Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130312e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130312e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          /ajN5k2JG1rudgfoG5z3ruQyWGHopV0cdILIkveLGv8=
Subject key identifier:   6B:65:AB:3B:CC:31:6F:EB:E2:D0:6C:20:8C:BD:69:3E:2F:98:A9:61
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       783D1EBE3C554B7A7B19D05B905FBED92B8AD464
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130312e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:04 +0000
ROA not before:           Fri 09 Oct 2026 20:35:04 +0000
ROA not after:            Fri 08 Oct 2027 20:40:04 +0000
asID:                     27787
IP address blocks:        200.107.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:1e:be:3c:55:4b:7a:7b:19:d0:5b:90:5f:be:d9:2b:8a:d4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:04 2026 GMT
            Not After : Oct  8 20:40:04 2027 GMT
        Subject: CN=6B65AB3BCC316FEBE2D06C208CBD693E2F98A961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3d:54:26:1d:69:ba:b6:84:87:12:39:cf:fe:
                    c4:81:ea:9c:68:af:39:04:96:10:b5:24:ed:d7:6d:
                    56:08:92:d6:81:7a:0c:c4:6b:23:99:c5:be:84:9d:
                    6e:ee:8b:f7:34:be:8c:1a:e6:a5:3e:50:86:e7:0d:
                    4f:9e:71:a5:29:13:c4:5e:e2:1b:a3:d1:13:e4:3f:
                    e3:06:85:af:68:81:e5:4d:40:89:0d:ba:17:83:99:
                    b1:a8:2e:be:18:4e:82:47:0b:77:16:f9:e3:be:55:
                    75:ff:47:3d:5b:ef:79:f0:5e:98:a6:72:64:19:e4:
                    f6:52:b6:2f:33:bc:48:f5:db:ce:0b:67:84:1a:09:
                    b8:ca:c0:d4:86:67:34:24:89:14:4a:58:66:0f:cf:
                    7d:d2:1a:75:1b:a6:c4:bc:b1:43:bb:e7:05:20:19:
                    5c:2e:53:57:17:70:0d:8f:f3:73:3c:38:ac:5d:fb:
                    8b:9c:d6:a2:46:e9:4a:99:e7:88:46:3a:24:4c:cb:
                    c5:10:84:9c:29:0c:60:23:dc:14:c6:d7:3c:94:e7:
                    80:76:c4:ce:d7:8b:27:e9:af:f9:2e:0e:cc:14:f6:
                    55:cc:3e:1f:03:f6:8e:6f:24:93:57:1b:e2:00:7b:
                    bd:a3:d3:fc:64:68:fc:3d:1e:03:b1:45:e2:b9:7c:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:65:AB:3B:CC:31:6F:EB:E2:D0:6C:20:8C:BD:69:3E:2F:98:A9:61
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130312e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:af:87:3d:b9:ff:9d:ce:b9:db:1f:93:e7:1e:81:0c:36:
         40:1e:0e:15:93:6a:ad:b1:9a:d4:30:c1:26:55:c2:61:07:5d:
         c5:6b:c0:6e:c5:4d:58:03:97:8d:84:25:2f:4f:06:8d:f1:03:
         22:18:20:f0:03:3d:14:a2:d5:4d:94:a5:ef:bf:e3:a2:49:60:
         ec:d7:cd:69:fa:6c:05:a2:89:a7:ad:16:90:10:d8:e7:21:c9:
         30:9d:a3:38:e3:80:ac:54:38:d7:12:1b:24:4c:27:52:1b:6b:
         8b:10:ba:0e:0e:18:6b:e1:1d:6e:09:be:01:9c:37:6e:2f:f0:
         48:04:c5:ed:96:d9:49:4e:05:dd:db:cd:95:e3:95:88:23:4f:
         8a:01:3d:e1:94:0c:ce:12:15:3e:40:b5:f8:0d:08:cf:b0:87:
         c2:ba:11:ba:12:f1:dd:4f:a4:dc:38:97:0e:78:63:96:6c:05:
         87:06:97:bf:8e:3f:1f:a4:e2:b7:32:f4:05:af:9e:bb:ea:c2:
         5f:11:ed:fa:5d:41:a3:a2:40:51:44:33:25:7c:55:20:a2:08:
         87:07:4b:67:23:9b:bf:f1:d6:29:e7:d0:d7:93:98:7f:dd:f6:
         3c:b4:99:ad:36:3e:13:bc:f3:cb:90:54:33:10:81:24:06:0b:
         6a:68:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:29 2026 by rpki-client