Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e3132302e302f32322d3234203d3e2035363339.roa
File:                     3230312e3233382e3132302e302f32322d3234203d3e2035363339.roa (raw, json)
Hash identifier:          kBXHN6l3YO6hCY0cRSfNtAUAH/CeipZyN+wCe1SBHvY=
Subject key identifier:   EB:2B:C3:BB:3E:C5:C2:B5:BA:50:A3:70:29:91:21:26:C6:B5:8D:6A
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       0D25FA971D37357F6D20DBDC665DCC45CE57111E
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e3132302e302f32322d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:02 +0000
ROA not before:           Fri 10 Jul 2026 02:25:02 +0000
ROA not after:            Fri 09 Jul 2027 02:30:02 +0000
asID:                     5639
IP address blocks:        201.238.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:fa:97:1d:37:35:7f:6d:20:db:dc:66:5d:cc:45:ce:57:11:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:02 2026 GMT
            Not After : Jul  9 02:30:02 2027 GMT
        Subject: CN=EB2BC3BB3EC5C2B5BA50A37029912126C6B58D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:95:0b:d0:16:ea:0a:e9:98:ca:9f:7c:34:
                    51:67:ea:53:61:fe:58:5a:ee:04:80:38:3b:5e:b9:
                    22:72:47:14:61:6f:51:70:89:aa:b5:65:1a:b3:b1:
                    92:c6:03:88:3c:cb:54:09:aa:97:00:b4:9e:90:50:
                    e3:d6:dc:0d:93:a5:e6:d0:b2:0c:57:07:0f:23:eb:
                    46:47:70:62:88:d0:0c:66:27:2e:e3:91:93:8f:06:
                    65:a3:4f:9e:94:c7:e7:1a:04:17:0c:b8:e0:17:2f:
                    43:95:90:27:85:f3:c2:95:8f:99:b6:30:cd:55:39:
                    d0:82:2b:c8:15:8c:34:f8:5f:65:32:29:e1:51:98:
                    76:9f:56:e0:9c:45:fd:4f:d0:e5:35:db:02:cf:bd:
                    b6:56:0b:86:68:27:8a:ee:0a:cb:c2:92:40:b9:3d:
                    71:f1:53:1e:ba:55:35:0c:4b:ef:6d:c3:72:54:0d:
                    82:e2:ad:59:be:d7:8d:4e:11:99:5c:fd:b9:18:5a:
                    c0:77:0e:c9:72:ab:64:b1:cc:4a:6c:0b:39:b4:79:
                    1e:90:16:01:45:70:cf:f1:01:e2:11:31:36:d9:72:
                    32:f5:1c:cc:0a:87:1f:19:d8:32:19:c2:2d:31:7e:
                    ea:d3:b2:29:e4:eb:78:f8:56:cf:04:19:9a:18:d9:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2B:C3:BB:3E:C5:C2:B5:BA:50:A3:70:29:91:21:26:C6:B5:8D:6A
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e3132302e302f32322d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:55:2e:0b:3e:73:b8:eb:0e:6a:7c:fe:38:2c:71:f8:b4:ab:
         9c:46:03:fd:b4:e2:9a:ce:9e:d3:c0:cf:45:5d:a7:4d:67:6e:
         b5:33:8b:9e:06:1d:70:c8:1d:1c:ae:bd:57:53:51:2c:ac:78:
