Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e203139353531.roa
File:                     3230312e3133312e3132322e302f32332d3234203d3e203139353531.roa (raw, json)
Hash identifier:          YFD+8v3E9sBrLjia5j0qCNES443AafqKe/NG/8K1Mkk=
Subject key identifier:   73:27:4E:07:03:49:92:6E:D2:7F:52:76:84:C6:DC:78:D5:69:50:AE
Certificate issuer:       /CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
Certificate serial:       490D8CFD8A9F7FCC92C73001C09B85B179C4F902
Authority key identifier: AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e203139353531.roa
Signing time:             Sat 13 Jun 2026 17:47:40 +0000
ROA not before:           Sat 13 Jun 2026 17:42:40 +0000
ROA not after:            Sat 12 Jun 2027 17:47:40 +0000
asID:                     19551
IP address blocks:        201.131.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0d:8c:fd:8a:9f:7f:cc:92:c7:30:01:c0:9b:85:b1:79:c4:f9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
        Validity
            Not Before: Jun 13 17:42:40 2026 GMT
            Not After : Jun 12 17:47:40 2027 GMT
        Subject: CN=73274E070349926ED27F527684C6DC78D56950AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:a8:44:3e:3a:ac:49:a1:ec:9a:55:dd:3a:
                    c5:99:4d:ab:17:16:9a:dd:54:a9:bf:f7:a9:ef:b4:
                    b9:ee:ba:74:cf:a6:a3:1c:5b:2f:f0:7e:f7:c9:77:
                    1a:37:4d:0d:b1:39:31:76:d3:25:57:b7:35:4b:e4:
                    04:d4:ff:28:52:ef:55:c6:f4:8a:11:a0:fe:6e:12:
                    83:2d:bc:b1:53:55:0e:0c:9e:2c:81:f0:bc:cb:f4:
                    83:98:dd:1a:b0:7a:a6:9a:de:8e:1f:48:e0:c3:e6:
                    02:69:cb:eb:b6:30:cd:e8:b8:09:97:2a:bf:d5:ed:
                    92:c3:5e:0a:f1:c0:f5:cf:71:99:4d:89:34:e4:85:
                    1a:da:9c:a2:9a:cb:dc:d8:00:0a:21:10:f1:e2:90:
                    40:a5:26:6f:e0:87:c6:fa:3f:75:59:20:0f:7a:3f:
                    18:c9:0a:76:5a:d1:47:b8:18:50:18:62:ea:7c:16:
                    56:04:21:d0:33:6f:1e:65:12:c3:5c:f3:b9:48:4a:
                    e2:58:c9:a2:5e:b1:76:7a:64:41:e4:fa:37:69:1b:
                    4b:58:c1:4b:de:7d:08:9e:28:1c:cd:06:73:78:aa:
                    20:13:25:9e:7a:37:65:97:6a:14:02:79:f9:f8:b8:
                    9e:07:3a:2b:c6:d8:77:44:d6:a3:69:c6:3b:29:f9:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:27:4E:07:03:49:92:6E:D2:7F:52:76:84:C6:DC:78:D5:69:50:AE
            X509v3 Authority Key Identifier:
                keyid:AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:31:ac:e7:a3:b9:f1:76:48:d0:46:ec:70:cc:e6:6e:88:
         1d:b7:bd:80:62:45:92:b0:48:f0:2f:b7:90:6e:48:62:9e:22:
