Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e203634313335.roa
File:                     3230312e3231392e3235322e302f32322d3234203d3e203634313335.roa (raw, json)
Hash identifier:          gDwLhXnwMp0WM8N1iRDdpGuVM+SxzZK+mix8hQsrXzc=
Subject key identifier:   07:B0:79:1A:DF:F1:94:D9:A4:DC:62:50:6F:52:8F:DC:CE:74:3F:4F
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       4653C9EE8804862F17F79F7D528B854BD41CB686
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e203634313335.roa
Signing time:             Fri 19 Sep 2025 15:47:28 +0000
ROA not before:           Fri 19 Sep 2025 15:42:28 +0000
ROA not after:            Fri 18 Sep 2026 15:47:28 +0000
asID:                     64135
IP address blocks:        201.219.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:53:c9:ee:88:04:86:2f:17:f7:9f:7d:52:8b:85:4b:d4:1c:b6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Sep 19 15:42:28 2025 GMT
            Not After : Sep 18 15:47:28 2026 GMT
        Subject: CN=07B0791ADFF194D9A4DC62506F528FDCCE743F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:96:10:ad:ce:f1:23:1e:b7:b7:f4:b1:0b:
                    aa:82:c8:37:9d:a3:ac:56:b3:be:87:d5:ea:2f:1e:
                    bb:5f:ce:28:ca:90:7f:45:bb:50:4a:1d:78:c3:e8:
                    81:96:95:e7:fd:9c:f4:be:8e:ee:01:b5:d9:ec:cf:
                    ef:74:b2:01:d4:3d:cb:8c:c4:9c:d7:b9:11:e5:c6:
                    79:7d:cb:a8:b0:3e:35:04:50:66:f2:a5:bf:b0:c9:
                    a6:e5:d2:73:d4:a9:89:56:5a:d9:67:ef:07:33:7e:
                    80:3e:06:d1:fd:bc:c8:cb:00:b5:de:a2:7c:25:ae:
                    93:f3:2a:aa:9e:29:37:56:e8:3a:5a:bc:cb:90:c4:
                    c1:2d:88:93:a0:1c:56:b8:fa:de:af:01:b3:89:9a:
                    f0:c3:9e:4d:df:a4:17:ad:a4:84:a9:fd:53:50:ae:
                    65:a5:08:5c:1f:f3:83:92:7f:5c:06:4d:3d:46:ae:
                    c7:a0:a3:26:e9:23:41:c2:0b:0a:7d:fc:50:a7:73:
                    5b:a4:cf:a9:8d:e2:49:fb:c6:1b:f0:51:28:55:47:
                    69:59:01:b3:9b:20:10:85:82:a2:a6:eb:79:55:97:
                    b4:b4:27:b3:08:10:9f:80:dc:5e:2c:68:00:3c:b1:
                    4a:f5:d7:7a:53:96:dc:c0:fa:a9:b8:1f:5f:09:2f:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B0:79:1A:DF:F1:94:D9:A4:DC:62:50:6F:52:8F:DC:CE:74:3F:4F
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e203634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:25:33:d3:c7:55:d9:49:52:41:4f:ec:b9:d3:5a:22:04:f2:
         de:8e:5a:07:ec:d7:a8:6d:15:00:ed:26:16:31:a0:2d:30:4c:
         79:9c:e6:4d:88:ac:4a:13:44:fd:72:08:16:77:de:99:d5:a6:
         30:b1:05:42:fd:ab:ee:86:21:fe:c8:53:b4:04:02:dd:66:f5:
         91:a4:a3:f8:61:a0:d9:ab:36:b6:67:3f:69:69:29:c0:fe:ff:
         d4:9e:c7:15:e0:dc:ec:bb:6c:14:e4:f4:d0:9f:d6:5f:1e:92:
         54:1b:57:58:5c:a3:7b:fe:42:8b:2e:4e:c9:06:1d:87:cd:7e:
         51:af:54:b8:1a:c0:70:c4:96:78:2a:f2:94:5a:67:3c:3a:6d:
         f7:f1:28:54:3b:28:3e:18:e6:b9:5b:3e:15:07:6a:63:e0:9c:
         9f:68:c5:3f:56:68:7a:ba:fb:98:a3:a8:26:e7:60:9f:e7:9a:
         b6:d2:9f:45:4d:df:67:51:f9:80:fb:94:c9:fc:a9:7f:f5:45:
         87:73:3b:d6:ca:ad:0a:03:14:cf:e5:52:46:bf:54:50:b4:7a:
         ad:b8:88:f5:54:e9:bf:ad:2d:7c:8a:93:83:ca:01:9a:b4:ca:
         ea:38:26:ac:30:70:74:5d:19:df:18:d1:20:f0:54:1d:26:28:
         e1:fa:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:49 2025 by rpki-client