Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32382e302f32322d3234203d3e203131313732.roa
File:                     3230312e3133392e32382e302f32322d3234203d3e203131313732.roa (raw, json)
Hash identifier:          nExbMdzA52zLo8i/VkJHVdaFCn3Kzgpo0TuYb3amiVw=
Subject key identifier:   69:E7:B5:85:04:85:22:B2:88:9D:E9:49:4C:E3:6A:82:94:F9:98:D8
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       14A62E02D4A96764CD946440BE10F1D316280F94
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32382e302f32322d3234203d3e203131313732.roa
Signing time:             Tue 05 May 2026 21:41:23 +0000
ROA not before:           Tue 05 May 2026 21:36:23 +0000
ROA not after:            Tue 04 May 2027 21:41:23 +0000
asID:                     11172
IP address blocks:        201.139.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a6:2e:02:d4:a9:67:64:cd:94:64:40:be:10:f1:d3:16:28:0f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: May  5 21:36:23 2026 GMT
            Not After : May  4 21:41:23 2027 GMT
        Subject: CN=69E7B585048522B2889DE9494CE36A8294F998D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:0a:bd:a3:7c:84:61:c1:f1:6e:61:3f:ae:
                    8f:4d:24:62:fb:27:cf:7a:b0:fc:bf:cb:5b:bd:6e:
                    33:bd:6a:3e:d1:69:c0:3d:d9:84:eb:e2:9b:06:7d:
                    5b:0b:17:9b:6c:04:e7:4d:91:39:e8:b3:c5:fa:5a:
                    40:51:5f:cf:2c:12:d1:69:04:41:7a:6d:e3:f5:b5:
                    31:8c:29:0c:40:53:5e:65:74:64:21:ec:2c:31:bc:
                    c4:73:a8:da:13:08:d1:22:ec:15:71:df:c7:7b:21:
                    db:dc:60:d3:03:7f:51:d1:80:71:4d:05:20:41:8a:
                    bf:7c:90:bf:3a:cd:b7:6d:ce:a9:d2:a8:42:2c:4a:
                    2d:ad:4c:e3:1a:e9:cb:c2:af:6b:3c:bf:46:b9:b8:
                    08:1f:cf:ec:9a:3e:b4:ae:fc:ef:f2:e6:01:00:b2:
                    5c:0b:02:d4:27:e2:01:5f:46:41:9b:13:f0:69:cc:
                    80:7b:4e:95:d1:71:05:cc:17:b5:b3:7b:b2:fd:7d:
                    22:20:34:32:e7:cb:6a:67:05:fc:9b:3b:da:65:a2:
                    1a:37:59:66:82:7c:40:35:af:70:af:48:5d:81:cb:
                    bf:aa:02:eb:94:3a:ee:04:d2:58:58:a5:34:33:77:
                    0f:bf:f7:56:01:1b:57:32:70:a9:bc:18:ab:69:7a:
                    e7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:B5:85:04:85:22:B2:88:9D:E9:49:4C:E3:6A:82:94:F9:98:D8
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32382e302f32322d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:ce:b9:a3:d1:83:fd:a3:df:bd:b8:ab:8f:f6:08:74:d7:
         49:5a:05:23:46:cb:4d:62:2f:36:4d:83:1c:9b:db:8b:f1:7b:
