Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230312e3135302e3136322e302f32342d3234203d3e20323633323432.roa
File:                     3230312e3135302e3136322e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier:          +zLKDfRZKbtdneP152QEyU6DghQOflc8JMai2ZE5agY=
Subject key identifier:   49:32:1D:03:8C:BD:5C:1D:74:74:0D:81:D8:F7:00:99:C1:FD:04:CF
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       6210018551AF0800EB98D122A685FE73CB773701
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230312e3135302e3136322e302f32342d3234203d3e20323633323432.roa
Signing time:             Thu 12 Mar 2026 15:15:00 +0000
ROA not before:           Thu 12 Mar 2026 15:10:00 +0000
ROA not after:            Thu 11 Mar 2027 15:15:00 +0000
asID:                     263242
IP address blocks:        201.150.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:01:85:51:af:08:00:eb:98:d1:22:a6:85:fe:73:cb:77:37:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Mar 12 15:10:00 2026 GMT
            Not After : Mar 11 15:15:00 2027 GMT
        Subject: CN=49321D038CBD5C1D74740D81D8F70099C1FD04CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:8e:43:39:73:72:25:94:97:e2:98:87:75:
                    d0:28:4e:77:a1:83:8b:5f:eb:e0:df:99:ae:ef:27:
                    f7:68:7d:61:20:2c:4b:3a:b7:30:02:f3:6d:0a:63:
                    b1:20:95:f3:4e:ca:33:31:be:40:85:71:50:4e:43:
                    16:81:d0:38:14:3b:bd:58:b4:36:5d:96:d2:c1:ec:
                    b1:f5:e4:d2:16:88:f7:80:67:51:58:af:d4:83:d0:
                    a3:8d:39:0e:9c:67:22:a0:e8:3c:9e:97:47:64:2b:
                    53:03:12:61:55:82:d0:65:f9:09:51:90:55:16:64:
                    6a:24:47:03:5f:ce:8c:b9:d0:11:f9:e4:18:43:1a:
                    86:14:0c:e8:f6:4e:0b:50:15:3c:7d:b1:f2:62:88:
                    bf:5a:4a:71:8f:f2:ae:dd:36:87:2f:b6:2e:9d:fe:
                    12:c7:0a:0a:29:07:4a:9c:ee:c8:a7:19:8a:2c:b2:
                    f7:e1:4e:91:77:72:88:0b:26:fa:68:41:4a:7a:48:
                    47:ff:d4:ad:38:e8:7d:5e:1f:7f:18:c8:d4:9a:f5:
                    2a:17:8b:fa:ed:b2:34:41:2e:a0:41:a0:7c:2f:58:
                    d3:1f:92:10:91:94:55:32:60:3a:7e:d1:52:76:58:
                    c6:f2:85:85:5a:ea:c7:db:83:19:fe:d7:fc:a6:de:
                    64:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:32:1D:03:8C:BD:5C:1D:74:74:0D:81:D8:F7:00:99:C1:FD:04:CF
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230312e3135302e3136322e302f32342d3234203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:c5:25:a1:7b:ab:73:3b:89:0b:ca:ff:c0:42:d4:23:ea:
         91:bd:c7:e5:31:cc:e5:ba:6b:04:f5:0e:8c:26:de:cd:fc:58:
         c2:28:00:55:f2:d1:07:61:55:d7:4e:1c:34:1d:ad:2e:2a:70:
         29:3f:90:fc:c0:da:a4:d0:f4:9f:20:03:79:61:d2:45:74:1b:
         fb:73:78:2b:5e:1d:da:fc:23:68:a4:f4:0d:8a:e5:00:39:0f:
         c8:c2:37:37:20:39:94:05:99:d0:a5:c4:92:4e:02:f4:64:8a:
         1c:3e:81:27:9d:c6:19:6e:0b:93:07:fe:dc:24:c3:d2:2a:64:
         24:84:9f:b5:3d:99:60:98:a9:6a:12:45:96:1a:af:db:b3:29:
         96:15:29:b9:f7:10:44:8f:ae:b5:33:10:03:a3:da:05:53:b0:
         ae:6d:16:b4:43:47:93:38:1b:3f:f4:0c:4e:c1:4c:04:5a:e0:
         6b:51:90:02:c6:22:8f:68:2f:28:8e:07:18:b6:90:9f:a6:ff:
         43:9b:58:f5:75:0b:79:00:1d:f5:c0:3d:54:b5:09:2b:88:1f:
         72:4c:3c:f3:fd:85:eb:1b:a8:8c:c1:90:44:ee:81:bc:4a:2d:
         db:f7:d6:80:e4:2e:f4:2f:4f:5c:cc:ca:85:45:d8:73:2d:b8:
         49:4d:67:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:49:02 2026 by rpki-client