         0f:d0:40:ad:98:32:61:0d:0b:20:81:35:e7:83:a9:5a:78:64:
         bb:68:d1:ae:a5:2f:9f:37:cc:f9:7a:d0:e2:97:6d:29:cc:91:
         15:c0:c5:90:98:ad:52:e6:cf:1e:a8:e1:da:70:17:7b:ab:58:
         d3:33:0c:b8:fb:bc:2d:06:ba:e7:fd:6e:dd:61:ed:47:7b:76:
         7c:d8:4a:9e:fc:34:b0:de:c1:2e:6c:51:ec:31:90:5f:0c:59:
         ac:56:67:f5:14:bf:f9:7b:07:52:45:07:a4:1a:99:00:9c:c9:
         82:9b:15:29:52:40:7d:59:d9:2d:25:02:b3:ab:32:9a:8e:d6:
         ae:97:98:92:56:11:05:e0:3b:5b:bd:9e:7e:15:e6:22:5e:e7:
         d8:80:4b:c3:2a:da:e7:a8:7c:b0:c5:7d:e3:9b:ff:e4:99:94:
         af:cb:61:a1:44:27:f6:5d:ce:ce:55:db:19:da:ee:fe:13:7a:
         ff:42:21:aa:2e:e1:06:a4:d5:60:6b:e1:5d:01:2e:c4:51:44:
         5a:aa:1a:74
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDSX6lx03NX9tINvcZl3MRc5XER4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM2NTc5MTY0MkQ3NzYxQUE5N0JBMEZGMUEyOURCMzE2
QTI3OUIzNzAeFw0yNjA3MTAwMjI1MDJaFw0yNzA3MDkwMjMwMDJaMDMxMTAvBgNV
BAMTKEVCMkJDM0JCM0VDNUMyQjVCQTUwQTM3MDI5OTEyMTI2QzZCNThENkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8X5UL0BbqCumYyp98NFFn6lNh
/lha7gSAODteuSJyRxRhb1Fwiaq1ZRqzsZLGA4g8y1QJqpcAtJ6QUOPW3A2TpebQ
sgxXBw8j60ZHcGKI0AxmJy7jkZOPBmWjT56Ux+caBBcMuOAXL0OVkCeF88KVj5m2
MM1VOdCCK8gVjDT4X2UyKeFRmHafVuCcRf1P0OU12wLPvbZWC4ZoJ4ruCsvCkkC5
PXHxUx66VTUMS+9tw3JUDYLirVm+141OEZlc/bkYWsB3Dslyq2SxzEpsCzm0eR6Q
FgFFcM/xAeIRMTbZcjL1HMwKhx8Z2DIZwi0xfurTsink63j4Vs8EGZoY2UwpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6yvDuz7FwrW6UKNwKZEhJsa1jWowHwYDVR0j
BBgwFoAUnGV5FkLXdhqpe6D/GinbMWonmzcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Qzg2MzczNDJDMzZFODc1Q0Y2MjMxRDRFNTZBQTZEOEYy
QTlEQTZGREYxMTE5QjQxQkYzNUFEM0Q1QzJGNTk3LzAvOUM2NTc5MTY0MkQ3NzYx
QUE5N0JBMEZGMUEyOURCMzE2QTI3OUIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzY1NzkxNjQyRDc3NjFBQTk3
QkEwRkYxQTI5REIzMTZBMjc5QjM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEM4NjM3MzQyQzM2RTg3NUNGNjIzMUQ0RTU2QUE2RDhGMkE5REE2RkRG
MTExOUI0MUJGMzVBRDNENUMyRjU5Ny8wLzMyMzAzMTJlMzIzMzM4MmUzMTMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTM2MzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsnueDAN
BgkqhkiG9w0BAQsFAAOCAQEAJ1UuCz5zuOsOanz+OCxx+LSrnEYD/bTims6e08DP
RV2nTWdutTOLngYdcMgdHK69V1NRLKx4D9BArZgyYQ0LIIE154OpWnhku2jRrqUv
nzfM+XrQ4pdtKcyRFcDFkJitUubPHqjh2nAXe6tY0zMMuPu8LQa65/1u3WHtR3t2
fNhKnvw0sN7BLmxR7DGQXwxZrFZn9RS/+XsHUkUHpBqZAJzJgpsVKVJAfVnZLSUC
s6symo7WrpeYklYRBeA7W72efhXmIl7n2IBLwyra56h8sMV945v/5JmUr8thoUQn
9l3OzlXbGdru/hN6/0Ihqi7hBqTVYGvhXQEuxFFEWqoadA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:39 2026 by rpki-client