Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e38342e302f32322d3232203d3e203134323332.roa
File:                     3230312e3231392e38342e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          DJkXrwK6innx3WzU2+gqhju7jmLjXSWExKfwfsCHxw0=
Subject key identifier:   6A:C0:52:13:F6:52:A3:E2:1B:BE:AF:71:BD:04:DE:0E:AD:0E:3E:1D
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       0466F11FB134BFC009307B6436C94A21D9B5BC75
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e38342e302f32322d3232203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:04 +0000
ROA not before:           Fri 16 Oct 2026 15:55:04 +0000
ROA not after:            Fri 15 Oct 2027 16:00:04 +0000
asID:                     14232
IP address blocks:        201.219.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:66:f1:1f:b1:34:bf:c0:09:30:7b:64:36:c9:4a:21:d9:b5:bc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:04 2026 GMT
            Not After : Oct 15 16:00:04 2027 GMT
        Subject: CN=6AC05213F652A3E21BBEAF71BD04DE0EAD0E3E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:b1:32:43:22:0e:67:9d:e7:d2:cd:c2:a7:
                    89:e5:df:a9:41:b3:ce:2b:e8:9f:1c:b8:18:ed:82:
                    fd:c6:1f:f1:4b:39:b6:1f:e6:36:a1:59:d5:e5:dd:
                    97:6d:9a:e3:1b:8b:dc:5a:7f:dd:fb:24:42:9c:38:
                    b5:72:2e:6d:c4:70:71:3e:20:27:b2:d2:ce:51:d0:
                    6f:6f:aa:e9:42:b2:fe:3e:06:22:fb:a3:89:70:86:
                    20:17:18:5a:e9:8a:5b:cb:c0:cb:c1:a2:e7:c5:cd:
                    f8:c4:d7:71:cb:59:c4:63:bf:91:cf:12:18:34:c1:
                    4b:a8:06:66:ec:42:6e:48:eb:e2:e7:51:f5:52:73:
                    16:bb:71:65:71:0e:91:27:0e:04:57:d9:76:b5:b2:
                    c8:4d:32:1e:df:cf:21:a0:38:27:a9:8d:f9:bc:69:
                    a9:89:1f:4e:3c:bf:ec:2b:6c:36:e2:b1:d3:ee:b6:
                    57:d8:fa:5e:7d:3a:9b:02:2d:ac:89:84:a1:30:62:
                    9c:38:5b:17:0f:a2:46:9c:8f:62:9e:aa:a1:9d:bc:
                    5f:26:e5:fd:d8:2c:1e:4a:5b:6a:ef:3e:3f:8f:35:
                    49:6b:82:0f:e3:ae:af:d7:e5:03:8a:a1:bc:73:02:
                    f7:b7:d2:9d:35:ee:df:ff:c0:f9:ec:b7:81:75:42:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:52:13:F6:52:A3:E2:1B:BE:AF:71:BD:04:DE:0E:AD:0E:3E:1D
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e38342e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:14:06:88:f8:ec:14:73:1d:72:e9:51:f9:f7:dc:0c:fa:20:
         09:d9:ab:d2:98:dc:b3:47:05:d8:c6:54:b7:67:ea:65:95:42:
         4d:7a:ff:9a:5b:16:4f:48:3e:89:48:87:c9:37:e9:b0:f6:86:
         db:ff:ba:29:16:d9:8e:13:59:a4:fb:29:50:cb:b1:87:12:e5:
         83:9f:3e:05:50:d2:90:ae:bf:36:36:3a:fc:f8:98:81:bc:8d:
         23:eb:42:dc:80:4e:90:90:98:c6:07:fc:37:d8:25:d2:65:5d:
         0f:8f:42:35:ee:b3:a4:1f:e8:0e:f8:60:54:04:19:7a:d3:24:
         8d:08:b1:d3:99:7b:f1:a3:2c:5a:7f:84:32:23:b1:26:76:86:
         78:24:95:e8:58:f7:d4:76:28:14:65:b3:a0:e8:9b:93:87:ed:
         3f:16:a1:c7:81:97:db:4e:9e:a1:dd:50:64:d2:aa:46:11:b4:
         c2:93:e1:81:c9:bd:81:c0:b6:52:27:03:3d:90:2f:57:7d:0b:
         0f:ac:08:f6:1d:95:3c:78:2e:0b:cd:73:ff:f6:7b:34:fd:b2:
         3a:fd:ff:af:0e:65:f1:3f:02:fa:04:d7:6f:31:72:f8:aa:b6:
         d0:f7:b1:d0:d2:e6:f0:06:f3:eb:b2:84:b1:88:dd:8f:23:6f:
         a8:20:51:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:45:45 2026 by rpki-client