Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32322d3232203d3e203134323332.roa
File:                     3230312e3231392e39362e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          MNQxRkqSkG0fw6osz+amc9yKorZ4H1+pI580pKPwqCY=
Subject key identifier:   FF:0E:31:E3:82:F9:EC:FA:0A:BF:98:44:8F:9B:A4:FF:61:9A:63:E1
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       79BE039A70AA04E2C4EA3534F19F84571EF3E703
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32322d3232203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:03 +0000
ROA not before:           Fri 16 Oct 2026 15:55:03 +0000
ROA not after:            Fri 15 Oct 2027 16:00:03 +0000
asID:                     14232
IP address blocks:        201.219.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:be:03:9a:70:aa:04:e2:c4:ea:35:34:f1:9f:84:57:1e:f3:e7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:03 2026 GMT
            Not After : Oct 15 16:00:03 2027 GMT
        Subject: CN=FF0E31E382F9ECFA0ABF98448F9BA4FF619A63E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:9e:df:7a:e0:a8:0a:58:d9:3e:93:dc:89:
                    3e:1f:0e:bb:c1:9a:68:67:89:42:0b:2b:42:8f:74:
                    8d:44:c2:22:c7:56:eb:c4:7a:85:ab:0e:f5:43:44:
                    23:06:7d:8b:d9:31:db:47:26:0b:d4:2d:35:bb:7c:
                    a9:d7:12:0b:79:48:80:13:fe:b1:32:7f:0f:2f:03:
                    3b:06:d2:7e:2b:8e:04:f6:d5:f3:ad:15:ea:50:25:
                    41:28:46:ae:a1:df:2b:2a:24:07:bf:77:45:b7:f4:
                    9e:ee:11:27:40:4e:59:92:83:e2:37:6f:d7:07:ab:
                    1d:87:3b:ca:be:54:00:1d:8e:18:96:21:be:98:fb:
                    fb:9c:67:64:94:e4:5b:2d:e1:40:b6:3b:3f:1a:2b:
                    0b:41:40:d6:41:5d:c8:8f:8d:ac:70:32:52:07:35:
                    04:4a:48:ab:e0:ab:00:c4:b5:29:17:30:52:0f:20:
                    b0:ae:f9:51:2b:bf:ce:fc:d5:0c:3b:e2:43:12:7d:
                    9c:3a:59:9b:e9:44:64:4a:04:47:77:37:13:56:bf:
                    9b:76:16:18:aa:4b:28:d4:89:8c:4e:c1:0c:b7:6d:
                    a0:25:0e:2c:01:9a:69:02:b4:16:eb:c7:10:21:80:
                    13:4e:64:7c:a0:18:28:46:a3:01:63:1f:6c:ab:6b:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0E:31:E3:82:F9:EC:FA:0A:BF:98:44:8F:9B:A4:FF:61:9A:63:E1
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:c6:93:1c:4d:3c:23:f6:f9:93:6b:27:48:fb:7e:c4:07:
         07:f5:c3:13:af:8b:ef:91:38:ab:c3:6b:46:b8:25:82:3f:fb:
         1d:38:79:66:68:77:ea:6b:10:9b:22:06:c6:fe:6e:a6:94:ea:
         82:84:69:99:c9:89:73:bf:70:0a:88:e8:e4:aa:9b:28:70:b8:
         be:c3:a2:34:d4:d8:42:93:3e:34:7e:32:40:e7:83:fc:87:31:
         1f:af:e0:2f:9d:09:74:fa:04:a9:44:eb:86:90:aa:44:b9:83:
         14:de:16:99:64:4c:ac:5a:86:28:ae:97:17:ef:08:47:50:67:
         58:54:b9:84:d8:56:ee:4f:71:24:69:f1:20:3f:fc:1e:f5:6a:
         e5:4d:8a:87:6f:7f:52:2b:36:1c:b3:df:aa:9d:15:3a:df:3e:
         60:b0:24:59:71:79:ec:5d:09:b7:b5:4a:03:83:11:38:9c:7a:
         fb:90:8e:2a:8c:a8:f3:3b:12:5b:ac:9f:95:07:8b:3d:cd:13:
         5e:3f:ea:46:93:7d:d5:15:16:f9:88:12:99:1c:0b:86:a2:cd:
         a8:8e:bb:7d:31:6c:57:72:c9:24:00:b5:92:ab:aa:21:c9:c5:
         46:d3:84:1f:7f:f1:da:80:ed:ef:61:ad:20:f8:45:df:e9:c1:
         0b:87:13:86
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeb4DmnCqBOLE6jU08Z+EVx7z5wMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNjEwMTYxNTU1MDNaFw0yNzEwMTUxNjAwMDNaMDMxMTAvBgNV
BAMTKEZGMEUzMUUzODJGOUVDRkEwQUJGOTg0NDhGOUJBNEZGNjE5QTYzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7Z7feuCoCljZPpPciT4fDrvB
mmhniUILK0KPdI1EwiLHVuvEeoWrDvVDRCMGfYvZMdtHJgvULTW7fKnXEgt5SIAT
/rEyfw8vAzsG0n4rjgT21fOtFepQJUEoRq6h3ysqJAe/d0W39J7uESdATlmSg+I3
b9cHqx2HO8q+VAAdjhiWIb6Y+/ucZ2SU5Fst4UC2Oz8aKwtBQNZBXciPjaxwMlIH
NQRKSKvgqwDEtSkXMFIPILCu+VErv8781Qw74kMSfZw6WZvpRGRKBEd3NxNWv5t2
FhiqSyjUiYxOwQy3baAlDiwBmmkCtBbrxxAhgBNOZHygGChGowFjH2yra3HhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/w4x44L57PoKv5hEj5uk/2GaY+EwHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMyMzAzMTJlMzIzMTM5MmUzOTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNDMyMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsnbYDAN
BgkqhkiG9w0BAQsFAAOCAQEAj4LGkxxNPCP2+ZNrJ0j7fsQHB/XDE6+L75E4q8Nr
Rrglgj/7HTh5Zmh36msQmyIGxv5uppTqgoRpmcmJc79wCojo5KqbKHC4vsOiNNTY
QpM+NH4yQOeD/IcxH6/gL50JdPoEqUTrhpCqRLmDFN4WmWRMrFqGKK6XF+8IR1Bn
WFS5hNhW7k9xJGnxID/8HvVq5U2Kh29/Uis2HLPfqp0VOt8+YLAkWXF57F0Jt7VK
A4MROJx6+5COKoyo8zsSW6yflQeLPc0TXj/qRpN91RUW+YgSmRwLhqLNqI67fTFs
V3LJJAC1kquqIcnFRtOEH3/x2oDt72GtIPhF3+nBC4cThg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:46:36 2026 by rpki-client