Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130302e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130302e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          HEIe25ZONZIKl/AVevZlVW/tjoe44YMN+xIEnR6Vi6U=
Subject key identifier:   32:72:1E:E3:27:3F:36:A0:40:1F:F6:6C:0D:9C:EA:51:91:A0:66:B8
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       4AECA6C4282CEB24647E6077DBE541442A4DB8A8
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130302e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:01 +0000
ROA not before:           Fri 09 Oct 2026 20:35:01 +0000
ROA not after:            Fri 08 Oct 2027 20:40:01 +0000
asID:                     27787
IP address blocks:        200.107.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ec:a6:c4:28:2c:eb:24:64:7e:60:77:db:e5:41:44:2a:4d:b8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:01 2026 GMT
            Not After : Oct  8 20:40:01 2027 GMT
        Subject: CN=32721EE3273F36A0401FF66C0D9CEA5191A066B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:77:64:eb:98:ec:7e:6a:97:0b:71:83:bf:
                    ae:c1:e7:04:4e:2d:25:81:75:7a:6a:9f:73:b4:b2:
                    75:81:74:c5:e1:7e:6b:b4:c4:37:64:f4:17:40:b8:
                    6d:98:2e:15:50:ea:de:9b:7b:77:9c:c3:0b:2c:1b:
                    26:b3:41:cb:a5:1e:10:3c:d9:6e:37:87:61:48:45:
                    39:a8:46:7c:bf:86:88:5c:fd:71:0d:66:cb:18:1f:
                    95:65:c1:ba:8b:86:ca:2e:45:2a:08:85:31:50:c9:
                    cc:f2:e7:c5:93:3a:76:a4:69:27:0d:7c:b3:d8:11:
                    e3:33:f1:91:66:dc:94:00:08:f7:f2:30:e9:ee:31:
                    4d:82:19:d2:b3:0b:04:9b:42:3e:12:46:9c:cf:2f:
                    77:15:82:cf:6e:01:13:2e:1f:27:d0:db:7e:ec:74:
                    df:c2:7a:32:89:d0:7a:03:fb:ab:98:40:1d:9a:46:
                    09:98:fc:5b:35:85:65:fe:48:f3:f5:2d:32:22:63:
                    75:33:23:82:37:b5:0c:51:78:0b:d4:66:a5:ee:0d:
                    98:80:29:74:a8:f7:2b:df:f1:1e:57:e9:d8:e3:7c:
                    b4:6e:6e:a1:21:b1:9c:e0:4b:a1:d5:38:98:3d:3b:
                    71:23:43:b0:ed:a8:df:b4:4c:ce:81:de:b2:b9:b8:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:72:1E:E3:27:3F:36:A0:40:1F:F6:6C:0D:9C:EA:51:91:A0:66:B8
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130302e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:4a:29:b7:52:e5:ee:96:67:69:d2:3f:23:5d:fc:5c:97:fd:
         61:dc:2b:12:dc:56:ee:a1:96:53:87:14:ac:32:15:2e:bd:b8:
         4f:90:62:1e:e3:bd:94:08:3d:b1:3d:55:e7:c8:05:d2:2c:f1:
         b9:2a:df:54:88:31:ee:a9:9a:b2:44:e7:54:62:ef:a1:54:39:
         41:63:f4:dd:ba:44:af:2c:aa:2b:ca:24:39:38:a0:fb:7f:60:
         cc:93:ec:22:25:44:d1:0f:10:95:4f:a7:31:52:a1:5d:f2:ff:
         1b:02:52:cb:28:dd:63:18:fe:21:5c:77:23:2d:8d:e3:96:8b:
         03:f4:24:cb:33:28:a1:3b:53:ee:20:46:5d:47:b4:9f:7a:77:
         ac:49:d4:22:4a:38:b5:8d:8e:ba:c3:74:16:79:da:9e:55:65:
         de:73:c7:f5:ed:52:e6:83:f4:3a:2e:28:2c:ef:1e:bf:3c:63:
         dd:7e:86:58:b0:19:93:12:76:82:9b:2c:34:ca:5b:85:08:67:
         ab:45:86:c3:89:4b:33:32:bf:7d:9f:2c:e6:52:11:bf:88:e8:
         32:af:83:d6:cc:9a:35:88:7d:c6:3b:5f:4f:8d:d1:1d:d6:ce:
         ac:46:b5:a9:78:72:7d:8a:f9:5a:61:05:f7:9a:77:41:fc:90:
         ef:c1:f1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:26 2026 by rpki-client