Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f32342d3234203d3e203134323332.roa
File:                     3230312e3231392e36342e302f32342d3234203d3e203134323332.roa (raw, json)
Hash identifier:          GNFvmrNUpJhg6GkKf/z9fUyPcnu6BQzqG23nFiU2NjM=
Subject key identifier:   D5:C8:CE:0A:52:CE:8B:22:EA:89:CA:E9:CA:93:DD:E9:FC:F2:55:A8
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       64849195F3053450AEA9B76C825A435EA05A8473
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f32342d3234203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:02 +0000
ROA not before:           Fri 16 Oct 2026 15:55:02 +0000
ROA not after:            Fri 15 Oct 2027 16:00:02 +0000
asID:                     14232
IP address blocks:        201.219.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:84:91:95:f3:05:34:50:ae:a9:b7:6c:82:5a:43:5e:a0:5a:84:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:02 2026 GMT
            Not After : Oct 15 16:00:02 2027 GMT
        Subject: CN=D5C8CE0A52CE8B22EA89CAE9CA93DDE9FCF255A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:0c:09:0a:f9:d6:1a:52:2c:25:1b:81:e4:
                    8b:d2:06:92:eb:23:2a:9d:38:cc:e4:4e:a8:7b:fd:
                    6f:aa:d3:80:ea:fd:ff:44:c6:1e:73:4b:b2:8e:5c:
                    f5:9d:81:8c:e4:24:13:26:4c:a6:fd:db:e9:17:94:
                    bd:8f:1e:b0:40:29:b0:d9:07:2c:8e:63:5b:ef:4c:
                    34:37:17:13:eb:ca:56:18:01:06:8f:61:27:77:b9:
                    a3:08:84:33:b8:2a:d5:88:38:77:4c:92:51:64:ac:
                    c0:76:f9:14:32:ac:02:a4:11:30:e1:e3:fd:54:37:
                    21:f8:61:f9:bd:a6:aa:eb:40:a3:23:22:e7:d1:10:
                    e5:95:8b:dd:bd:b2:7e:1b:7b:9a:14:ca:65:aa:c2:
                    8d:56:82:2d:8f:00:59:26:33:ed:be:14:32:c6:2e:
                    3d:5a:91:38:1f:37:96:8f:2e:05:07:47:37:df:2a:
                    e1:2d:f5:74:32:1b:af:2a:22:81:a7:d6:61:a6:8c:
                    ec:d5:51:81:8b:b9:0d:e9:3c:cb:e1:f4:1b:43:5e:
                    10:39:45:33:8a:1d:d7:30:0e:69:cc:a5:55:0e:6e:
                    7b:ff:ef:ab:74:03:63:7a:cf:3b:71:53:ac:13:32:
                    14:25:46:23:5c:59:81:c4:81:e2:04:4d:c9:72:34:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C8:CE:0A:52:CE:8B:22:EA:89:CA:E9:CA:93:DD:E9:FC:F2:55:A8
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f32342d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:d6:a9:7d:1a:f9:59:b2:95:13:d0:96:23:62:20:8d:94:
         da:eb:16:12:cf:27:90:99:ba:6c:67:73:43:fd:51:1b:34:f6:
         c7:45:9e:0b:a5:2a:e7:74:e4:a1:96:2d:26:7e:08:62:19:91:
         c4:31:10:43:43:cf:b3:70:6c:42:94:a6:15:28:e3:73:5a:9b:
         34:35:28:f2:fe:9c:4d:a6:d9:3c:49:7b:da:25:3f:5b:b0:d0:
         b1:22:cf:53:d2:e7:47:c7:71:a3:0f:4f:70:5b:a0:2b:be:b0:
         b0:f1:ff:81:42:d8:47:78:2c:7c:b4:f6:68:ff:a7:1c:7a:65:
         c9:40:41:d5:1b:94:c8:13:0f:cb:ae:52:cb:04:64:a0:0d:65:
         5b:ae:69:8a:8b:50:45:af:e4:08:85:4f:a8:0e:77:25:78:cb:
         76:f6:1e:5e:9a:d8:45:00:65:32:37:48:53:e7:22:e6:df:5f:
         3b:62:03:72:a2:77:89:b9:75:75:3a:f4:6b:ee:06:f6:6f:84:
         a0:a4:d2:c5:e0:f8:43:bc:79:aa:76:3d:03:b4:c5:f1:bc:93:
         af:ce:92:10:a2:dc:fe:be:a0:e8:66:5b:71:8e:f6:f3:77:cf:
         a4:86:c3:f1:2c:42:66:64:55:de:16:b2:e5:79:bd:7b:20:ec:
         57:26:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:22:18 2026 by rpki-client