Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa
File:                     3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa (raw, json)
Hash identifier:          zKiuFQ5YmvkixkiYVCns5ilnWsCalkNFBVjGdtedPDc=
Subject key identifier:   C9:08:2B:D6:3F:9A:EE:A0:72:E5:5B:75:E2:C8:7D:87:B1:C3:0B:9D
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       212D5C0DCDC204E5621CC31310AD2E5931DA3CD8
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa
Signing time:             Fri 30 Jan 2026 23:28:29 +0000
ROA not before:           Fri 30 Jan 2026 23:23:29 +0000
ROA not after:            Fri 29 Jan 2027 23:28:29 +0000
asID:                     11830
IP address blocks:        143.202.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 23:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2d:5c:0d:cd:c2:04:e5:62:1c:c3:13:10:ad:2e:59:31:da:3c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: Jan 30 23:23:29 2026 GMT
            Not After : Jan 29 23:28:29 2027 GMT
        Subject: CN=C9082BD63F9AEEA072E55B75E2C87D87B1C30B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:fb:4d:70:93:90:f8:52:80:a7:07:3a:ba:
                    24:60:ad:4f:a7:f8:b8:24:ee:99:38:f1:d6:21:5a:
                    c8:0e:70:c6:e3:c0:8b:09:3c:84:87:78:e6:11:9c:
                    7c:fb:fe:aa:bc:64:fe:ce:50:f5:6f:50:a0:8a:8e:
                    99:73:57:c5:a6:76:b0:3e:ac:9a:86:7a:14:ba:22:
                    e0:0d:57:89:1e:45:3c:e0:46:7e:d1:43:81:93:9b:
                    ef:db:38:61:62:3b:15:8c:ad:33:a8:cd:6b:8b:a8:
                    9a:24:16:22:ca:61:f8:ca:73:6f:13:58:47:a1:7e:
                    47:23:e5:44:a0:af:49:a5:bf:2e:07:7f:2d:7f:7a:
                    7c:83:f3:50:37:8e:56:d2:2d:f7:03:80:87:6d:2a:
                    d9:d9:b1:1f:e2:8f:19:b7:fa:13:6c:b1:2c:41:e4:
                    1e:e2:c7:70:b7:7a:c4:f2:84:06:86:a3:cd:29:65:
                    6a:34:1a:87:c0:cd:e1:b5:91:87:4c:49:7b:04:47:
                    58:ad:31:10:1b:2a:65:5b:70:e4:f2:cc:0f:25:51:
                    d9:d4:68:e4:74:b2:ed:02:1f:a2:0d:f8:7c:18:90:
                    69:b1:a0:7d:00:b9:be:5f:0e:22:52:aa:e3:6b:44:
                    f9:09:a5:86:94:4c:b3:61:59:86:ff:70:7d:dd:22:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:2B:D6:3F:9A:EE:A0:72:E5:5B:75:E2:C8:7D:87:B1:C3:0B:9D
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:9d:b1:8c:81:2b:a4:f7:2d:46:65:a3:a2:4a:ef:34:e5:
         44:82:04:65:cb:bd:ab:14:20:46:da:cc:1b:a2:06:f9:05:5c:
         69:53:2a:fa:d0:9b:32:ca:f4:02:58:41:7f:95:ba:61:39:51:
         ea:85:45:ee:9e:c2:52:3e:63:82:f7:54:9c:d6:f1:bd:35:f6:
         2c:8d:b3:76:32:d2:d0:f0:51:5a:44:4f:88:87:cb:d7:67:9e:
         cd:01:f8:e5:1c:d3:aa:b5:2f:6e:c9:1a:8b:38:fe:59:43:8a:
         22:af:60:9d:9f:e6:45:5c:b7:66:b2:3e:57:7e:a0:18:9c:5b:
         ae:b6:91:ff:88:45:57:1b:be:9e:81:30:f1:bb:68:d9:b4:c4:
         82:18:58:35:19:b5:58:2d:a4:3a:ed:6a:4f:cf:30:98:2f:49:
         bb:12:76:00:66:f6:86:60:16:1b:97:31:53:8c:c2:e6:f8:1f:
         9f:c9:08:55:fe:31:17:9c:d0:96:b9:c4:19:4b:fa:63:5d:7a:
         db:b3:7c:ec:a3:b1:f5:4b:8d:49:41:66:86:94:a4:e4:61:38:
         11:db:85:e6:f6:b8:9e:ab:6c:fb:6e:f6:2c:ca:d3:92:a7:a2:
         9e:c6:b9:0d:e8:d7:6a:71:ca:63:6b:7f:a5:ad:66:00:5f:03:
         59:17:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:58 2026 by rpki-client