Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e342e302f32322d3234203d3e203131313732.roa
File:                     3230312e3133392e342e302f32322d3234203d3e203131313732.roa (raw, json)
Hash identifier:          auaJeE7RO7Vf1k7ud5BqvbSzHtYdKaPyvIqV9pUj20U=
Subject key identifier:   C7:56:7A:40:CE:16:2E:44:B8:AA:94:8B:45:A0:33:CB:C4:3E:26:70
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       1D331516F8838765E16EF267A87841E0D59CAD60
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e342e302f32322d3234203d3e203131313732.roa
Signing time:             Tue 05 May 2026 21:41:23 +0000
ROA not before:           Tue 05 May 2026 21:36:23 +0000
ROA not after:            Tue 04 May 2027 21:41:23 +0000
asID:                     11172
IP address blocks:        201.139.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:33:15:16:f8:83:87:65:e1:6e:f2:67:a8:78:41:e0:d5:9c:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: May  5 21:36:23 2026 GMT
            Not After : May  4 21:41:23 2027 GMT
        Subject: CN=C7567A40CE162E44B8AA948B45A033CBC43E2670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:a4:2d:a4:80:88:d3:5c:77:1d:67:fb:7a:
                    4a:13:e9:1a:ff:cb:8e:3d:c3:5d:fe:52:e6:8c:33:
                    ba:2d:3d:41:a4:1c:4b:fe:3d:d1:a7:c6:d9:6d:96:
                    17:17:52:af:e7:d7:6c:fd:c3:64:2a:a9:16:dc:c9:
                    45:cf:c2:1f:c9:6d:c0:68:c9:0d:84:1e:7e:83:a8:
                    62:24:21:7a:8a:3b:5b:e6:4a:a1:ec:53:dd:8b:85:
                    ee:27:6b:46:b4:81:cc:ba:ea:e6:da:48:b7:27:0a:
                    af:cd:f0:7b:36:5a:06:39:e1:9b:cb:4e:2d:13:e6:
                    ed:7d:21:0e:59:b0:fe:4e:5a:8b:b1:21:c3:7b:bb:
                    a6:40:51:0e:86:43:73:c4:bc:e4:e1:9c:21:07:0c:
                    c6:5d:68:5a:51:f8:c4:01:bd:bf:ef:7d:9d:b8:95:
                    b0:33:d1:2e:79:58:ab:87:50:0f:97:35:21:95:e3:
                    cc:ab:dc:a8:1e:b3:14:11:c6:45:d9:4c:53:4f:fe:
                    6b:7a:9b:d0:48:c7:da:cb:89:11:dc:80:14:ee:68:
                    5e:65:6f:4c:fc:ce:bb:a8:5b:37:f7:d5:cd:55:a7:
                    77:ad:fd:13:3c:17:76:6b:ef:e2:38:ed:f1:1f:80:
                    9b:1d:c8:13:5e:e0:7c:fd:76:34:25:5a:28:89:e9:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:7A:40:CE:16:2E:44:B8:AA:94:8B:45:A0:33:CB:C4:3E:26:70
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e342e302f32322d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:26:17:c8:b3:83:82:04:b8:88:a9:83:0f:d0:cd:0c:b4:
         b6:9d:51:63:3a:6c:aa:af:53:c9:0e:21:98:e4:d6:7f:7e:44:
         3d:1c:52:f0:28:0b:b8:fc:99:95:d2:8b:0f:3a:b8:0a:fe:11:
         80:14:46:64:51:fa:bb:2a:08:bd:5d:db:33:be:71:d8:14:07:
         76:f0:d4:ab:d3:1e:4c:96:d7:bb:f1:0f:4d:e3:7e:b9:5a:13:
         ab:25:1b:d7:ff:94:55:25:2c:13:d7:a6:ac:c9:54:a5:10:a4:
         a7:3e:36:03:36:3a:c6:e9:16:86:f8:8a:72:d9:6b:da:83:e7:
         02:c8:36:47:f0:21:cc:07:58:38:88:13:75:ac:cc:b2:e6:e1:
         d9:06:eb:6c:78:a6:54:77:3b:0f:74:2b:57:7a:58:7f:a3:eb:
         1a:6a:73:12:d6:c4:f0:28:c5:8e:37:85:f2:a4:55:86:8e:2f:
         4c:0a:62:fe:9d:59:14:61:c9:eb:7f:83:16:97:0c:fe:13:04:
         15:ef:7d:41:47:1c:43:9d:c2:30:58:63:1b:ea:a1:c8:f1:e2:
         ab:47:f2:a0:48:e3:e1:ea:f5:90:9f:05:15:69:09:6e:b4:ee:
         0a:10:eb:c1:3b:79:b4:53:8a:51:2e:85:30:5c:4e:9f:e2:b0:
         3c:94:2b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:06:37 2026 by rpki-client