Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39322e302f32322d3232203d3e203134323332.roa
File:                     3230312e3231392e39322e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          rQXFrcrGHJvTXyRbzUlAX4t1PUKpJSUAIFv0t7Z3N9c=
Subject key identifier:   1D:84:4F:37:01:94:24:0A:F2:0A:5C:25:6D:34:A5:E2:9F:32:8A:D7
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       1459E513F205B99D7E246A3204593B8448AE13FF
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39322e302f32322d3232203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:06 +0000
ROA not before:           Fri 16 Oct 2026 15:55:06 +0000
ROA not after:            Fri 15 Oct 2027 16:00:06 +0000
asID:                     14232
IP address blocks:        201.219.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 04:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:59:e5:13:f2:05:b9:9d:7e:24:6a:32:04:59:3b:84:48:ae:13:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:06 2026 GMT
            Not After : Oct 15 16:00:06 2027 GMT
        Subject: CN=1D844F370194240AF20A5C256D34A5E29F328AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:14:1e:d7:48:4d:94:8a:de:c8:10:06:9d:
                    a6:9c:75:a9:fb:cd:76:a1:57:00:49:ba:24:83:87:
                    c1:6b:07:ab:28:a0:4b:0a:38:44:cd:8e:43:b4:f9:
                    d3:a2:e5:b6:93:2d:35:c7:24:5e:21:d5:9a:4f:b7:
                    d6:19:28:3b:51:7f:77:23:d5:42:dc:79:a6:f8:44:
                    19:47:c6:86:7c:25:d7:28:37:af:e8:ee:f1:fd:48:
                    3b:67:d4:08:b1:a9:4d:0c:f4:e3:76:78:a2:5e:40:
                    b8:5a:7c:c3:72:ca:95:15:1b:fd:19:fc:92:87:cf:
                    f1:cc:bd:6a:f4:74:a3:55:ff:1a:77:ff:a1:1a:f1:
                    26:03:9e:df:38:ac:76:a5:01:bf:c5:17:71:6c:42:
                    48:f3:f5:16:ba:58:b3:72:92:2e:e5:0f:5b:0a:3b:
                    0b:b5:4b:82:b9:39:e5:cc:64:80:94:3a:4a:d6:73:
                    31:37:22:3b:99:aa:84:a9:84:31:38:9a:53:12:33:
                    21:35:7a:a0:46:35:3a:82:16:83:f3:0b:3b:31:43:
                    6d:bb:cd:3c:7f:1f:98:07:a2:82:76:b7:71:7d:77:
                    b2:c1:ba:62:9f:be:c2:35:9d:c5:9c:9f:c3:33:16:
                    bb:31:1c:e0:d7:c9:ca:03:f0:25:2a:49:48:10:69:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:84:4F:37:01:94:24:0A:F2:0A:5C:25:6D:34:A5:E2:9F:32:8A:D7
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39322e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:6a:dd:cd:09:04:dd:7a:be:f5:65:74:a5:0a:d5:2f:ac:4b:
         f7:5d:41:0e:49:82:10:57:17:97:d9:39:3b:6d:21:48:8c:3d:
         77:75:85:d0:d5:84:b0:4e:64:ab:7f:5a:f4:6d:f6:3b:c2:d4:
         da:18:a7:16:3f:c1:36:33:30:58:d4:72:92:f2:be:72:c7:06:
         5c:5e:2d:46:1a:56:3a:eb:2c:51:fb:3a:12:fe:eb:67:2d:dd:
         19:e9:68:7e:de:0f:86:60:d4:73:e3:11:2d:5b:7f:27:b0:85:
         eb:b3:b3:3e:f0:ec:3b:c0:d9:b5:c1:20:a0:cf:fd:b0:6c:92:
         de:1e:7d:28:63:bb:73:66:15:04:06:d0:53:4e:80:6f:cc:a5:
         2c:1c:6f:72:03:27:78:3e:8a:cb:15:4a:5e:54:3b:45:ee:af:
         41:3b:34:87:12:b1:19:3c:2b:d9:d6:38:ca:96:ae:d1:a6:f0:
         5d:ca:01:41:bf:7a:be:e6:05:63:b1:08:46:9c:81:61:20:a2:
         c7:d6:c5:b7:a6:f7:bf:37:97:69:35:af:ad:f2:5e:58:f1:36:
         eb:5b:c2:ca:51:d9:0c:f5:66:3c:f3:26:be:d1:34:64:d0:9c:
         cd:e1:33:b5:e9:9d:82:30:28:b1:1f:0a:1f:21:eb:8a:30:3a:
         2a:cf:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:10:58 2026 by rpki-client