Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3233203d3e203139353531.roa
File:                     3230312e3232312e3132342e302f32332d3233203d3e203139353531.roa (raw, json)
Hash identifier:          e6+dAKMcs30vrqrSzSHRPQ3/BPlSi0wjZZNq18678wU=
Subject key identifier:   CA:4C:33:75:D1:8E:43:20:53:50:98:73:D1:04:29:D8:31:A1:77:8C
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       53A54041F7EDAADD5F03E7990F5DB8664F3274A8
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3233203d3e203139353531.roa
Signing time:             Thu 09 Apr 2026 20:38:15 +0000
ROA not before:           Thu 09 Apr 2026 20:33:15 +0000
ROA not after:            Thu 08 Apr 2027 20:38:15 +0000
asID:                     19551
IP address blocks:        201.221.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a5:40:41:f7:ed:aa:dd:5f:03:e7:99:0f:5d:b8:66:4f:32:74:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Apr  9 20:33:15 2026 GMT
            Not After : Apr  8 20:38:15 2027 GMT
        Subject: CN=CA4C3375D18E432053509873D10429D831A1778C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:45:2d:a0:b7:79:fb:a0:56:e6:45:06:12:
                    e7:6a:b6:74:87:2a:b9:10:a6:86:b1:3a:68:ac:af:
                    79:9d:6f:36:ad:b8:d6:53:b5:e2:1f:f6:a0:83:1e:
                    27:9a:b9:4d:3a:2a:a9:db:b1:27:db:e9:8c:ae:40:
                    b4:de:e7:74:c7:3f:b8:7a:85:81:7b:37:17:8f:d1:
                    8b:3e:2e:1a:05:16:aa:84:86:60:ba:f0:e5:48:c9:
                    42:d4:3f:cf:11:7f:a3:76:d0:41:3b:b2:7c:80:f0:
                    2e:e7:a8:f7:c5:c7:6a:1e:b1:db:0e:ae:e5:6e:df:
                    c9:dc:4a:6a:c3:4f:9e:c1:12:32:c5:f0:4b:27:14:
                    fa:b6:e3:01:5e:eb:2a:07:3d:1a:14:27:46:6e:73:
                    f1:9a:10:1f:bb:64:44:45:f6:37:d8:eb:31:fc:d2:
                    85:a9:79:a7:43:43:6b:66:b6:f8:7c:a5:89:c8:73:
                    60:f9:9c:56:88:a4:9e:ce:6b:0f:69:9d:68:b0:52:
                    53:7f:ef:38:d2:f9:32:84:46:7a:e0:06:e8:72:8e:
                    ab:a7:d3:47:23:24:23:61:11:a6:91:d7:d7:a9:db:
                    4b:39:8b:36:bd:16:84:25:9e:2f:7c:6f:fb:b2:04:
                    96:69:97:03:53:e5:c0:d6:36:b2:7c:22:fa:47:19:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4C:33:75:D1:8E:43:20:53:50:98:73:D1:04:29:D8:31:A1:77:8C
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3233203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:0e:1f:c6:22:51:8a:5e:69:0d:c6:1f:d9:82:e9:ff:da:d2:
         ba:68:bd:fd:c1:1f:25:27:f9:7a:70:db:33:55:70:16:50:dc:
         b2:08:6f:e1:47:e2:5d:57:0e:61:84:45:e7:e7:7c:bf:da:91:
         22:4d:a0:87:b1:6e:5f:84:47:ce:b2:c1:e0:1d:b7:76:71:ba:
         eb:d7:76:d3:97:19:f8:5b:ee:55:9c:a7:ce:ba:5c:0e:c2:0d:
         d0:cf:1b:85:a9:2a:9d:d7:36:67:60:dd:e3:b4:37:d3:01:98:
         e2:31:4a:16:e3:4d:25:18:1e:7f:c9:0c:f0:e3:ce:77:04:43:
         9e:4a:94:3e:a0:24:fe:9f:30:61:27:ab:f5:cf:41:77:c3:5c:
         c2:19:af:0b:62:b3:35:df:5c:05:96:50:f0:b7:fe:c7:67:8a:
         63:6e:70:45:0f:52:b7:4d:cd:34:ac:d2:9e:ef:3c:8d:97:bf:
         d0:b4:b7:2a:ec:05:08:95:72:84:0b:ca:d8:fb:e6:0f:5d:5e:
         11:b1:5f:a4:16:84:0d:b3:61:3d:f7:79:d4:07:76:3a:60:a1:
         a1:48:f3:db:39:35:c5:a4:d4:c8:a3:7c:95:8d:19:92:09:d6:
         c4:fa:8c:38:14:57:62:a1:e0:51:00:0c:7a:b4:60:e5:ca:1e:
         92:e1:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:47 2026 by rpki-client