Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3134322e36302e302f32342d3234203d3e203131313732.roa
File:                     3230312e3134322e36302e302f32342d3234203d3e203131313732.roa (raw, json)
Hash identifier:          VJrYAVXvyyJpscYXHpYF94T9I793pv/DE3khvhdN/DY=
Subject key identifier:   56:FC:44:46:A8:CA:C3:1B:F6:A9:27:FA:19:72:A3:14:A0:65:81:BE
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       05E2FBF309B5BAD9691286A114FE08F614B90F08
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3134322e36302e302f32342d3234203d3e203131313732.roa
Signing time:             Tue 05 May 2026 21:41:22 +0000
ROA not before:           Tue 05 May 2026 21:36:22 +0000
ROA not after:            Tue 04 May 2027 21:41:22 +0000
asID:                     11172
IP address blocks:        201.142.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e2:fb:f3:09:b5:ba:d9:69:12:86:a1:14:fe:08:f6:14:b9:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: May  5 21:36:22 2026 GMT
            Not After : May  4 21:41:22 2027 GMT
        Subject: CN=56FC4446A8CAC31BF6A927FA1972A314A06581BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:19:36:ed:9f:82:6b:e6:25:1a:f7:1f:3e:
                    a5:15:86:ce:59:5a:48:ec:f8:42:e5:0d:19:db:b3:
                    2a:b1:89:d0:a2:f2:0d:64:11:77:f9:bf:18:5b:75:
                    af:60:fb:41:86:d9:e1:e4:f4:35:2b:4c:82:fc:44:
                    19:a1:49:d9:73:fa:87:18:b1:0d:90:5b:9d:87:60:
                    b6:61:57:5b:e8:83:f1:e3:8f:96:f2:5d:2e:81:82:
                    a4:19:8b:36:91:87:08:ca:f4:45:98:97:e1:2f:42:
                    50:d6:bc:47:1c:7f:da:58:b8:d9:0c:0d:bd:91:1f:
                    8b:71:36:e3:ed:f7:1b:2d:d1:cf:fa:14:3b:99:8b:
                    dc:c3:8a:c7:9d:dc:ad:a9:f2:4a:59:fc:ed:e4:28:
                    5e:12:4b:f6:99:79:0d:3a:cc:98:46:ee:01:7f:94:
                    66:2d:c2:3c:46:51:c4:4b:3b:97:46:86:9d:e0:e8:
                    eb:f8:b6:f4:41:ca:35:18:92:55:92:f1:dc:43:5e:
                    ff:e2:90:65:e8:32:bb:26:6e:b3:9b:d6:49:0a:1d:
                    20:94:53:4d:96:49:14:ab:be:95:91:a8:cc:d1:27:
                    48:34:b3:9d:b5:f8:74:54:4b:56:5c:22:c0:20:6a:
                    a4:9e:cf:df:e9:8e:fa:07:20:d9:b5:10:8d:67:3e:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:44:46:A8:CA:C3:1B:F6:A9:27:FA:19:72:A3:14:A0:65:81:BE
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3134322e36302e302f32342d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.142.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:38:36:c2:68:e8:9d:be:c2:a9:f7:07:2b:39:8f:31:f0:4e:
         12:b0:27:4e:f1:4f:5f:8e:b5:9a:ec:41:5a:7f:f6:fa:df:4c:
         4f:6d:07:94:aa:63:4d:c7:47:e8:f8:b7:11:37:96:b0:c4:1b:
         f8:b5:70:4d:c2:40:d4:e6:81:02:ed:cb:eb:3c:83:68:7d:93:
         d9:a9:25:58:af:ce:e7:93:2c:13:04:16:89:f2:cc:4d:cc:39:
         9c:4c:65:a0:a8:e3:f8:9c:20:73:29:be:c5:64:d9:5c:de:9f:
         26:f7:f3:17:20:e9:40:3a:b1:ac:1e:ff:78:43:5b:30:69:04:
         f5:bf:7e:68:cb:db:d7:8c:87:75:5e:e7:b8:e3:5d:22:42:43:
         96:2b:da:b8:51:13:92:aa:0b:32:47:b9:45:d4:95:66:c6:d6:
         35:3d:f9:7a:b6:85:c1:f2:c4:d3:ec:0b:56:9b:87:75:e6:c7:
         f1:ff:e5:c7:7a:03:5e:c1:3d:07:24:94:c6:23:d9:74:04:20:
         38:fa:29:3a:8c:75:ff:07:d7:04:b5:cb:d9:dc:99:30:29:00:
         c5:2f:ae:59:61:e6:f5:b5:18:f2:4b:3e:3f:e4:c1:90:e6:fa:
         0d:31:d7:e0:07:53:5d:6a:f0:c3:55:ba:58:db:05:aa:56:ad:
         57:ae:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:55 2026 by rpki-client