Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e39362e302f32302d3234203d3e2035363339.roa
File:                     3230312e3233382e39362e302f32302d3234203d3e2035363339.roa (raw, json)
Hash identifier:          6V4ZVi6tE1mwSNmJOLfI4cFrMikpQ8StLeN1xScWsDQ=
Subject key identifier:   D2:28:10:DD:FF:5D:3D:3D:02:4D:80:18:E6:9F:1C:E1:15:90:5E:67
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       46249345999C43C39434D1E316FE2318184CD716
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e39362e302f32302d3234203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:02 +0000
ROA not before:           Fri 10 Jul 2026 02:25:02 +0000
ROA not after:            Fri 09 Jul 2027 02:30:02 +0000
asID:                     5639
IP address blocks:        201.238.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:93:45:99:9c:43:c3:94:34:d1:e3:16:fe:23:18:18:4c:d7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:02 2026 GMT
            Not After : Jul  9 02:30:02 2027 GMT
        Subject: CN=D22810DDFF5D3D3D024D8018E69F1CE115905E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:8c:30:b4:9f:32:ef:71:68:8a:5f:a6:e7:
                    cd:ce:8d:6d:57:8f:e3:99:b3:b1:f2:50:97:63:cc:
                    62:bf:b3:99:fe:d1:fc:cc:c6:88:49:09:2c:6c:0f:
                    a5:49:80:ba:d0:9b:2a:ff:b6:73:bb:45:65:5a:55:
                    f0:e4:94:a3:bd:6a:88:99:d5:a4:73:eb:db:d9:ff:
                    f8:fc:a5:2e:eb:7f:11:fb:3e:ea:01:80:60:05:2a:
                    6b:cf:c7:71:ff:4b:a1:66:8b:60:37:cc:86:d1:71:
                    2d:2b:09:b3:21:28:b8:17:3c:72:c1:ce:e3:d3:fc:
                    0a:18:78:8b:23:87:36:60:b6:ba:11:89:3f:60:33:
                    85:1e:9d:e2:31:93:81:c5:00:5f:32:36:65:0c:c0:
                    df:86:85:de:83:52:e9:8a:ad:7a:ee:d4:cc:03:61:
                    42:8c:12:25:7a:68:b5:d2:cf:d2:c0:a6:b8:25:fd:
                    f7:ee:aa:a1:ca:5a:3c:93:dd:c2:d8:f2:e9:c5:ba:
                    53:65:89:68:62:35:17:b3:16:27:46:56:17:83:49:
                    61:05:64:a6:d1:9b:4f:9e:d9:73:3c:86:2a:9b:24:
                    1f:0a:bc:78:5e:3a:77:3a:55:df:99:2f:22:cf:78:
                    be:e0:59:66:a1:5d:5c:4c:11:f9:87:13:b7:4d:4b:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:10:DD:FF:5D:3D:3D:02:4D:80:18:E6:9F:1C:E1:15:90:5E:67
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/3230312e3233382e39362e302f32302d3234203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:33:9b:fd:33:4c:d9:df:4c:7c:16:82:4e:3f:d3:db:58:12:
         9d:18:eb:4a:be:97:c3:ea:56:53:73:e1:74:70:c6:7b:30:3e:
         ed:5a:81:b5:02:8f:8a:f5:66:45:73:16:56:70:7e:7d:33:fd:
         63:8c:33:8b:7a:cd:38:c4:4d:77:af:57:d7:a3:b0:36:5c:47:
         5a:2f:ec:25:70:8f:06:ed:3f:6d:cc:00:b8:6a:a5:6c:f9:a6:
         0d:b4:76:b8:5f:3c:cb:de:7a:b0:32:c6:11:d6:61:76:28:0f:
         77:af:0c:7e:ea:5f:12:32:82:23:1a:40:da:86:09:48:88:bf:
         ba:25:60:cb:81:c5:85:dc:47:7f:8b:64:1c:1a:54:2d:1d:61:
         bf:2f:ce:6f:6d:be:63:10:0b:a4:b6:db:e5:5f:e5:41:19:c9:
         05:7f:fb:f2:28:66:fc:9c:bf:1e:3f:8f:bf:eb:f1:ad:f1:78:
         69:a0:36:02:ba:a8:54:a0:0a:95:76:c8:95:d1:55:66:6a:72:
         ca:bc:92:b9:3d:31:6a:bf:eb:ff:83:57:ce:a8:22:20:3c:01:
         e4:18:be:bd:9d:83:b1:b9:0c:da:27:66:75:7d:4f:58:92:f5:
         a7:de:d2:f2:3c:fd:56:34:e5:68:4a:c4:48:40:bc:5b:9e:8f:
         d5:c6:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:45 2026 by rpki-client