Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130382e302f32322d3232203d3e203134323332.roa
File:                     3230312e3231392e3130382e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          2YvtNNzH3fyGygOdqjdHxbu1m2Oe8iOiJzu4iD+91KI=
Subject key identifier:   1A:19:8A:A1:B6:B8:D5:88:0E:70:64:22:B5:16:AB:F2:A5:A7:F8:CC
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       1C0C040D473533A01746B6624AF6EB3AB20D1F80
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130382e302f32322d3232203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:03 +0000
ROA not before:           Fri 16 Oct 2026 15:55:03 +0000
ROA not after:            Fri 15 Oct 2027 16:00:03 +0000
asID:                     14232
IP address blocks:        201.219.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0c:04:0d:47:35:33:a0:17:46:b6:62:4a:f6:eb:3a:b2:0d:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:03 2026 GMT
            Not After : Oct 15 16:00:03 2027 GMT
        Subject: CN=1A198AA1B6B8D5880E706422B516ABF2A5A7F8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:0d:0b:1b:da:1c:bf:88:61:13:f9:01:c1:
                    df:4b:15:57:ca:e5:c6:29:14:a1:4e:f0:f3:14:c6:
                    a3:e9:7b:86:0c:c8:ae:1e:b8:2d:ef:df:64:9e:1e:
                    a9:ff:c9:cf:2f:b2:e6:e4:57:f8:70:50:e1:4a:b8:
                    22:e4:4a:91:85:08:4e:57:80:b8:5d:1b:54:25:a9:
                    06:3d:51:56:30:ea:d9:11:6c:3b:73:41:41:84:1c:
                    fe:41:1a:c3:fd:5c:08:62:8e:47:4f:d6:63:2f:ec:
                    39:80:a5:25:a9:c9:8d:22:37:72:60:c2:ef:f1:cb:
                    82:27:9e:69:d1:68:0b:26:7a:3c:34:92:6d:56:75:
                    5a:32:df:53:2c:a4:85:39:5b:dc:f8:a3:a1:03:3d:
                    ae:31:d5:52:31:fe:f4:78:1a:06:9f:ba:c3:48:f3:
                    e6:77:fb:af:56:ce:8b:ee:dd:ae:63:f5:06:ba:08:
                    e1:a8:71:d7:da:6e:a3:02:3f:f5:69:37:d9:48:20:
                    72:8e:30:07:b0:be:9b:f3:06:e2:df:01:82:6a:1e:
                    d0:e2:37:ec:5a:40:d0:cf:ad:b3:eb:40:56:9f:c8:
                    69:a9:75:3c:b8:8c:b9:97:75:71:9a:28:55:39:ac:
                    7f:b2:e1:ec:65:a4:b2:69:ad:4d:98:90:a8:4c:6d:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:8A:A1:B6:B8:D5:88:0E:70:64:22:B5:16:AB:F2:A5:A7:F8:CC
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130382e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:df:6f:8f:c7:e9:e1:0a:bb:f6:1b:43:20:f0:a7:8c:2e:aa:
         fa:65:0e:9b:02:bf:ed:30:96:cf:45:80:79:d3:63:b9:18:4d:
         68:95:f8:0f:c2:b1:86:fc:70:75:90:f8:18:c1:af:56:38:9c:
         03:fb:5d:89:19:78:e7:a3:5f:95:12:9f:3d:9f:b6:1e:7f:e7:
         4b:cb:a7:38:27:0a:64:08:34:dd:9e:fe:ae:7a:7f:94:26:69:
         38:3d:71:52:40:1c:07:9e:48:c0:da:c4:b2:c8:79:e8:51:c0:
         bc:00:64:16:aa:dd:81:b7:8c:cf:6a:a3:6f:4c:67:3d:55:07:
         9e:94:83:1a:8c:be:60:78:51:00:b2:13:40:f7:bb:91:be:b2:
         c9:3a:d3:a2:6c:b6:9c:c6:a1:24:c3:ad:49:03:58:7d:25:79:
         cd:9e:02:5f:cf:0d:29:83:c8:9e:c5:a1:50:aa:46:e8:64:fb:
         43:e6:c7:fa:35:81:29:21:47:9a:a2:25:1f:98:e8:37:f3:4b:
         a9:c5:2a:47:b7:53:ec:ab:42:1c:14:3d:7a:fb:9f:af:f6:85:
         c9:a1:9b:86:25:d5:d6:6e:eb:cb:6f:1c:18:f8:d3:4f:ef:52:
         37:a4:d5:b2:0b:e8:07:40:1d:69:33:9c:6d:96:ce:7d:8c:91:
         1e:a4:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:51:01 2026 by rpki-client