Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3230312e3135392e3232302e302f32322d3234203d3e203230303830.roa
File:                     3230312e3135392e3232302e302f32322d3234203d3e203230303830.roa (raw, json)
Hash identifier:          52jaIeJdNfsNk8gI7aqHBGDXYdvR3lVgjt1Wh+BOEak=
Subject key identifier:   C4:02:22:CD:4F:AB:1D:81:91:6E:AB:86:D1:C6:34:FE:5A:9D:CD:DD
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       2986988126C817AF69FD912DE07DB6EEC4306338
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3230312e3135392e3232302e302f32322d3234203d3e203230303830.roa
Signing time:             Thu 07 May 2026 13:25:00 +0000
ROA not before:           Thu 07 May 2026 13:20:00 +0000
ROA not after:            Thu 06 May 2027 13:25:00 +0000
asID:                     20080
IP address blocks:        201.159.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 13:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:86:98:81:26:c8:17:af:69:fd:91:2d:e0:7d:b6:ee:c4:30:63:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: May  7 13:20:00 2026 GMT
            Not After : May  6 13:25:00 2027 GMT
        Subject: CN=C40222CD4FAB1D81916EAB86D1C634FE5A9DCDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:87:d8:ec:35:b3:15:ce:c2:dd:da:dd:28:
                    02:e7:b0:2e:38:bb:fa:c1:b5:c2:45:9f:94:9e:a8:
                    8c:87:3b:4a:ab:79:69:a9:61:fc:c8:18:22:ef:4f:
                    a7:91:2a:2a:14:bc:61:09:8f:31:e2:d6:09:da:25:
                    62:7c:71:69:9f:ca:d4:a8:76:fb:1e:09:cc:ef:bc:
                    0d:dc:20:b1:bc:ed:a6:7a:0c:9b:7f:be:74:42:57:
                    e9:cc:ec:b2:a1:3f:2e:3b:a8:a7:fd:5b:fb:36:55:
                    08:40:3f:09:d9:9b:d8:d3:f0:2b:c3:4c:67:cf:6d:
                    0e:2b:5c:b6:5a:68:1b:e9:ad:d0:94:3d:0d:0b:76:
                    14:d5:c2:91:dc:54:cf:7a:f8:6e:1c:ca:d8:d1:31:
                    11:eb:ac:bf:f7:b1:88:df:50:4f:3b:0f:cb:8a:81:
                    e4:5d:ed:cc:73:bd:63:7f:b9:5d:0f:65:50:b0:f7:
                    89:97:6c:12:82:e7:d2:a7:90:1f:3a:1a:ce:a1:31:
                    0e:85:4d:2b:9a:b6:23:2d:d3:3e:ea:02:c4:46:0f:
                    39:2c:4b:f6:0e:41:38:ad:f8:63:83:60:62:9d:13:
                    97:c0:a5:d1:cf:0d:a4:e2:e5:5d:95:49:19:82:f6:
                    ea:4a:72:2e:24:ea:de:b1:21:38:e1:85:ce:0a:44:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:22:CD:4F:AB:1D:81:91:6E:AB:86:D1:C6:34:FE:5A:9D:CD:DD
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3230312e3135392e3232302e302f32322d3234203d3e203230303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:63:62:af:a7:c7:b0:76:2b:6a:10:77:94:b9:de:ee:9b:
         3c:b9:58:25:5d:bc:f2:ca:cc:f0:c7:2f:f0:d1:03:7a:e8:b9:
