Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134342e302f32342d3234203d3e20323732393739.roa
File:                     3230312e3231382e3134342e302f32342d3234203d3e20323732393739.roa (raw, json)
Hash identifier:          cT+lMXb73ehUDE91lLgAM4+s15PZOSjveTRANyvYAW0=
Subject key identifier:   0F:F4:61:54:32:94:2D:26:6E:D4:E5:0C:5F:F5:CC:EE:EB:E2:46:5D
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       70A51DACFA5CA2EBB2EAF8B7441AACCF2BF3E5A3
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134342e302f32342d3234203d3e20323732393739.roa
Signing time:             Tue 28 Apr 2026 22:55:00 +0000
ROA not before:           Tue 28 Apr 2026 22:50:00 +0000
ROA not after:            Tue 27 Apr 2027 22:55:00 +0000
asID:                     272979
IP address blocks:        201.218.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a5:1d:ac:fa:5c:a2:eb:b2:ea:f8:b7:44:1a:ac:cf:2b:f3:e5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Apr 28 22:50:00 2026 GMT
            Not After : Apr 27 22:55:00 2027 GMT
        Subject: CN=0FF4615432942D266ED4E50C5FF5CCEEEBE2465D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:6d:2f:28:45:34:5b:1d:33:b9:4d:5c:b3:
                    b8:55:fd:6e:8b:fb:24:44:25:28:18:de:71:ee:bd:
                    dd:49:3e:ad:3d:2a:1a:fa:ac:e4:ac:ad:81:7e:5f:
                    64:d4:b6:c0:4e:85:60:2e:c6:be:b8:bd:a5:0b:40:
                    6e:ac:54:2d:ed:9b:40:f5:d8:24:60:6b:11:7a:c7:
                    a0:8f:e3:cd:0e:f8:0a:92:42:bc:f5:1c:64:ba:fe:
                    59:cd:74:e8:e0:b1:4c:76:39:ed:02:c0:ef:af:ba:
                    ec:2e:7e:7b:b1:fd:9c:6c:a5:fc:8d:0b:fa:d9:07:
                    f4:ec:13:0f:dd:53:8b:b9:cd:71:e0:be:39:b7:ac:
                    e4:d8:9e:9c:bd:b2:b5:a5:ce:87:00:a6:4c:9f:38:
                    f0:b9:70:f5:74:81:69:35:3c:06:8a:d4:12:dd:48:
                    81:0e:06:19:fa:92:60:84:0e:eb:6f:1d:4f:8e:f9:
                    00:48:85:ab:87:dc:e3:8b:90:fc:0d:63:cf:96:15:
                    b8:4a:48:21:cd:90:b4:ac:70:85:a2:82:9a:5c:ef:
                    a8:5f:cf:b5:61:cc:7b:c7:7e:18:41:c5:2b:e6:bc:
                    d1:2d:34:1e:b7:f1:07:69:cb:ba:35:20:99:7b:d4:
                    39:b7:09:fc:b0:be:68:61:c9:81:f2:9d:45:f9:e0:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:61:54:32:94:2D:26:6E:D4:E5:0C:5F:F5:CC:EE:EB:E2:46:5D
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134342e302f32342d3234203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:7c:66:4d:59:b8:51:ff:b4:03:36:06:73:a9:e4:c4:ec:9d:
         92:93:28:14:2a:fe:19:f5:4d:f8:b1:3f:f0:bc:a6:9d:03:b2:
         6d:ff:1a:00:dc:d6:0a:4d:a6:6a:e8:b2:92:53:ac:54:d9:6b:
         27:be:32:cd:0a:70:c7:66:8e:ec:3c:43:42:4e:0c:67:00:9e:
         e6:9b:5f:f6:bb:b1:0c:32:c4:cf:00:f8:12:b9:95:e4:6b:84:
         2c:c4:53:c3:27:af:b4:32:90:15:d0:eb:e2:4f:c9:1b:72:2c:
         b9:99:24:fb:66:d3:d4:56:b8:8c:2b:af:15:21:93:70:aa:36:
         d4:ec:f8:79:dd:22:7e:f0:fa:c7:43:07:f5:d4:5c:f8:24:18:
         f1:82:83:b8:7a:fb:16:52:32:f7:9d:4c:d9:75:82:1d:d8:e3:
         42:f3:7d:0a:c4:30:1d:63:2f:62:ad:19:eb:5a:38:27:45:32:
         67:0c:9c:07:9a:ac:64:f7:a5:f8:8e:1e:84:bf:f4:36:a1:3e:
         7f:a6:a9:a4:e9:22:54:96:71:ff:10:51:a9:6d:ba:44:4f:8f:
         0b:32:a9:22:96:8b:43:49:f2:5e:97:be:e3:cb:c4:99:03:1d:
         72:3e:8a:16:18:c9:04:c9:b6:df:c9:9c:60:7f:f0:c2:c5:ab:
         fa:7e:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:20:30 2026 by rpki-client