Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3230203d3e203134323332.roa
File:                     3230312e3231392e39362e302f32302d3230203d3e203134323332.roa (raw, json)
Hash identifier:          c4bCy4z9MPsSi9zb3Js2A63c7bAYrxrZNxRspzTGinE=
Subject key identifier:   FD:B3:92:DA:24:7C:2C:79:58:45:BF:C6:B8:69:32:6E:86:86:29:74
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       6B168FBBB3671DA1810FF289B4F31A579D0266B3
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3230203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:00 +0000
ROA not before:           Fri 16 Oct 2026 15:55:00 +0000
ROA not after:            Fri 15 Oct 2027 16:00:00 +0000
asID:                     14232
IP address blocks:        201.219.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:16:8f:bb:b3:67:1d:a1:81:0f:f2:89:b4:f3:1a:57:9d:02:66:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:00 2026 GMT
            Not After : Oct 15 16:00:00 2027 GMT
        Subject: CN=FDB392DA247C2C795845BFC6B869326E86862974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:aa:c8:ab:dc:16:ee:b1:8d:74:ff:fc:b0:
                    38:89:d8:6c:dd:e9:54:b1:67:10:83:73:02:e2:c2:
                    f2:0b:85:0e:72:3d:b7:1d:db:e7:6e:76:f0:40:42:
                    d1:ac:4f:92:fa:cf:8f:c2:21:7c:b6:d6:ce:0b:83:
                    6b:fb:bc:1a:4d:b4:23:16:49:a1:47:63:3b:99:69:
                    cd:ef:d1:5d:1f:ac:4a:9c:ea:5c:8c:c8:64:a7:1c:
                    5e:6d:d7:a7:6e:6f:67:3c:68:ba:4c:53:62:8f:ad:
                    6b:c1:f9:70:e2:65:e6:21:d2:5f:d9:31:4b:12:e8:
                    aa:6b:b3:58:f3:83:f4:c0:85:9d:38:5d:07:48:f2:
                    e8:30:12:70:4e:39:a5:36:be:ca:2d:c7:96:59:81:
                    26:05:b3:81:32:6b:17:ff:35:06:06:67:22:f5:e5:
                    33:43:d6:d5:07:fe:9b:48:02:8a:c9:89:a0:97:6f:
                    a7:68:89:a2:65:ae:e8:09:eb:39:ee:e4:8a:97:0d:
                    ac:07:22:7b:69:da:fe:46:45:08:b1:23:43:b5:a8:
                    36:7a:d5:39:60:67:9d:69:41:e8:fe:45:14:24:67:
                    ae:eb:67:00:8d:27:39:39:43:ab:dd:09:bb:e8:cd:
                    7d:94:7c:41:dd:dc:f0:14:a3:a2:ab:c4:b2:2d:df:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B3:92:DA:24:7C:2C:79:58:45:BF:C6:B8:69:32:6E:86:86:29:74
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3230203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:60:3a:9f:60:54:2d:a7:c6:10:3e:01:09:fd:38:3e:78:56:
         7c:36:79:f3:5e:2a:2a:ed:f4:6c:b5:53:24:3a:89:e7:08:e4:
         ac:03:6f:8c:d1:fe:4a:bc:a6:ac:95:a5:62:0b:b2:61:67:e3:
         42:97:eb:cb:87:0c:23:78:97:ec:3b:d4:00:c7:77:0a:61:50:
         44:ef:48:5f:ce:1f:17:bf:5d:46:06:2d:e0:42:09:e4:2e:cd:
         72:37:85:5e:c1:38:f6:d2:b2:b5:11:e1:e8:25:03:3d:5f:3f:
         df:13:44:30:8c:a1:7a:9a:d2:ca:00:6e:f5:e5:72:75:4d:d5:
         4a:68:f4:83:6a:8a:3d:e7:4d:fe:a9:6a:b7:dd:02:ca:3b:ac:
         1e:3b:e7:76:49:1d:46:6d:52:17:e9:f7:c9:91:21:bc:76:55:
         e7:b0:4e:45:a5:88:2c:80:77:4b:5d:3d:d5:8a:8a:f3:0f:23:
         4e:25:f8:c1:0f:cc:b5:95:e7:af:be:88:fd:25:d1:6d:8d:fc:
         0e:b7:f4:1b:68:3e:63:51:67:23:04:7a:4b:ac:e3:fc:a8:7a:
         84:f1:f8:b7:76:ce:12:44:cf:a1:9a:c1:13:05:40:43:88:99:
         2f:17:e2:f4:b2:b9:50:02:b6:c9:39:41:cb:cb:23:d8:71:9d:
         ee:ba:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 22:45:56 2026 by rpki-client