         ef:58:a4:9c:3e:fb:81:7a:4c:48:fc:38:e7:12:86:4a:80:df:
         81:73:02:bd:c5:4f:13:49:f8:63:9b:52:73:5b:97:9a:9c:76:
         17:00:ab:1d:fa:1f:cd:d9:d0:28:4f:1f:6a:54:bd:b5:58:32:
         3f:5d:de:90:78:79:3a:44:52:80:44:62:2f:6a:e7:3d:2e:e3:
         27:a3:7d:99:98:aa:a2:3a:e4:df:5d:ad:6a:86:bc:e0:f8:d5:
         59:cd:e4:fc:1e:91:ca:8b:5f:e8:d7:ae:bb:79:90:f6:42:a3:
         a5:90:5d:ec:1c:56:c3:aa:4a:2b:4d:43:30:6d:51:85:eb:ec:
         9a:09:11:95:0e:a5:89:8d:aa:3c:eb:30:e3:23:18:fc:b5:bf:
         68:b9:6d:f9:73:be:a9:14:42:ec:af:2b:67:e9:cf:42:28:e7:
         e1:23:42:6d:f8:9b:20:77:01:c2:4a:36:69:e0:0e:31:83:d3:
         81:00:e8:53:f5:28:a7:8f:1b:a9:f8:20:bd:d3:f7:4a:fa:9e:
         8c:01:6a:de:78:f5:10:95:05:12:87:4a:a4:70:b8:fa:b8:91:
         3b:fb:2e:2f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKYaYgSbIF69p/ZEt4H227sQwYzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2MDhGNDQ5QkJGM0Y4NjgxOUY5NTMwNzY1NEVGNUQ3
NDBBOTA4NDAeFw0yNjA1MDcxMzIwMDBaFw0yNzA1MDYxMzI1MDBaMDMxMTAvBgNV
BAMTKEM0MDIyMkNENEZBQjFEODE5MTZFQUI4NkQxQzYzNEZFNUE5RENEREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaXofY7DWzFc7C3drdKALnsC44
u/rBtcJFn5SeqIyHO0qreWmpYfzIGCLvT6eRKioUvGEJjzHi1gnaJWJ8cWmfytSo
dvseCczvvA3cILG87aZ6DJt/vnRCV+nM7LKhPy47qKf9W/s2VQhAPwnZm9jT8CvD
TGfPbQ4rXLZaaBvprdCUPQ0LdhTVwpHcVM96+G4cytjRMRHrrL/3sYjfUE87D8uK
geRd7cxzvWN/uV0PZVCw94mXbBKC59KnkB86Gs6hMQ6FTSuatiMt0z7qAsRGDzks
S/YOQTit+GODYGKdE5fApdHPDaTi5V2VSRmC9upKci4k6t6xITjhhc4KRAKBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxAIizU+rHYGRbquG0cY0/lqdzd0wHwYDVR0j
BBgwFoAUEmCPRJu/P4aBn5UwdlTvXXQKkIQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDI0OUE2MzhEREYyNkZDQ0E0RTMyM0I3QTM2QjdFQTI4
MjkwRDQzMTMzNjkwMzZGNDJEQjU0OTc2NzIyRTQ5LzAvMTI2MDhGNDQ5QkJGM0Y4
NjgxOUY5NTMwNzY1NEVGNUQ3NDBBOTA4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjYwOEY0NDlCQkYzRjg2ODE5
Rjk1MzA3NjU0RUY1RDc0MEE5MDg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyNDlBNjM4RERGMjZGQ0NBNEUzMjNCN0EzNkI3RUEyODI5MEQ0MzEz
MzY5MDM2RjQyREI1NDk3NjcyMkU0OS8wLzMyMzAzMTJlMzEzNTM5MmUzMjMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzAzODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyZ/c
MA0GCSqGSIb3DQEBCwUAA4IBAQBRf2Nir6fHsHYrahB3lLne7ps8uVglXbzyyszw
xy/w0QN66LnvWKScPvuBekxI/DjnEoZKgN+BcwK9xU8TSfhjm1JzW5eanHYXAKsd
+h/N2dAoTx9qVL21WDI/Xd6QeHk6RFKARGIvauc9LuMno32ZmKqiOuTfXa1qhrzg
+NVZzeT8HpHKi1/o1667eZD2QqOlkF3sHFbDqkorTUMwbVGF6+yaCRGVDqWJjao8
6zDjIxj8tb9ouW35c76pFELsrytn6c9CKOfhI0Jt+JsgdwHCSjZp4A4xg9OBAOhT
9Sinjxup+CC90/dK+p6MAWreePUQlQUSh0qkcLj6uJE7+y4v
-----END CERTIFICATE-----
Generated at Wed May 13 15:46:40 2026 by rpki-client