         4e:9d:15:a8:17:f3:e2:28:a3:02:3c:26:80:bc:97:f9:9b:04:
         7d:77:5a:b1:56:e2:02:b4:2c:49:53:73:6c:40:f1:72:b0:49:
         4b:9e:da:1e:0d:3d:e9:89:36:b8:b4:fd:db:0b:91:35:b9:db:
         40:13:da:c0:14:18:39:5e:4e:7a:58:85:d9:ac:fb:12:65:66:
         eb:9d:7c:01:4d:ea:d3:de:07:c1:c9:66:11:7e:a4:42:82:e7:
         98:d7:e6:d8:d5:f6:68:a9:98:ea:d5:82:5a:b2:6e:51:53:5a:
         5d:35:1c:1b:31:bc:bc:d2:a5:42:c4:70:87:6a:30:d0:aa:af:
         9a:c2:41:5a:7c:57:ef:34:61:2f:39:c6:e4:c7:93:fb:b3:7b:
         e0:b9:04:e6:c1:01:30:40:91:cc:33:c3:83:a5:43:9d:34:3f:
         bf:89:cd:65:63:68:11:10:d4:c8:08:ca:84:1e:3f:dd:0c:90:
         4e:42:32:99:fd:71:25:a5:a9:88:61:0d:47:74:c4:50:3f:0a:
         5c:4e:c3:10:70:3f:96:01:8d:12:21:a7:10:94:fb:a8:41:95:
         d7:28:f9:ed
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFKYuAtSpZ2TNlGRAvhDx0xYoD5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZEREQwQTk3MEUwQkIxOTNGQzVCOUQ5MDI5Qjc1NDY1
RkIxNzBERDAeFw0yNjA1MDUyMTM2MjNaFw0yNzA1MDQyMTQxMjNaMDMxMTAvBgNV
BAMTKDY5RTdCNTg1MDQ4NTIyQjI4ODlERTk0OTRDRTM2QTgyOTRGOTk4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ygq9o3yEYcHxbmE/ro9NJGL7
J896sPy/y1u9bjO9aj7RacA92YTr4psGfVsLF5tsBOdNkTnos8X6WkBRX88sEtFp
BEF6beP1tTGMKQxAU15ldGQh7CwxvMRzqNoTCNEi7BVx38d7IdvcYNMDf1HRgHFN
BSBBir98kL86zbdtzqnSqEIsSi2tTOMa6cvCr2s8v0a5uAgfz+yaPrSu/O/y5gEA
slwLAtQn4gFfRkGbE/BpzIB7TpXRcQXMF7Wze7L9fSIgNDLny2pnBfybO9ploho3
WWaCfEA1r3CvSF2By7+qAuuUOu4E0lhYpTQzdw+/91YBG1cycKm8GKtpeuebAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaee1hQSFIrKInelJTONqgpT5mNgwHwYDVR0j
BBgwFoAUlt3QqXDguxk/xbnZApt1Rl+xcN0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OEQ4RkI5MTc2MDQxQUI1NzY0OTMzQUY0M0E5RjZFMUM4
QjMxQzNENjlFMEQ0MzQ2N0ExMUNBRDMxRDY2ODY5LzAvOTZEREQwQTk3MEUwQkIx
OTNGQzVCOUQ5MDI5Qjc1NDY1RkIxNzBERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkRERDBBOTcwRTBCQjE5M0ZD
NUI5RDkwMjlCNzU0NjVGQjE3MERELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhEOEZCOTE3NjA0MUFCNTc2NDkzM0FGNDNBOUY2RTFDOEIzMUMzRDY5
RTBENDM0NjdBMTFDQUQzMUQ2Njg2OS8wLzMyMzAzMTJlMzEzMzM5MmUzMjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMTMxMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmLHDAN
BgkqhkiG9w0BAQsFAAOCAQEAZ+zOuaPRg/2j3724q4/2CHTXSVoFI0bLTWIvNk2D
HJvbi/F7Tp0VqBfz4iijAjwmgLyX+ZsEfXdasVbiArQsSVNzbEDxcrBJS57aHg09
6Yk2uLT92wuRNbnbQBPawBQYOV5OeliF2az7EmVm6518AU3q094HwclmEX6kQoLn
mNfm2NX2aKmY6tWCWrJuUVNaXTUcGzG8vNKlQsRwh2ow0KqvmsJBWnxX7zRhLznG
5MeT+7N74LkE5sEBMECRzDPDg6VDnTQ/v4nNZWNoERDUyAjKhB4/3QyQTkIymf1x
JaWpiGENR3TEUD8KXE7DEHA/lgGNEiGnEJT7qEGV1yj57Q==
-----END CERTIFICATE-----
Generated at Wed May 13 17:06:52 2026 by rpki-client