70:fb:d2:4b:
                    43:a4:a6:57:91:fc:e7:e0:37:ca:4e:16:bd:84:26:
                    40:ae:bf:bc:ff:0a:31:c5:c1:24:28:25:8b:08:f1:
                    9e:92:0c:36:15:cc:0e:88:c4:51:16:a4:11:ee:b5:
                    6b:09:8f:ad:46:a1:26:cc:34:4f:62:2a:8a:4c:86:
                    05:80:f3:fa:77:71:b8:03:50:ab:0d:9a:f7:98:ca:
                    8f:1b:ef:2c:a0:6f:ce:01:27:5b:66:ff:69:4d:bf:
                    35:ca:0f:e0:2e:f1:23:b6:5c:9f:1b:ae:0b:21:f1:
                    4c:f5:04:55:70:42:ab:40:77:ba:a7:92:bf:07:c5:
                    1b:8b:d5:ee:b5:cd:af:2d:36:9f:95:6b:75:eb:96:
                    18:ed:6f:fe:20:40:c2:5f:3c:8c:ea:b4:e9:32:ae:
                    2b:dc:84:18:b2:db:8a:ac:d6:2a:a5:d0:8e:e2:b3:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B5:85:6D:54:3E:CB:1C:72:E7:EA:64:DF:2C:91:08:17:B0:3A:64
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32322e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:b0:7a:90:ba:06:f7:f3:f2:24:e1:d8:7a:38:ca:a2:69:
         b3:68:e1:dc:a2:b2:09:ed:6f:bf:dd:45:4c:a1:d9:b3:a7:ca:
         c4:05:bd:98:be:f1:2a:11:bc:48:f6:d6:4f:1b:9f:80:cb:8c:
         81:f8:8f:91:45:2c:f5:0b:95:42:f9:a1:e1:c3:ef:3f:52:87:
         a3:dc:de:53:e6:f8:88:67:c1:e7:be:69:13:cf:ba:d8:b5:ed:
         c6:ba:00:d9:37:35:c2:d5:87:7c:d1:a2:fd:a8:ba:3c:37:a1:
         48:02:b8:8f:4e:45:7e:02:2c:be:47:41:51:4a:a1:2e:ed:ea:
         e1:71:c1:27:9e:9f:35:14:62:80:0c:de:cf:79:16:fc:2b:e8:
         bb:ca:4b:85:14:f1:f1:56:ed:33:2a:53:13:a9:79:7d:d3:78:
         74:a2:d7:fb:84:35:6b:37:84:90:50:34:93:c7:cf:2f:69:2c:
         93:aa:08:0f:19:1b:6b:37:e9:d8:86:77:3f:d0:96:a5:07:f6:
         4e:87:e6:8f:49:c8:e4:a2:34:1c:fb:76:38:c9:60:8c:55:64:
         a7:05:39:e3:82:9c:59:b2:ce:e8:16:06:16:40:6d:99:12:9e:
         33:69:2e:a5:6c:f8:5d:d2:cb:b2:cd:e8:04:70:54:ba:80:49:
         04:ec:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:07:21 2026 by rpki-client