Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa
File:                     3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          phJ48RA7hTVHsngggX7zfnlsUc2v7QuaCLedf5uety0=
Subject key identifier:   3D:A5:11:1A:DA:1A:82:37:05:BD:D5:F7:A4:6B:71:D1:46:80:58:5C
Certificate issuer:       /CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
Certificate serial:       098CED823F0C3DE332873AAAE58C7192C0017ED9
Authority key identifier: 88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa
Signing time:             Tue 14 Apr 2026 17:55:02 +0000
ROA not before:           Tue 14 Apr 2026 17:50:02 +0000
ROA not after:            Tue 13 Apr 2027 17:55:02 +0000
asID:                     28539
IP address blocks:        201.159.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 23:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8c:ed:82:3f:0c:3d:e3:32:87:3a:aa:e5:8c:71:92:c0:01:7e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
        Validity
            Not Before: Apr 14 17:50:02 2026 GMT
            Not After : Apr 13 17:55:02 2027 GMT
        Subject: CN=3DA5111ADA1A823705BDD5F7A46B71D14680585C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:f2:9c:35:7f:11:dd:a5:94:ca:e9:b5:6f:
                    1f:cf:e5:38:c9:5c:d4:e2:43:52:f6:a0:1e:40:41:
                    7c:05:be:ab:a4:fb:7b:91:5f:93:63:11:9d:19:96:
                    ff:f0:98:69:6e:c7:46:bf:df:d5:fb:e2:b4:58:a1:
                    cb:99:69:be:dc:c1:6d:35:a2:fb:75:e3:9d:90:9e:
                    6c:9b:a4:30:b6:4b:f2:a6:88:37:0e:b1:db:3b:12:
                    c6:24:6b:01:e2:c7:60:16:f8:90:86:56:3d:e9:2a:
                    c9:62:8f:64:7e:22:42:54:6a:cb:71:f3:32:a8:22:
                    8f:ce:34:1e:13:25:d9:6d:a3:07:47:fb:e0:80:50:
                    50:a6:91:6e:82:78:6d:9e:c7:d7:5c:9c:e4:30:20:
                    19:a9:c9:7c:94:10:3d:19:94:92:8b:e4:06:2a:af:
                    a9:61:fe:43:73:75:e6:80:ab:47:90:14:81:70:d2:
                    2b:ee:e8:b6:17:c5:13:24:0f:4c:51:b7:2d:ca:33:
                    6b:a9:84:da:01:4b:2f:f4:87:c0:f4:f0:d2:a1:04:
                    23:3d:02:d9:16:25:a1:ae:9d:f9:74:48:0a:6b:58:
                    c2:4c:86:3f:75:ce:8f:70:92:31:22:aa:20:de:2e:
                    5a:fc:14:7a:82:9a:39:22:fb:23:70:ed:2f:a0:16:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A5:11:1A:DA:1A:82:37:05:BD:D5:F7:A4:6B:71:D1:46:80:58:5C
            X509v3 Authority Key Identifier:
                keyid:88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:05:3f:0d:f1:0c:28:e2:e1:9b:65:7d:72:1e:bb:50:1f:
         0c:39:c4:05:73:b3:f6:30:d9:1d:5d:09:1d:9b:1a:19:e6:ea:
         73:10:b9:f7:e5:d3:da:d9:f7:d4:3f:c5:e7:71:07:3b:46:db:
         b0:f3:d1:85:83:af:de:2c:8c:7b:13:f6:e1:61:1d:84:74:28:
         26:8d:c7:b9:f4:11:d9:0c:09:19:25:57:25:0e:64:36:8d:31:
         08:13:fe:d5:a5:90:e2:db:04:03:aa:15:cc:85:6c:a0:2f:b4:
         f9:87:e4:e3:16:86:db:d2:68:71:cc:c8:5a:99:ff:e5:f2:74:
         6d:a3:7f:21:9a:c0:82:13:f9:91:f6:a0:8d:08:1e:6e:06:a8:
         ff:62:dc:02:9f:04:55:3b:7d:45:72:19:cb:39:df:4b:ba:5d:
         fc:ed:03:a8:6d:54:a1:e5:3e:54:68:13:5a:60:90:6e:80:64:
         50:84:93:47:e8:74:9e:ed:57:5b:48:fe:3a:66:f2:ea:68:a2:
         20:8f:f7:26:9d:32:ba:0e:26:00:0c:b0:7b:24:1e:30:45:5c:
         73:15:b2:47:c3:6c:24:e4:85:ca:a6:2a:67:b0:eb:69:83:e7:
         d4:e5:d3:5a:9d:21:82:f5:1c:79:02:a4:68:b4:4d:3a:cb:9c:
         8f:db:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:02:08 2026 by rpki-client