Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135302e302e302f32312d3234203d3e203238353339.roa
File:                     3230312e3135302e302e302f32312d3234203d3e203238353339.roa (raw, json)
Hash identifier:          Fek3d9uBlJsh/Ex3/AC4TbSw3Fks3vrVAoyKYUOVBB0=
Subject key identifier:   0E:D3:CB:3D:53:56:2E:98:72:08:D0:FE:2E:45:7F:72:D8:E3:E6:33
Certificate issuer:       /CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
Certificate serial:       12A4D40B53D051D365614FD6627F6FE379774BEB
Authority key identifier: 88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135302e302e302f32312d3234203d3e203238353339.roa
Signing time:             Tue 14 Apr 2026 17:55:01 +0000
ROA not before:           Tue 14 Apr 2026 17:50:01 +0000
ROA not after:            Tue 13 Apr 2027 17:55:01 +0000
asID:                     28539
IP address blocks:        201.150.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 23:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:d4:0b:53:d0:51:d3:65:61:4f:d6:62:7f:6f:e3:79:77:4b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
        Validity
            Not Before: Apr 14 17:50:01 2026 GMT
            Not After : Apr 13 17:55:01 2027 GMT
        Subject: CN=0ED3CB3D53562E987208D0FE2E457F72D8E3E633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d9:f4:5d:c2:1f:e0:45:87:04:a9:a2:c3:6b:
                    39:6b:af:0f:3e:b2:48:52:5b:34:c1:2e:93:64:2c:
                    8d:d8:a4:03:2c:83:41:04:0e:c4:4c:30:b6:1f:f1:
                    0b:0c:4b:4c:7b:1a:fc:f6:b0:5b:dc:16:d1:af:2b:
                    af:25:5d:1e:66:b4:2d:48:b9:57:56:2f:20:1d:e6:
                    9a:12:48:eb:4a:55:94:44:ff:8e:cb:8b:f8:32:42:
                    54:f1:ce:4d:29:9c:24:98:97:17:f3:0f:86:cd:82:
                    cc:37:51:20:29:1e:c7:5f:50:e5:a5:c0:3d:0a:06:
                    da:f7:ae:86:6b:04:20:7a:b8:07:54:aa:41:29:ef:
                    6d:94:ed:f1:d8:86:38:b9:4d:b2:f3:24:f5:47:00:
                    14:b5:b9:89:7e:13:f4:9e:79:69:0c:c0:fe:27:89:
                    78:f8:45:fc:e0:7b:3c:2d:ea:32:b4:f8:3d:c2:21:
                    67:a8:e2:84:9d:71:17:25:c6:45:c1:15:f0:0c:a9:
                    68:6b:c9:0d:8b:3f:93:c0:36:66:7c:9d:31:8b:e3:
                    f6:59:e9:5a:5b:f9:50:61:16:03:da:d8:10:49:66:
                    07:12:2a:e8:8a:c3:87:00:bb:58:f5:b2:03:b9:41:
                    a1:c8:2a:49:89:c1:97:ea:32:ce:3b:11:d6:53:06:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:CB:3D:53:56:2E:98:72:08:D0:FE:2E:45:7F:72:D8:E3:E6:33
            X509v3 Authority Key Identifier:
                keyid:88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135302e302e302f32312d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:a0:6b:d5:41:88:fe:07:f0:ed:13:82:e9:1c:18:2e:ed:
         e6:63:1c:34:75:27:fc:2c:00:13:ac:16:31:2a:4b:b6:79:5b:
         63:61:35:e8:a2:bc:8f:7c:6a:dd:2c:81:3a:7d:d2:18:ac:6c:
         d4:b5:37:3c:e0:32:c5:61:66:e9:62:e5:cb:db:41:0f:26:91:
         e3:f9:17:6d:6c:a6:7c:9f:09:fa:ca:3d:ff:a8:14:c0:27:84:
         41:59:2f:5a:85:e9:49:8a:80:9f:6a:26:4a:bf:8a:ee:a2:88:
         23:7e:cb:d4:fa:38:4d:23:d1:31:9e:b5:35:d3:15:76:76:a9:
         60:4d:4e:9b:ca:87:6c:36:f8:d5:fe:60:8e:e0:e2:40:12:55:
         3a:b5:9a:33:82:13:b1:36:d1:2d:c5:73:67:3c:52:48:9f:eb:
         0d:55:20:32:0f:ce:82:83:ec:0c:41:67:24:2c:4b:48:5c:f1:
         e6:14:2e:b3:fa:8e:7b:d3:6d:0e:eb:88:9b:6e:6c:3a:df:71:
         dc:61:da:19:fe:32:ac:c3:6d:6e:32:ec:eb:97:90:d7:17:3e:
         df:4c:f7:c7:80:11:5b:76:34:e8:99:60:f9:99:dc:1c:1d:f1:
         3b:a2:c8:31:5e:e7:02:23:12:6f:ad:6c:b0:67:ee:fa:06:ca:
         df:3e:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:57:15 2026 by rpki-client