Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa
File:                     3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa (raw, json)
Hash identifier:          fv54MAOJH1kRtBQyQBbVf0Qpb3qmrekZ3x2PX6Lf9hY=
Subject key identifier:   86:0E:C6:38:3D:78:D8:00:47:AE:93:AA:77:1F:4C:5F:87:3C:71:44
Certificate issuer:       /CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
Certificate serial:       3D5BBE17BF016EB886A6F5331842E927FBEA1A80
Authority key identifier: AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa
Signing time:             Tue 16 Sep 2025 19:46:57 +0000
ROA not before:           Tue 16 Sep 2025 19:41:57 +0000
ROA not after:            Tue 15 Sep 2026 19:46:57 +0000
asID:                     263695
IP address blocks:        201.131.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5b:be:17:bf:01:6e:b8:86:a6:f5:33:18:42:e9:27:fb:ea:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
        Validity
            Not Before: Sep 16 19:41:57 2025 GMT
            Not After : Sep 15 19:46:57 2026 GMT
        Subject: CN=860EC6383D78D80047AE93AA771F4C5F873C7144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:17:0d:6d:71:a3:dc:31:fd:cb:cd:fd:fa:
                    44:98:07:37:87:a8:d9:7f:2e:46:71:72:f8:f2:e4:
                    f5:0b:72:ba:75:f0:0b:02:6a:7d:ce:f3:a5:d5:34:
                    41:42:1e:b0:16:91:96:6d:e2:6a:d3:06:de:41:a1:
                    46:db:94:1d:94:75:ce:1b:fb:e1:e3:84:a8:b9:59:
                    20:08:48:ee:cc:d8:d8:38:25:5a:45:79:6a:5b:0a:
                    3e:75:9b:9a:ea:af:20:33:a6:e1:47:13:2d:de:8e:
                    a7:08:b3:b8:b2:46:9c:1f:05:b7:31:9b:b6:24:ea:
                    61:c8:da:f4:26:dc:0f:cd:41:e4:13:86:ee:fc:08:
                    9a:3f:a3:bf:4d:ce:c0:77:a0:39:20:96:bd:cb:42:
                    5d:ca:08:63:5e:60:6e:8e:23:fc:36:8a:93:35:2d:
                    18:ab:35:a4:27:ee:6a:66:b9:16:59:a5:d2:b1:1c:
                    ae:39:b1:49:a4:3d:a5:c4:c0:91:c9:a5:13:d0:46:
                    9e:31:4d:4e:3c:7b:27:22:e5:0b:65:d9:fb:8d:7d:
                    4b:7a:92:13:d7:4e:80:68:8e:ae:fb:2f:3e:64:35:
                    6c:2f:c4:e6:b8:ed:1f:f4:39:fc:61:8b:67:8f:1b:
                    3d:4e:08:9c:73:ba:5a:5f:10:dd:c2:c1:57:bf:e2:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0E:C6:38:3D:78:D8:00:47:AE:93:AA:77:1F:4C:5F:87:3C:71:44
            X509v3 Authority Key Identifier:
                keyid:AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:7d:b4:e9:66:f1:00:13:16:21:69:99:fc:0f:5f:6b:ee:
         a5:c6:52:6a:5a:2d:5e:ad:de:2a:0f:6f:6e:60:4b:e8:9b:33:
         ac:8f:04:d9:7c:d5:60:5d:36:b5:c6:be:75:04:6f:37:a9:4f:
         7b:78:41:d1:b0:77:ec:96:9b:07:45:ea:3a:3c:0c:b5:2a:67:
         d4:6f:76:92:0d:8f:63:9b:62:ae:6f:a6:07:03:30:73:59:13:
         4a:2f:62:e8:d7:46:f2:9f:71:cf:56:66:22:25:84:80:73:39:
         ae:2a:04:9c:c2:8a:f4:1f:fe:7f:2f:e0:1c:5c:86:a5:cf:fa:
         b1:57:7c:c2:b9:a0:40:dc:b3:17:c9:6a:fb:fd:ef:60:dc:1e:
         39:b4:42:e6:d9:dc:3a:62:26:25:a9:00:1d:6e:c7:b6:78:b7:
         93:ba:bb:83:2f:17:c3:87:90:14:78:9c:2b:1d:d2:a5:41:67:
         c8:f2:af:3a:2a:08:95:c9:a4:44:75:54:0a:38:56:f8:4d:04:
         e6:71:3e:94:1a:9e:a2:15:97:71:90:2e:8e:49:3b:d6:44:fb:
         45:51:ab:5d:f1:f9:fd:76:79:75:e7:86:36:ff:a7:91:c7:77:
         a2:1b:f0:e3:1a:aa:9c:b9:1e:1e:3f:4d:14:16:cf:3b:77:95:
         0f:1a:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:45:57 2025 by rpki-client