Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/3230312e3135302e32382e302f32322d3234203d3e20333938373730.roa
File:                     3230312e3135302e32382e302f32322d3234203d3e20333938373730.roa (raw, json)
Hash identifier:          XoreKF9lFBPWpE15ll0JMl+mPqTHkPEp0tsVWB4iU2A=
Subject key identifier:   FC:3B:E1:B6:A8:4C:EE:40:47:06:A1:BB:09:37:59:8D:A9:B7:F0:3B
Certificate issuer:       /CN=185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0
Certificate serial:       6348B663C52995D77163831FBB79C5E9FC7DA7B5
Authority key identifier: 18:5E:96:C8:0D:FA:32:CF:38:CB:2E:53:75:42:AD:1F:B5:A2:BD:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/3230312e3135302e32382e302f32322d3234203d3e20333938373730.roa
Signing time:             Sun 19 Apr 2026 20:39:21 +0000
ROA not before:           Sun 19 Apr 2026 20:34:21 +0000
ROA not after:            Sun 18 Apr 2027 20:39:21 +0000
asID:                     398770
IP address blocks:        201.150.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:48:b6:63:c5:29:95:d7:71:63:83:1f:bb:79:c5:e9:fc:7d:a7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0
        Validity
            Not Before: Apr 19 20:34:21 2026 GMT
            Not After : Apr 18 20:39:21 2027 GMT
        Subject: CN=FC3BE1B6A84CEE404706A1BB0937598DA9B7F03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:7b:c7:60:70:4d:3b:0f:ab:c0:72:34:9e:
                    1b:a3:26:e2:5b:1b:ed:11:4a:3c:7e:26:7a:50:14:
                    47:12:68:71:ae:3a:99:d4:9f:81:82:b9:e1:7a:39:
                    4d:74:30:c6:22:e9:39:4e:ef:c0:ec:f5:01:25:4b:
                    ad:39:da:2d:da:56:8e:ff:24:b6:32:27:78:c4:20:
                    28:eb:ea:e7:0e:d6:1d:ce:c8:ee:a9:96:02:47:af:
                    9a:c2:17:62:91:71:0e:ab:ed:11:0c:1b:07:39:9b:
                    57:53:a0:05:d8:aa:9d:c2:f3:3a:cc:a6:0c:8d:d0:
                    9f:b3:9b:0f:8c:00:98:01:36:fd:47:ee:da:15:56:
                    95:9b:5d:45:1a:6b:52:98:c3:c8:d2:7c:03:56:93:
                    8d:c0:7a:f7:8b:c4:3f:7a:82:2e:06:f2:e3:cf:89:
                    b4:73:62:9e:37:16:0c:c1:1c:b6:90:0f:1a:d2:24:
                    36:b1:d6:7b:73:99:48:4f:af:c2:85:af:39:38:da:
                    77:ec:72:ab:7d:36:76:36:6b:fb:3a:bb:de:d9:20:
                    b7:7b:6a:33:e1:ab:23:25:89:59:73:c3:a9:b3:dd:
                    eb:cd:33:eb:50:6c:93:94:bf:17:74:d4:50:60:de:
                    9a:66:ee:44:ee:2f:fd:61:91:ba:ed:f0:3c:1a:9a:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3B:E1:B6:A8:4C:EE:40:47:06:A1:BB:09:37:59:8D:A9:B7:F0:3B
            X509v3 Authority Key Identifier:
                keyid:18:5E:96:C8:0D:FA:32:CF:38:CB:2E:53:75:42:AD:1F:B5:A2:BD:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/185E96C80DFA32CF38CB2E537542AD1FB5A2BDA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/3230312e3135302e32382e302f32322d3234203d3e20333938373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:2d:5c:a3:11:81:13:07:a2:af:65:6f:68:12:ee:8c:9b:24:
         a1:b6:54:8e:24:f0:ec:ec:03:d8:57:ed:0a:84:fb:7a:2a:5d:
         f9:58:d8:1a:31:93:29:ef:91:54:47:26:17:cd:8a:70:63:c0:
         e3:78:ff:85:a5:db:13:e3:88:e8:81:16:a6:7f:3c:7c:8c:03:
         14:79:4a:2f:db:d7:e3:78:00:fb:ff:67:cf:94:46:c4:2f:3e:
         fd:e4:68:ea:47:ff:9e:08:c3:05:59:0f:89:cb:3e:c3:76:cf:
         10:88:26:ae:ec:fe:9c:ca:b4:de:60:73:53:0f:e0:60:8b:ff:
         00:ea:2c:9f:50:2b:b9:38:ca:dc:db:a5:e1:0b:85:e9:24:17:
         63:ca:73:d0:74:13:a0:d8:a1:4a:7e:0b:ff:ee:2f:0c:c9:41:
         36:31:ff:27:5c:1a:2e:3b:ff:a8:e0:1e:9b:22:74:25:75:5b:
         00:c2:86:2a:f2:40:93:4f:88:c9:81:43:65:f0:d2:b1:05:c9:
         0c:5f:f9:90:f2:6d:6b:76:1f:ab:92:73:46:e8:34:ec:d9:70:
         82:c8:67:a8:0d:3d:9c:a3:8c:05:80:f2:2a:3e:f6:92:f7:0f:
         a3:c4:45:2a:ba:10:1b:9f:45:41:60:bd:99:69:a6:bb:59:d7:
         d7:a2:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:20:20 2026 by rpki-client