Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e3131322e302f32312d3234203d3e2035363339.roa
File:                     3230312e3233382e3131322e302f32312d3234203d3e2035363339.roa (raw, json)
Hash identifier:          Z8KpST6RWkcu+6Tjj9hBdZhiJCnFH+PMt5XOYIJLM6A=
Subject key identifier:   15:04:0B:AC:7D:0C:D6:7E:E0:57:F0:44:24:EC:50:01:4E:E6:6D:54
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       1D21388755F5789206E68D8EA337B02045C4025B
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e3131322e302f32312d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:02 +0000
ROA not before:           Fri 10 Jul 2026 02:25:02 +0000
ROA not after:            Fri 09 Jul 2027 02:30:02 +0000
asID:                     5639
IP address blocks:        201.238.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:21:38:87:55:f5:78:92:06:e6:8d:8e:a3:37:b0:20:45:c4:02:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:02 2026 GMT
            Not After : Jul  9 02:30:02 2027 GMT
        Subject: CN=15040BAC7D0CD67EE057F04424EC50014EE66D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:ec:2e:6c:dd:03:f4:35:9c:f9:01:41:f8:
                    92:42:5d:a5:e8:aa:c3:db:8f:ce:a2:50:6f:65:95:
                    a0:f8:5a:46:71:40:e2:9a:a8:15:08:73:3e:fc:d6:
                    35:d1:db:42:fc:b3:a6:00:91:f4:7c:f8:69:98:ad:
                    2e:ac:26:d8:d0:51:87:ea:64:a2:90:31:36:d0:2a:
                    ab:42:a9:5e:57:4f:7b:74:a7:58:c5:fc:e6:45:fd:
                    3d:56:7b:ee:88:e6:ed:ba:3b:60:38:39:42:69:19:
                    34:27:92:9f:ff:bb:ff:2d:46:1f:18:90:50:4c:89:
                    e6:49:00:a2:e3:eb:1a:bd:f8:a4:a2:df:aa:41:5f:
                    b5:eb:23:20:af:66:c9:d8:66:27:64:ac:d8:93:ce:
                    9d:48:db:f6:74:5d:55:bc:dd:ce:b8:c1:9a:da:da:
                    d2:89:e0:75:ac:2a:1d:2e:b5:54:17:e1:cb:b0:0b:
                    25:3f:6e:ba:f8:7d:7a:39:bc:2f:c2:4c:fc:ad:c1:
                    87:50:f1:9a:99:42:30:06:92:01:7e:32:fb:3c:95:
                    33:ae:8a:dd:5b:2a:49:d6:d3:ec:9c:0a:95:aa:b7:
                    0f:46:b9:04:41:26:82:f3:39:e6:8a:f5:e9:d1:5d:
                    7e:c9:6a:86:ac:17:ca:40:b3:7b:73:ac:30:ac:e6:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:0B:AC:7D:0C:D6:7E:E0:57:F0:44:24:EC:50:01:4E:E6:6D:54
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e3131322e302f32312d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:99:47:5d:7f:44:db:c8:82:f0:90:d7:c0:bd:68:e4:d9:
         13:49:1f:a5:8d:77:98:a5:04:a2:7c:95:7d:4c:85:02:e3:d7:
         91:50:40:e8:59:92:a8:c8:81:ce:b7:68:62:35:54:65:9c:aa:
         c6:7b:cc:91:ea:5b:93:39:31:d6:17:f1:c6:fa:d0:2b:09:e5:
         b7:23:f1:b6:b7:da:eb:5c:78:ce:67:b1:54:19:d4:c5:24:86:
         06:00:6e:ac:b8:4a:9e:d4:2c:84:27:5d:86:90:61:21:16:ff:
         24:89:f3:1b:d8:25:e9:1e:8e:a6:19:ea:60:19:7e:99:e8:30:
         89:1d:79:19:1c:38:1a:bf:3c:fd:0d:00:29:c9:46:79:fa:b6:
         c0:d3:ee:23:63:b6:70:83:56:6d:cb:94:6c:a4:4e:47:30:e0:
         70:84:e0:06:ed:9b:e5:f5:e5:04:a5:ac:e5:6a:57:97:f2:3b:
         f2:f1:bb:d9:68:c0:b6:20:62:ca:51:e2:e8:d6:88:31:a4:f2:
         45:1b:72:08:4a:55:db:5f:9d:b2:04:9c:ab:0e:3e:89:3e:10:
         67:9a:d4:a0:ad:64:fb:38:d2:21:48:e3:db:29:a1:6c:02:68:
         f0:f3:5c:b1:8d:b5:d3:d3:eb:c2:db:4e:68:21:d3:41:f2:29:
         71:ab:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:52 2026 by rpki-client