Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa
File:                     3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa (raw, json)
Hash identifier:          hkd4+fEMqYNF/wWzxbCFIOR8WMQmZ4QN3h4weYhK2z0=
Subject key identifier:   56:51:0C:65:12:CC:9E:9C:EA:B7:B8:D2:EF:F0:4F:2D:1E:03:64:87
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       4BCC2905EBC4588D17D296407A5DAE69F7F218F5
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa
Signing time:             Fri 12 Sep 2025 04:35:01 +0000
ROA not before:           Fri 12 Sep 2025 04:30:01 +0000
ROA not after:            Fri 11 Sep 2026 04:35:01 +0000
asID:                     264845
IP address blocks:        201.219.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:29:05:eb:c4:58:8d:17:d2:96:40:7a:5d:ae:69:f7:f2:18:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Sep 12 04:30:01 2025 GMT
            Not After : Sep 11 04:35:01 2026 GMT
        Subject: CN=56510C6512CC9E9CEAB7B8D2EFF04F2D1E036487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:62:09:93:52:68:98:37:c0:ab:c6:db:77:
                    11:c6:0a:df:2b:78:fc:6d:df:f0:ec:d1:80:6e:a5:
                    00:71:d5:fb:07:a3:ef:f1:8f:52:64:17:d1:2f:bd:
                    eb:e7:76:69:39:e2:be:2b:d8:c9:e6:f8:65:87:02:
                    d1:00:ce:d4:dc:c7:c7:18:55:45:2f:b0:b4:b2:55:
                    ef:f2:12:c9:72:ec:03:42:99:dc:71:56:52:1b:75:
                    64:16:f4:36:67:a7:8b:0d:a8:c6:1a:a7:fe:b3:6c:
                    1b:eb:73:65:62:f3:9f:c8:32:f1:c4:07:37:77:8d:
                    17:df:2b:b3:61:8f:08:db:89:af:b9:93:da:9c:f7:
                    2f:3b:7c:c2:7c:56:61:2f:b7:29:d2:18:d5:9c:24:
                    0f:51:03:e9:1c:a3:29:c3:cf:be:c7:49:08:b4:19:
                    19:03:d7:38:0a:8e:3d:24:ee:60:32:3b:9e:2f:3b:
                    7b:48:b9:35:ef:9a:27:78:d5:ae:51:30:40:5d:90:
                    6a:3e:01:d2:9a:ae:65:93:f3:ce:81:cb:47:94:82:
                    93:a9:64:f4:79:cf:41:96:fa:fa:11:fc:c3:ec:3e:
                    8e:6a:82:70:4d:1f:b0:4a:7f:32:2a:b7:40:fd:9c:
                    b4:2c:16:47:69:8a:97:6c:8e:92:47:94:4a:24:6c:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:0C:65:12:CC:9E:9C:EA:B7:B8:D2:EF:F0:4F:2D:1E:03:64:87
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:f9:82:fa:47:45:4f:81:f9:bc:2d:af:34:e6:5e:1d:26:
         38:0b:a1:b2:23:c8:a2:c9:bf:de:45:bb:47:ed:f6:f5:d9:65:
         db:9f:bf:a1:a7:76:87:bd:7e:c1:fb:db:99:26:6a:73:45:da:
         7b:24:f8:fa:89:4b:25:28:f1:db:64:2e:78:35:25:31:50:88:
         3b:49:0f:86:60:d8:5b:e5:65:6a:41:4d:fe:cb:b2:1e:b1:61:
         68:ab:ac:ee:2f:ae:50:c9:88:d2:74:d6:19:0d:94:7c:f2:4e:
         42:79:37:35:95:ee:a5:1b:a7:46:be:97:d8:36:d2:57:58:07:
         5c:9a:3c:fe:66:52:ef:bf:dc:29:a1:10:3c:18:a5:94:51:e5:
         9e:43:19:dc:33:92:ec:c0:30:1f:6c:ad:81:21:0a:1f:29:1d:
         f9:d2:39:0b:c9:00:c0:d3:ed:76:c3:76:86:d9:fe:d4:23:7f:
         bd:91:2d:c0:47:97:16:ea:db:e3:3e:eb:f6:f3:49:71:88:ba:
         a2:4a:c4:62:77:c3:90:cd:a4:c8:bb:f9:c5:88:6b:a0:2f:e0:
         58:dc:7c:83:8f:09:a2:27:e9:be:b6:1a:52:25:d6:df:61:11:
         70:29:72:6b:73:89:ce:d2:b3:e0:8f:8f:1f:d5:85:f7:e4:49:
         c9:3c:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:39 2025 by rpki-client