Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/3230312e37312e322e302f32332d3234203d3e20323639393230.roa
File:                     3230312e37312e322e302f32332d3234203d3e20323639393230.roa (raw, json)
Hash identifier:          xVpYf3eqikso92q82uQTzaX0BL/TFizOohhgwjIYkpk=
Subject key identifier:   3F:72:9F:D9:95:14:BD:33:9C:D1:3F:D2:C5:78:2F:85:9F:E2:25:DB
Certificate issuer:       /CN=B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2
Certificate serial:       70117DDF2408E16576AD7BF4B33E128CB3563B91
Authority key identifier: B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/3230312e37312e322e302f32332d3234203d3e20323639393230.roa
Signing time:             Wed 15 Jul 2026 15:20:00 +0000
ROA not before:           Wed 15 Jul 2026 15:15:00 +0000
ROA not after:            Wed 14 Jul 2027 15:20:00 +0000
asID:                     269920
IP address blocks:        201.71.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:11:7d:df:24:08:e1:65:76:ad:7b:f4:b3:3e:12:8c:b3:56:3b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2
        Validity
            Not Before: Jul 15 15:15:00 2026 GMT
            Not After : Jul 14 15:20:00 2027 GMT
        Subject: CN=3F729FD99514BD339CD13FD2C5782F859FE225DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:38:e7:9b:90:e6:f1:b5:d5:d8:18:c8:b7:
                    6d:93:ec:5e:f2:4e:2c:86:59:bd:95:86:8c:d1:1f:
                    9f:0d:cf:ad:85:da:30:78:c0:1c:cf:2d:dc:9c:94:
                    c1:e0:3e:41:a3:0a:f4:d1:e9:a0:ff:f9:52:b5:af:
                    08:ca:4d:a3:5e:de:f1:eb:db:66:08:1c:cb:e9:13:
                    78:d9:46:f5:d9:6d:bf:71:e1:91:c9:ac:c7:68:39:
                    11:6a:67:e0:b9:95:95:79:96:0a:76:49:31:38:9c:
                    60:e8:0c:ac:f4:b4:27:c9:09:9c:9f:3f:fa:28:05:
                    de:6a:48:93:72:89:91:b0:fd:81:58:47:d3:b7:1c:
                    ec:bb:01:c1:99:0c:df:3f:fb:a1:03:a5:94:54:52:
                    1b:f3:c0:df:4f:b4:c1:6c:ab:f8:a3:19:d4:8f:65:
                    0f:95:5b:4b:26:47:34:1d:1f:ee:18:3b:70:d8:53:
                    25:4d:2a:a0:81:54:ca:c3:2d:a7:4d:1b:3d:67:b4:
                    f5:79:ed:51:af:c1:b8:1a:68:67:09:06:b9:76:cb:
                    96:b3:67:c9:ee:e7:f4:71:2a:37:09:ca:ee:a3:e7:
                    c9:c2:d8:2b:ff:3f:25:18:a5:9d:c2:4d:a1:c8:e5:
                    f3:1c:f2:12:71:b9:2b:25:49:48:03:a0:fb:38:b4:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:72:9F:D9:95:14:BD:33:9C:D1:3F:D2:C5:78:2F:85:9F:E2:25:DB
            X509v3 Authority Key Identifier:
                keyid:B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/3230312e37312e322e302f32332d3234203d3e20323639393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:9a:db:9a:28:0f:6e:80:fc:bf:dd:8f:ee:e4:a7:49:20:
         56:a3:45:fb:56:45:ff:29:3a:56:c8:85:52:78:4c:1c:9f:84:
         e1:01:cb:55:3d:59:65:55:0f:fd:88:5d:11:8b:f7:f0:b7:92:
         8f:47:6a:7c:9c:95:a1:9e:f0:27:77:71:af:1d:db:a0:c8:45:
         aa:74:25:a8:e7:86:14:d0:ab:78:66:5e:e7:05:65:b8:16:02:
         ef:58:4f:4a:cb:06:57:6b:35:5e:a6:07:d2:b9:b6:4a:49:0b:
         2b:5a:e4:1c:ae:ac:98:72:ff:4d:3f:df:f5:db:76:5c:17:76:
         c5:85:47:7f:17:ea:e5:fd:4e:94:17:48:ea:2f:a6:41:f4:8a:
         39:53:57:6b:bd:de:4e:16:53:30:b0:88:07:22:9e:e0:13:a6:
         70:6d:99:23:03:12:8b:94:99:fd:99:16:20:26:cc:2a:f2:a3:
         24:f0:24:8f:4e:ae:0a:69:1b:0f:b1:fa:75:37:97:a4:2b:4e:
         32:98:48:24:f9:52:f7:e8:1a:e7:ad:ed:4e:67:93:e2:67:49:
         22:f7:d7:b9:a8:e2:7e:e9:29:5e:e8:dc:3c:9f:b1:a3:a1:e8:
         1b:e8:17:ab:ca:fe:b5:70:d2:84:ec:4d:b6:8e:a0:c7:14:30:
         6b:fa:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:46:22 2026 by rpki-client