Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa
File:                     3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa (raw, json)
Hash identifier:          n3K1ftk11H6cK9+nNd7QXj3zDUOT+ho5V/4yE+vxDy0=
Subject key identifier:   DF:DE:AB:70:33:4A:6C:22:D8:0E:4A:CE:78:F0:25:6E:26:07:46:20
Certificate issuer:       /CN=62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC
Certificate serial:       311C6186BAE31BC4622C950652D157C55FC025EA
Authority key identifier: 62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa
Signing time:             Thu 23 Jul 2026 22:35:05 +0000
ROA not before:           Thu 23 Jul 2026 22:30:05 +0000
ROA not after:            Thu 22 Jul 2027 22:35:05 +0000
asID:                     267682
IP address blocks:        201.219.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1c:61:86:ba:e3:1b:c4:62:2c:95:06:52:d1:57:c5:5f:c0:25:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC
        Validity
            Not Before: Jul 23 22:30:05 2026 GMT
            Not After : Jul 22 22:35:05 2027 GMT
        Subject: CN=DFDEAB70334A6C22D80E4ACE78F0256E26074620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:94:df:a2:3a:31:b6:63:1b:1f:f6:ff:99:
                    db:68:8d:9e:9f:ba:43:4b:6d:7e:d6:03:93:9e:27:
                    37:1b:f5:47:75:68:6e:f1:e5:40:cd:88:88:e1:8d:
                    47:f8:3b:17:c8:ca:c4:cb:64:24:11:92:95:a8:35:
                    37:29:68:dd:9d:ac:80:b5:09:4a:12:7c:bc:bf:2a:
                    29:97:6e:10:40:38:90:f1:69:a4:96:ee:ab:cd:2e:
                    4a:17:85:18:45:38:ad:10:9f:b3:cd:85:3e:52:18:
                    0e:d3:00:c7:10:4f:e6:08:6f:36:bb:6e:4c:45:07:
                    2f:c2:df:b1:5b:f6:88:ba:08:5c:40:7c:5c:e1:4b:
                    db:14:81:5e:80:5c:bb:3d:52:0a:6e:d7:92:51:48:
                    c9:38:cc:de:6d:ac:64:e3:a4:27:50:ad:78:ee:3f:
                    22:71:ea:d4:e5:ec:82:e9:06:59:36:0a:56:18:33:
                    89:93:3a:70:d2:b3:44:59:79:51:dc:2f:17:d6:8f:
                    5f:8a:47:21:ae:e5:08:b4:2c:0b:24:e8:34:aa:e7:
                    d6:75:11:ef:59:75:6d:17:c8:57:fb:6a:b5:90:b1:
                    15:3b:a5:4c:39:53:8e:c9:be:a4:fe:ac:ae:f1:f3:
                    a2:f2:d5:ef:f6:ff:1f:e4:62:44:45:d4:ea:0e:fc:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DE:AB:70:33:4A:6C:22:D8:0E:4A:CE:78:F0:25:6E:26:07:46:20
            X509v3 Authority Key Identifier:
                keyid:62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8b:25:ca:80:d4:55:2c:81:77:60:57:76:4d:1b:6d:25:5d:
         cd:68:44:61:aa:3d:15:7b:14:be:97:ce:f8:8f:ef:57:91:f3:
         0c:08:ae:07:eb:6f:4c:70:3d:cc:01:d2:c3:f9:eb:4f:3c:08:
         82:3a:9c:db:c5:c3:f8:61:0c:e8:44:9f:48:f8:39:85:1f:1a:
         ea:9e:5e:a3:98:fc:4d:c1:54:51:15:9f:8e:b5:f7:0c:f8:39:
         3f:b4:3b:c8:cf:f2:4a:28:1e:fd:09:1c:67:28:86:1c:96:01:
         99:3e:bf:37:bd:f2:47:9d:e4:5b:dc:4a:80:c6:0b:05:fc:8c:
         66:dd:31:c1:c8:32:fc:63:6c:a3:b0:d6:21:22:c9:cc:e9:d6:
         9a:92:be:6b:e0:c6:c1:82:66:39:b7:b3:53:f3:cc:95:ff:ac:
         5b:c0:e2:64:de:c1:74:f3:2b:b9:4a:2e:15:c4:68:af:8e:c8:
         3b:ea:6d:d2:e1:b3:d7:71:9a:b9:3d:75:0a:5e:5b:54:3a:cc:
         f4:b1:07:5c:32:51:b9:ac:a9:93:e3:a5:f9:b8:b6:e6:23:a9:
         1e:06:b3:97:20:37:1d:17:f2:2f:74:37:ee:93:cc:92:48:1f:
         e3:25:e2:06:12:f4:ea:3d:b2:91:5f:3f:57:ff:74:44:4a:39:
         75:9a:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:28 2026 by rpki-client