Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa
File:                     3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          9+vrVt9WI+C0q/utzWVlh5RwxNwiUdHTmuPzmt1xFUk=
Subject key identifier:   F8:20:79:8D:FA:FE:71:BF:7B:80:BF:12:EB:CB:36:EB:E8:C3:1A:C1
Certificate issuer:       /CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
Certificate serial:       34CEC35A84C1ED27F008065A20C955CFEA07A04F
Authority key identifier: 88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa
Signing time:             Tue 14 Apr 2026 17:55:01 +0000
ROA not before:           Tue 14 Apr 2026 17:50:01 +0000
ROA not after:            Tue 13 Apr 2027 17:55:01 +0000
asID:                     28539
IP address blocks:        201.159.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 23:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ce:c3:5a:84:c1:ed:27:f0:08:06:5a:20:c9:55:cf:ea:07:a0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
        Validity
            Not Before: Apr 14 17:50:01 2026 GMT
            Not After : Apr 13 17:55:01 2027 GMT
        Subject: CN=F820798DFAFE71BF7B80BF12EBCB36EBE8C31AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:5e:ab:01:26:89:c9:da:7a:20:d5:6a:6c:
                    17:c2:f0:19:18:b6:89:21:8e:62:ca:0b:62:b2:f6:
                    8b:32:11:aa:e4:f2:f3:ca:2b:f0:f6:dd:93:5c:2a:
                    b3:f8:d0:6c:2f:f6:26:7d:7c:03:23:7c:24:6c:41:
                    6d:2b:16:30:e8:71:bd:be:cb:af:95:df:ce:ca:aa:
                    f7:bf:be:98:dc:0d:89:c3:32:c5:ac:53:a1:59:17:
                    c4:6d:7d:02:eb:78:2d:cb:97:76:34:76:92:f7:c1:
                    11:c7:86:19:96:99:4a:a4:a6:3f:32:f4:ad:15:68:
                    e4:4d:12:ea:29:8d:21:26:12:c2:d1:63:0e:5a:e2:
                    b6:ff:a8:01:56:fb:b5:61:93:75:d7:47:8e:13:34:
                    82:1e:f8:b8:b6:c8:ab:81:5b:fa:a0:df:62:4c:f5:
                    7b:18:08:ca:54:2b:ab:01:42:6b:d8:7e:3d:5e:92:
                    4e:43:fc:c8:11:84:b9:65:af:b6:eb:7b:f9:e7:30:
                    ca:7e:c0:af:51:97:16:4e:6b:2f:2d:9c:1f:ed:ef:
                    51:93:c0:c1:1a:f0:14:30:6c:bd:4f:b8:3b:e7:ef:
                    d6:ee:c8:79:00:e7:38:1f:0f:b5:99:55:07:69:6e:
                    28:58:0b:0d:9a:25:c4:64:9f:85:59:12:91:ce:f5:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:20:79:8D:FA:FE:71:BF:7B:80:BF:12:EB:CB:36:EB:E8:C3:1A:C1
            X509v3 Authority Key Identifier:
                keyid:88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:00:21:75:8f:61:65:99:12:87:ae:fa:5a:f1:58:55:5b:0f:
         aa:f4:50:06:42:c9:bd:f7:e4:98:b6:bd:7a:33:82:89:00:29:
         62:d6:43:23:e3:62:9d:ec:99:e7:66:bd:ab:5f:d0:16:26:3e:
         3c:fb:72:33:07:6d:3b:21:7e:c8:26:b4:70:7e:6c:8f:f7:76:
         c7:66:45:0a:57:01:d2:72:15:38:3a:55:06:f5:c3:52:ce:a2:
         d6:0a:9c:f4:f6:99:36:6a:ec:70:e8:51:33:67:10:22:dd:9a:
         52:ec:a3:80:c5:b5:af:50:21:fc:b4:f2:f3:66:36:9d:1d:26:
         ec:29:1b:d1:1b:9a:7e:de:2f:7e:1a:94:87:e7:b0:02:9a:23:
         ec:ba:e6:69:10:3d:a0:5b:f5:be:10:17:7a:25:ee:fc:37:6f:
         21:c2:9d:3c:3b:5a:c4:3a:aa:f7:f4:dc:b8:fc:1c:3b:64:0e:
         2d:f8:fe:a1:4b:fa:18:7a:b3:33:d1:61:05:1b:df:8a:e0:3a:
         09:93:e7:a4:83:ff:fb:46:02:af:20:40:ab:28:ec:0c:c9:79:
         da:61:55:f7:92:69:96:e6:ed:f5:9b:88:e6:23:a7:86:b8:f9:
         8c:04:4f:a7:cc:5a:71:6e:34:4e:0d:c8:2c:f2:0c:b9:a2:47:
         5b:d9:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:29:10 2026 by rpki-client