Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/322e3135322e34302e302f32332d3233203d3e20323732383533.roa
File:                     322e3135322e34302e302f32332d3233203d3e20323732383533.roa (raw, json)
Hash identifier:          FmFIIZ3wyvPpFx6lbEoHmXZywdJL+udV1y8sdDkQHfY=
Subject key identifier:   B7:E0:F0:9B:A5:54:3A:34:E3:42:C5:0E:0E:E4:7D:5B:A9:4D:EE:10
Certificate issuer:       /CN=BB53203F85A93FA4B10F62E703E81BB2C18359E2
Certificate serial:       10E02932A68A59FC12FE57E991E1546F16F3F99C
Authority key identifier: BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/322e3135322e34302e302f32332d3233203d3e20323732383533.roa
Signing time:             Mon 20 Jul 2026 15:00:00 +0000
ROA not before:           Mon 20 Jul 2026 14:55:00 +0000
ROA not after:            Mon 19 Jul 2027 15:00:00 +0000
asID:                     272853
IP address blocks:        2.152.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e0:29:32:a6:8a:59:fc:12:fe:57:e9:91:e1:54:6f:16:f3:f9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB53203F85A93FA4B10F62E703E81BB2C18359E2
        Validity
            Not Before: Jul 20 14:55:00 2026 GMT
            Not After : Jul 19 15:00:00 2027 GMT
        Subject: CN=B7E0F09BA5543A34E342C50E0EE47D5BA94DEE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:39:32:a4:eb:9b:64:d4:78:7a:cd:ef:bd:
                    50:82:ac:5a:36:08:c7:2f:0c:31:a8:b4:52:6d:38:
                    a3:03:2c:a0:56:bd:26:b2:9f:2f:25:fd:f4:e0:3c:
                    18:84:24:31:89:3f:4a:ac:ed:cc:49:e9:2e:c6:aa:
                    a1:fd:ce:09:92:b4:51:1f:e4:6d:55:d7:93:37:ff:
                    11:3b:67:c1:aa:7f:7f:9c:88:ed:2c:13:c2:b3:7d:
                    a2:9d:ef:c0:ec:98:5f:77:25:db:52:a1:fb:91:93:
                    bf:7c:ec:aa:57:b9:e8:5d:77:2a:9b:cb:81:2f:9f:
                    69:9f:60:92:6a:57:bc:d1:8d:eb:7a:a4:89:3e:28:
                    0a:b4:97:35:ec:cc:49:9c:ce:fa:05:b3:5b:1a:ba:
                    ba:0c:73:c2:97:78:69:a6:67:d6:42:02:ec:96:48:
                    f0:bd:ed:3e:da:7f:28:39:0f:2f:b6:ca:02:a4:7a:
                    d2:aa:cd:85:93:ff:ea:1d:72:26:ce:ec:df:ad:9c:
                    a3:ed:0a:a4:06:07:94:70:b7:89:6c:ab:f8:bc:c9:
                    f8:c0:25:32:6d:8c:1a:f4:a0:57:13:a6:52:12:d7:
                    6c:28:3c:4d:dc:7d:2f:99:fd:79:88:37:a5:e3:58:
                    8e:1a:64:0a:91:8e:da:b0:7d:55:72:0f:fb:8e:c2:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E0:F0:9B:A5:54:3A:34:E3:42:C5:0E:0E:E4:7D:5B:A9:4D:EE:10
            X509v3 Authority Key Identifier:
                keyid:BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/322e3135322e34302e302f32332d3233203d3e20323732383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.152.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:24:dc:e1:2d:74:ab:3c:a9:74:10:29:82:52:e0:73:c6:9a:
         8e:c0:21:ee:96:52:2f:18:63:d6:d7:a4:18:18:a7:cf:00:78:
         a3:ed:35:db:92:67:7f:86:cb:11:8d:93:4b:64:2d:16:e9:a5:
         92:b3:12:46:72:c0:6c:62:0d:7c:61:36:02:44:8b:17:12:8f:
         b0:74:6b:f9:e0:52:72:22:4c:67:ce:ff:26:b8:05:1c:77:db:
         d6:e9:e4:02:4a:2b:e5:f9:68:2d:a5:a5:94:9e:7f:ef:e8:36:
         81:5a:3c:51:8b:79:96:cf:8a:85:c4:7c:0e:16:6b:92:8b:02:
         a4:68:8b:44:00:54:56:2b:1c:75:62:3d:d2:ee:56:7a:d0:e1:
         3c:14:8a:94:0d:66:56:ac:2a:ef:c5:08:e7:60:c2:2d:df:65:
         4d:d0:1a:64:29:a3:8b:13:03:0a:43:50:9b:98:62:9e:cf:f6:
         e0:a5:55:02:75:78:d9:f4:a5:6b:14:df:ac:c3:c0:d0:99:50:
         27:27:c4:fd:15:64:1f:ba:4c:96:fa:c8:2b:09:02:8b:51:7b:
         18:5f:af:3c:ea:5f:45:5b:c5:6b:4d:c4:5f:0d:c2:6d:f0:30:
         26:f0:53:2c:be:ba:7b:60:0d:03:dd:90:82:1b:33:95:5d:5b:
         6e:5d:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:33 2026 by rpki-client