Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e38382e302f32322d3232203d3e203134323332.roa
File:                     3230312e3231392e38382e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          9Fbotaz645BQitdsKm4m/vEe5hYlHocf27bD8xbClJQ=
Subject key identifier:   1F:C8:A1:5F:D9:52:03:F1:7E:42:58:56:C2:27:29:C9:FB:B2:5A:C3
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       6261F2DC7E9CAE3C6D92C49E2223D03ED4CAFDF2
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e38382e302f32322d3232203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:05 +0000
ROA not before:           Fri 16 Oct 2026 15:55:05 +0000
ROA not after:            Fri 15 Oct 2027 16:00:05 +0000
asID:                     14232
IP address blocks:        201.219.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:61:f2:dc:7e:9c:ae:3c:6d:92:c4:9e:22:23:d0:3e:d4:ca:fd:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:05 2026 GMT
            Not After : Oct 15 16:00:05 2027 GMT
        Subject: CN=1FC8A15FD95203F17E425856C22729C9FBB25AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b0:c8:0f:3a:27:1f:7c:88:88:b9:90:68:48:
                    e6:44:a4:86:8f:07:a7:92:63:b4:8f:ec:b6:ea:d9:
                    36:ea:49:5e:22:76:bd:f6:4f:2c:f9:e4:1a:eb:a0:
                    bc:4e:40:67:31:c5:46:b9:fe:57:7a:29:14:f1:1b:
                    77:46:6f:8f:6b:0f:93:e7:cf:1d:54:b7:be:e8:1b:
                    88:d3:7b:8f:47:1f:f6:1b:1c:f0:dd:1b:97:d2:ba:
                    5b:28:9d:b3:cb:53:45:bd:55:80:c8:2b:a4:9e:d5:
                    23:ff:ea:06:00:53:0d:56:a1:99:03:1a:23:6d:d4:
                    07:90:76:6e:4a:da:2b:17:e6:48:be:c9:99:77:2e:
                    a7:39:8b:d6:79:32:1b:91:22:31:f2:fe:16:65:30:
                    4b:1c:68:c8:7a:5d:52:70:a2:6c:59:fd:40:b0:f8:
                    f6:98:0e:77:4c:00:a5:31:5c:f8:af:8a:15:1f:d5:
                    7f:39:9e:62:83:0a:90:3d:fb:92:57:64:e1:5d:00:
                    a0:be:16:0f:d3:c5:90:b4:a6:cc:6f:a1:bc:b5:7d:
                    bc:42:cf:49:49:78:ab:bc:b7:2e:f5:38:e0:77:02:
                    fd:cd:40:cd:3a:80:f0:86:8e:1f:21:86:ed:69:0a:
                    4c:a7:3a:34:11:10:7c:68:17:80:53:74:79:d7:25:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:A1:5F:D9:52:03:F1:7E:42:58:56:C2:27:29:C9:FB:B2:5A:C3
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e38382e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:12:17:b0:ae:ce:d2:0f:a6:6a:4a:0d:7e:fa:8f:04:f5:
         c0:81:34:b9:96:b3:4d:8f:ce:54:c2:fc:04:56:bc:fe:60:2f:
         f3:18:17:1c:e0:ed:42:4e:fe:05:a1:44:7e:d8:41:fd:fc:86:
         16:a6:24:de:b6:f9:64:45:9e:32:6e:75:7e:04:ee:9d:25:55:
         bd:51:99:5f:3e:89:fb:30:d5:2f:5c:f7:2f:70:20:59:fa:ee:
         47:64:99:ef:80:4c:75:ed:5e:a8:2d:4f:a7:3a:f5:4e:89:d0:
         71:aa:2a:1a:94:d9:d4:9b:e0:36:62:01:b9:48:dd:f8:d3:16:
         46:1b:41:2a:97:7e:8f:26:01:62:27:67:86:04:ab:1a:14:76:
         5e:5d:58:cf:88:fe:1c:b2:5d:a3:83:4f:8a:c2:64:6a:5b:e7:
         dd:91:8a:ab:28:7f:47:17:fa:90:65:f5:69:a1:06:46:6d:af:
         77:c3:f0:3a:68:d9:61:cb:89:8d:28:bc:77:58:32:5c:61:f8:
         9a:8a:33:3f:a0:92:8a:24:d8:a9:52:87:31:6d:a0:71:dd:f0:
         32:83:21:06:3a:60:b0:c8:e9:19:f7:78:a5:05:de:c1:e0:a6:
         0c:dc:81:ed:d2:8d:c3:e2:e0:04:3a:a1:b0:1a:75:c4:25:65:
         6e:1e:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:22:16 2026 by rpki-client