Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa
File:                     3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa (raw, json)
Hash identifier:          Qolt7r4xYyos3kNoB4DHrcjvAMKzlf1plDb34YRiesU=
Subject key identifier:   AB:68:D4:6A:BF:87:AE:DD:52:67:E8:A6:B7:54:40:68:31:57:BD:75
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       414EE06FB185C4F3F8EF3FB00E37C96B16737F6C
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa
Signing time:             Fri 10 Apr 2026 15:30:00 +0000
ROA not before:           Fri 10 Apr 2026 15:25:00 +0000
ROA not after:            Fri 09 Apr 2027 15:30:00 +0000
asID:                     52266
IP address blocks:        201.219.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 10:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4e:e0:6f:b1:85:c4:f3:f8:ef:3f:b0:0e:37:c9:6b:16:73:7f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Apr 10 15:25:00 2026 GMT
            Not After : Apr  9 15:30:00 2027 GMT
        Subject: CN=AB68D46ABF87AEDD5267E8A6B75440683157BD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:ed:d7:d4:b7:2e:7e:a0:ab:c3:9d:b6:bc:
                    cf:c5:7d:e1:d5:a3:8f:b0:55:57:71:83:7c:b4:b5:
                    f1:ba:86:d1:42:62:f7:91:14:e8:48:8e:7a:76:fd:
                    e7:9d:86:09:38:80:22:ce:33:eb:53:e5:17:34:38:
                    0d:68:b6:eb:13:3b:58:72:39:2b:1b:06:ae:a6:7d:
                    33:ac:92:01:1c:cb:41:ad:33:02:86:df:5a:1d:2a:
                    fd:ae:12:f7:6f:a4:8f:51:0d:12:3c:e5:28:de:5b:
                    bd:ef:9b:0d:da:69:42:89:2c:d4:f6:26:ae:0f:35:
                    37:70:a6:0c:72:97:05:7c:4a:dc:ce:07:96:25:9e:
                    c3:5c:68:b1:f7:4e:f0:e3:03:2d:5d:75:8c:36:9f:
                    15:04:af:03:68:53:16:1e:0b:b9:77:10:88:33:ed:
                    94:b1:00:0b:ca:cd:49:15:d1:16:11:85:f5:a6:e3:
                    9a:73:00:e1:71:fe:34:9c:0c:e5:50:2a:12:42:15:
                    5f:03:70:79:47:77:60:b2:89:55:d5:00:1a:58:59:
                    45:08:85:dd:c0:cd:b0:95:9c:3a:08:75:34:90:ee:
                    1d:fa:65:49:18:c4:15:0c:5b:0c:55:11:1a:f8:fc:
                    16:6a:8a:f8:43:bd:a9:60:ae:3c:96:6e:1a:34:d1:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:68:D4:6A:BF:87:AE:DD:52:67:E8:A6:B7:54:40:68:31:57:BD:75
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6a:a1:90:24:1c:40:65:14:08:44:27:49:94:87:7a:64:cf:
         9c:33:ac:6d:49:40:e2:6f:31:51:ea:22:46:3e:63:af:90:df:
         9e:41:1b:f2:5e:d0:fc:b4:84:93:1c:39:17:10:6a:f0:db:ac:
         89:ab:b8:b0:b3:67:64:fa:4a:1c:66:c7:ce:e3:82:19:1e:89:
         02:ed:c7:36:8b:10:02:7a:52:df:df:93:49:ca:31:cd:95:09:
         3f:77:64:a2:c7:48:3f:aa:7d:cf:e9:d3:fd:73:d1:aa:81:8f:
         73:58:1c:41:25:66:24:83:70:43:0b:3c:d3:17:86:7e:fc:b3:
         aa:9f:9b:09:87:6a:5c:b6:61:4d:99:64:57:cd:f1:96:0a:a3:
         81:88:64:58:d2:67:53:18:be:40:1b:c7:5f:bf:a2:1a:95:79:
         5e:7e:b8:3f:27:80:cf:25:97:72:01:87:e2:7e:a8:f0:da:d5:
         d8:c8:93:eb:f1:27:42:fe:e8:a5:c0:35:f4:5a:03:86:6f:20:
         9e:a1:ca:61:50:40:99:a3:f6:78:da:02:19:21:dc:18:58:da:
         d9:93:b2:f9:40:5d:05:96:53:5d:e2:f0:24:b6:64:ff:08:5a:
         5f:32:7a:8f:65:10:c1:66:e2:be:40:82:cc:f3:38:21:7b:08:
         f9:a2:f3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:46 2026 by rpki-client