Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3135372e302e302f31372d3234203d3e203332303938.roa
File:                     3230312e3135372e302e302f31372d3234203d3e203332303938.roa (raw, json)
Hash identifier:          CXe5W9zIEvXGqbddVZD3SLCTY3QsEFmt4rIv4njodN4=
Subject key identifier:   07:70:45:C6:3D:E0:F3:68:15:95:38:7F:3B:67:6F:31:35:EB:3B:6E
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       62627B3F2C56D6619B1AA1C27525F0C1AAE8EDF4
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3135372e302e302f31372d3234203d3e203332303938.roa
Signing time:             Thu 24 Sep 2026 05:55:00 +0000
ROA not before:           Thu 24 Sep 2026 05:50:00 +0000
ROA not after:            Thu 23 Sep 2027 05:55:00 +0000
asID:                     32098
IP address blocks:        201.157.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:62:7b:3f:2c:56:d6:61:9b:1a:a1:c2:75:25:f0:c1:aa:e8:ed:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Sep 24 05:50:00 2026 GMT
            Not After : Sep 23 05:55:00 2027 GMT
        Subject: CN=077045C63DE0F3681595387F3B676F3135EB3B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:61:2f:ae:33:3f:ff:8f:b9:52:49:6e:af:
                    9d:c7:37:09:ca:30:19:2c:6c:ed:57:ec:fb:f9:2c:
                    b5:2b:2a:08:8b:69:24:a9:d4:a5:40:e4:3c:d1:1a:
                    7d:58:9b:5b:46:0a:db:b5:8c:84:38:9a:73:a9:8d:
                    31:e2:35:f2:35:54:ac:31:5b:0c:70:bd:89:83:7a:
                    7b:22:90:71:82:9e:38:5d:df:21:8a:72:79:3a:12:
                    d6:cc:f7:56:2f:79:58:4a:1b:b6:5e:36:b2:18:c5:
                    4c:b6:14:81:da:a1:c3:4c:48:57:23:aa:1e:74:39:
                    ba:68:6e:17:8a:a4:05:23:8b:71:43:66:2c:eb:ee:
                    40:3c:d9:8e:27:ed:31:00:cb:ed:22:a3:40:88:0d:
                    ac:cc:74:ad:4c:0c:00:0c:ce:73:ed:c7:a5:46:a3:
                    5c:52:dc:fc:a1:f7:aa:0f:6b:2e:5d:13:04:2f:ae:
                    b4:e8:f2:97:2b:4a:1b:8c:8c:bc:2b:72:f5:42:d9:
                    3f:00:84:99:32:e5:fa:38:0f:c4:e7:f3:d6:fa:11:
                    57:40:ce:8f:bc:c9:c8:91:66:28:58:73:65:01:ba:
                    cc:e9:fe:d5:18:4c:85:4f:0d:87:20:b6:46:cd:16:
                    df:6b:1c:ab:5c:8d:23:b7:f0:ed:93:8e:72:67:c4:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:45:C6:3D:E0:F3:68:15:95:38:7F:3B:67:6F:31:35:EB:3B:6E
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3135372e302e302f31372d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         95:c0:34:89:ae:08:68:af:e6:ac:5b:bf:3d:96:7f:59:6a:18:
         94:88:01:f9:84:03:80:ce:7a:1f:32:b1:57:15:d8:74:df:84:
         ca:b4:f1:0d:5f:5e:c9:d7:8e:e3:4f:a7:dd:7b:94:bc:4e:c4:
         4b:69:b3:9c:03:1e:70:cb:2f:80:cd:be:90:13:60:65:87:e2:
         8d:79:87:f0:09:ab:41:01:13:32:8a:a0:fb:14:51:cb:bf:a0:
         a1:69:90:7e:a8:4a:35:08:d9:85:b9:d7:3a:dd:76:41:0b:40:
         2f:a3:bd:d9:a3:68:4f:ea:02:e9:63:dc:74:17:3e:6e:f8:7f:
         33:64:4e:7c:6a:a1:f9:02:c7:a0:34:a9:e7:5c:12:6b:b3:43:
         4b:84:a4:e2:95:fe:e2:2a:ea:59:bd:c9:d6:46:6e:09:af:6a:
         c4:d2:08:64:52:98:b1:28:1d:09:e0:2c:6d:be:18:b9:93:bd:
         0e:2e:83:19:1b:36:f9:41:41:22:8d:39:60:58:c5:97:b1:fd:
         a2:2c:9e:4a:1a:70:61:42:1c:cd:bd:01:aa:88:26:ce:c9:41:
         d1:6f:3a:03:9d:fc:d4:ba:8c:6c:35:ee:d3:cb:fe:57:ed:d8:
         c2:3d:02:17:b5:c3:6e:2a:d9:ec:85:9c:58:1a:99:46:0f:c9:
         32:0e:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:06:41 2026 by rpki-client