         f2:f8:65:7d:58:de:7b:8e:c8:9e:65:25:d3:a4:85:5b:f1:3c:
         12:be:d3:e1:90:70:8e:b6:c8:28:f1:00:3c:33:08:47:21:01:
         b0:3b:77:d0:9f:57:f6:ae:4d:32:34:b4:78:16:fd:b7:c5:aa:
         95:2f:3c:c2:0e:e8:f2:9e:43:d0:2f:ac:c7:19:11:6e:e6:d8:
         87:e6:5c:b8:27:78:6a:38:5f:04:5f:d1:8e:9f:a6:13:70:4f:
         68:04:f0:96:f6:7b:29:bf:c4:18:02:f9:a6:63:29:59:2d:a3:
         da:3f:d4:c5:92:3b:80:85:1d:ef:8d:8f:af:75:33:7c:bd:b4:
         4f:27:9a:5a:0a:c3:53:2b:10:90:08:b9:bb:8d:c2:be:f6:91:
         00:58:e5:41:9f:77:07:8e:76:cc:77:44:f8:e9:37:26:8e:c8:
         33:6d:95:e9:0d:29:db:cb:8e:a9:5a:9c:4b:0a:3c:e5:9e:5c:
         14:8f:4a:2c:66:77:4a:0d:c6:8c:5a:21:48:3c:b4:27:ee:57:
         4a:23:7b:39:b0:1b:99:38:9d:ed:5f:f6:88:ce:a6:53:8f:5b:
         30:07:dd:34
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSQ2M/Yqff8ySxzABwJuFsXnE+QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZEQjZFQjBBNTI2QjVDNUVCNkJEMDE1NjZDMzhERkI3
RkREMTgxRDAeFw0yNjA2MTMxNzQyNDBaFw0yNzA2MTIxNzQ3NDBaMDMxMTAvBgNV
BAMTKDczMjc0RTA3MDM0OTkyNkVEMjdGNTI3Njg0QzZEQzc4RDU2OTUwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAqhEPjqsSaHsmlXdOsWZTasX
FprdVKm/96nvtLnuunTPpqMcWy/wfvfJdxo3TQ2xOTF20yVXtzVL5ATU/yhS71XG
9IoRoP5uEoMtvLFTVQ4MniyB8LzL9IOY3Rqweqaa3o4fSODD5gJpy+u2MM3ouAmX
Kr/V7ZLDXgrxwPXPcZlNiTTkhRranKKay9zYAAohEPHikEClJm/gh8b6P3VZIA96
PxjJCnZa0Ue4GFAYYup8FlYEIdAzbx5lEsNc87lISuJYyaJesXZ6ZEHk+jdpG0tY
wUvefQieKBzNBnN4qiATJZ56N2WXahQCefn4uJ4HOivG2HdE1qNpxjsp+XcVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcydOBwNJkm7Sf1J2hMbceNVpUK4wHwYDVR0j
BBgwFoAUr9tusKUmtcXra9AVZsON+3/dGB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EODhCQjlGREYxNzg1NUU2NDI4NEJCOENGMUE1RDBEQzk3
RDBENkEwNDAyQjQ2NTZGRkE3NjE1NzFFMTQ0M0ZCLzAvQUZEQjZFQjBBNTI2QjVD
NUVCNkJEMDE1NjZDMzhERkI3RkREMTgxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkRCNkVCMEE1MjZCNUM1RUI2
QkQwMTU2NkMzOERGQjdGREQxODFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDg4QkI5RkRGMTc4NTVFNjQyODRCQjhDRjFBNUQwREM5N0QwRDZBMDQw
MkI0NjU2RkZBNzYxNTcxRTE0NDNGQi8wLzMyMzAzMTJlMzEzMzMxMmUzMTMyMzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM5MzUzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByYN6
MA0GCSqGSIb3DQEBCwUAA4IBAQAoSzGs56O58XZI0EbscMzmbogdt72AYkWSsEjw
L7eQbkhiniLy+GV9WN57jsieZSXTpIVb8TwSvtPhkHCOtsgo8QA8MwhHIQGwO3fQ
n1f2rk0yNLR4Fv23xaqVLzzCDujynkPQL6zHGRFu5tiH5ly4J3hqOF8EX9GOn6YT
cE9oBPCW9nspv8QYAvmmYylZLaPaP9TFkjuAhR3vjY+vdTN8vbRPJ5paCsNTKxCQ
CLm7jcK+9pEAWOVBn3cHjnbMd0T46TcmjsgzbZXpDSnby46pWpxLCjzlnlwUj0os
ZndKDcaMWiFIPLQn7ldKI3s5sBuZOJ3tX/aIzqZTj1swB900
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:33:01 2026 by rpki-client