Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203133333335.roa
File:                     3230312e3232312e3132302e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          PIM+lwEABiWiIZ4NruX8oFJwHMlrybUwIzjrv8dFyIA=
Subject key identifier:   B6:D4:4F:16:FB:12:6A:0C:70:28:29:F1:49:9A:36:D2:BB:C9:EB:52
Certificate issuer:       /CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
Certificate serial:       2751859EE8D26642FF18162C16E361A98E5BEECC
Authority key identifier: 0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203133333335.roa
Signing time:             Fri 20 Feb 2026 13:45:00 +0000
ROA not before:           Fri 20 Feb 2026 13:40:00 +0000
ROA not after:            Fri 19 Feb 2027 13:45:00 +0000
asID:                     13335
IP address blocks:        201.221.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 23:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:85:9e:e8:d2:66:42:ff:18:16:2c:16:e3:61:a9:8e:5b:ee:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
        Validity
            Not Before: Feb 20 13:40:00 2026 GMT
            Not After : Feb 19 13:45:00 2027 GMT
        Subject: CN=B6D44F16FB126A0C702829F1499A36D2BBC9EB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:d4:bf:77:fe:dd:74:c2:7f:90:5d:df:df:
                    6a:a2:22:d6:2a:24:d0:b2:92:c6:ac:71:f2:16:2f:
                    0f:7b:60:a6:62:de:11:23:81:35:58:b3:a1:e2:e8:
                    5d:97:96:4b:76:8f:fb:a0:50:1c:30:1a:84:63:1d:
                    b4:72:af:2c:df:24:c9:14:55:ac:2a:49:eb:f6:c3:
                    3d:8d:7c:78:42:ac:da:7e:f3:42:bd:ae:b0:c1:bf:
                    0e:24:ad:88:52:a7:b6:ad:ff:c1:b7:4a:8c:27:87:
                    5c:9e:49:ce:d0:1c:0b:2e:d9:9f:16:52:35:0d:c7:
                    0d:3e:02:b8:ab:24:c4:4b:9a:c1:88:09:8c:c2:ef:
                    67:f4:ec:9d:7d:c8:fb:bc:aa:9b:2f:6a:d6:39:1c:
                    f6:44:b3:cd:b9:3b:bc:b6:a5:7d:23:00:f0:1f:c8:
                    08:ec:0e:fa:10:a0:1d:85:14:b1:71:f9:61:1c:43:
                    74:4a:79:b4:b1:f2:db:58:53:58:25:24:3c:e7:76:
                    0c:db:a9:16:ba:ad:0b:3b:6e:5d:e5:4f:bc:4f:13:
                    1f:48:74:3c:e5:40:71:9c:8f:54:cb:80:9f:01:9a:
                    26:22:5d:48:9a:ea:62:52:e6:6c:de:24:09:7b:64:
                    f1:bb:9e:cb:d8:b9:9d:9e:7e:5f:77:5c:d1:bf:7f:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:4F:16:FB:12:6A:0C:70:28:29:F1:49:9A:36:D2:BB:C9:EB:52
            X509v3 Authority Key Identifier:
                keyid:0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:59:8f:4f:f3:b2:f6:95:2a:39:0f:ab:35:de:9b:ba:2b:47:
         a1:cb:82:90:16:91:57:6a:75:ae:40:20:d0:5a:c9:b0:2d:39:
         a4:35:0c:54:1b:3e:37:fe:3d:ab:f6:8f:72:a6:d7:29:40:58:
         77:ff:f5:50:53:63:0c:aa:35:fb:54:03:97:e0:9f:a8:7c:b8:
         57:13:8c:a3:d7:08:eb:18:a9:13:b0:4b:2d:00:d2:b5:42:46:
         a3:61:af:d9:87:6b:87:4e:f9:d0:c8:50:92:7c:47:10:cb:7d:
         3a:0d:69:2f:07:33:ef:76:1f:04:65:7f:b4:e6:a7:b9:a5:99:
         e2:88:6b:89:15:9c:9a:25:5d:81:95:9d:38:72:aa:1f:a8:ae:
         7d:80:b7:a0:24:b0:35:59:af:e4:6a:a8:04:22:f0:11:4e:7e:
         03:8a:01:16:ad:22:1b:c6:4f:06:da:c8:e6:05:de:a7:c2:e4:
         5a:22:49:61:53:4f:98:73:68:9c:d2:a4:b0:f3:25:a5:0b:91:
         29:f2:cd:4e:7c:41:51:67:df:dc:31:00:96:69:e6:85:fd:a2:
         62:08:84:bb:52:aa:18:95:05:14:78:f4:a3:0c:a9:f0:28:8a:
         16:07:43:f6:68:96:48:1f:fa:e1:89:b2:8d:20:6d:d5:5b:df:
         04:64:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:38 2026 by rpki-client