Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130342e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130342e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          By6iRpLQu4MW1nyO9W45k8VdXhuMDJnV2awgz4o56A0=
Subject key identifier:   BB:CA:CC:F5:93:4C:F4:C3:E7:D6:53:D9:9F:63:75:C2:5D:04:DE:0C
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       34B9E2F833DB6FAEAAFE18151F48589512B1447B
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130342e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:05 +0000
ROA not before:           Fri 09 Oct 2026 20:35:05 +0000
ROA not after:            Fri 08 Oct 2027 20:40:05 +0000
asID:                     27787
IP address blocks:        200.107.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b9:e2:f8:33:db:6f:ae:aa:fe:18:15:1f:48:58:95:12:b1:44:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:05 2026 GMT
            Not After : Oct  8 20:40:05 2027 GMT
        Subject: CN=BBCACCF5934CF4C3E7D653D99F6375C25D04DE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:27:6e:14:f4:7f:9e:aa:77:c2:70:53:69:
                    9f:18:be:2f:3f:b8:9e:fd:cf:2e:30:7d:ec:d0:27:
                    18:8d:4a:66:09:d8:6a:cb:62:3d:9c:83:48:af:7e:
                    40:41:bd:f0:6f:70:e7:f0:2f:89:14:18:c2:07:b0:
                    ed:c3:7b:51:bf:5c:3a:91:5a:e8:df:a7:64:07:91:
                    ba:62:23:30:76:8e:88:00:56:f2:f7:af:5d:22:ae:
                    fb:3d:d6:e1:c3:3d:42:a5:4c:be:13:bf:0e:55:83:
                    9b:2a:85:50:67:28:c0:a4:cc:84:29:84:54:67:6e:
                    e9:56:e0:e4:a0:8e:d6:5e:77:67:50:9e:35:7a:ee:
                    9c:69:78:25:d9:64:31:3b:46:00:d3:97:b6:97:84:
                    75:1d:01:4b:c5:d4:ed:1a:f4:f2:26:fa:45:5f:ab:
                    be:fa:81:ff:41:61:fa:fb:9c:3e:14:a8:ea:cf:ac:
                    9f:0f:33:31:d5:ed:fe:51:8c:7e:00:93:e1:b2:0d:
                    b4:ee:5b:33:67:39:50:ad:16:b0:32:5e:99:c7:7e:
                    39:71:13:f1:7e:30:55:29:f7:1f:c8:1e:fe:26:78:
                    d3:c3:e1:65:a2:70:87:75:c5:f9:ea:99:f9:87:13:
                    54:be:f8:87:72:88:08:76:f5:f2:e7:16:02:60:fb:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CA:CC:F5:93:4C:F4:C3:E7:D6:53:D9:9F:63:75:C2:5D:04:DE:0C
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130342e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:01:58:2b:ee:8f:e8:e3:46:36:0a:fe:16:85:15:92:f0:f3:
         94:a3:e8:e4:2c:6e:e3:2f:06:a5:2a:7f:11:48:42:4e:6b:48:
         ea:21:cd:2f:99:7d:d9:e5:88:79:04:92:39:a1:33:a9:5d:95:
         bf:b6:3e:ba:3d:cf:c5:4c:99:80:f1:c2:23:b5:80:c1:2d:ed:
         20:bb:8e:14:57:35:ab:d5:59:d0:d6:8d:64:bb:f9:2c:1b:98:
         4a:1b:bc:2f:f2:3a:9d:40:d0:4e:68:c1:44:54:e8:c0:9a:20:
         0e:c4:04:cb:09:a8:2c:14:1f:b5:b3:9a:24:dd:86:84:b2:b3:
         3d:0a:1d:86:64:29:3f:1e:89:da:43:87:8f:05:e3:a4:e6:4e:
         80:0e:3a:17:9f:77:b9:6d:fd:53:81:0c:5e:7b:d7:02:ad:d6:
         4b:8e:94:65:0a:d3:2e:b5:a4:41:56:ab:67:19:48:ff:bd:5f:
         4a:16:59:d4:c7:b7:28:c4:e1:eb:43:6a:b8:f6:01:04:f2:c7:
         0b:ed:99:94:67:45:a5:8f:db:ff:15:82:a6:a8:1e:bc:55:08:
         6a:4b:99:61:a9:48:ca:aa:16:b7:45:b7:1b:50:75:f5:c0:b0:
         ab:cb:79:03:fd:ea:3c:35:36:4e:21:03:8a:32:a5:8a:79:61:
         30:c2:2c:a9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNLni+DPbb66q/hgVH0hYlRKxRHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ1NzMyMDJGQTkyNzk2Q0ZBODFDRDVDQkQyNzk2ODgz
NDRCMkMwQTAeFw0yNjEwMDkyMDM1MDVaFw0yNzEwMDgyMDQwMDVaMDMxMTAvBgNV
BAMTKEJCQ0FDQ0Y1OTM0Q0Y0QzNFN0Q2NTNEOTlGNjM3NUMyNUQwNERFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOIyduFPR/nqp3wnBTaZ8Yvi8/
uJ79zy4wfezQJxiNSmYJ2GrLYj2cg0ivfkBBvfBvcOfwL4kUGMIHsO3De1G/XDqR
Wujfp2QHkbpiIzB2jogAVvL3r10irvs91uHDPUKlTL4Tvw5Vg5sqhVBnKMCkzIQp
hFRnbulW4OSgjtZed2dQnjV67pxpeCXZZDE7RgDTl7aXhHUdAUvF1O0a9PIm+kVf
q776gf9BYfr7nD4UqOrPrJ8PMzHV7f5RjH4Ak+GyDbTuWzNnOVCtFrAyXpnHfjlx
E/F+MFUp9x/IHv4meNPD4WWicId1xfnqmfmHE1S++IdyiAh29fLnFgJg+8sdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUu8rM9ZNM9MPn1lPZn2N1wl0E3gwwHwYDVR0j
BBgwFoAU7VcyAvqSeWz6gc1cvSeWiDRLLAowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzI4NzdDQzUxOTBCNDI4OTJFQjVDRkMxRDY4NDU1QjEz
NDUxQkU1MTQyMEMyMUZCREYwQkFFQzZBNkFDNEI2LzAvRUQ1NzMyMDJGQTkyNzk2
Q0ZBODFDRDVDQkQyNzk2ODgzNDRCMkMwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDU3MzIwMkZBOTI3OTZDRkE4
MUNENUNCRDI3OTY4ODM0NEIyQzBBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcyODc3Q0M1MTkwQjQyODkyRUI1Q0ZDMUQ2ODQ1NUIxMzQ1MUJFNTE0
MjBDMjFGQkRGMEJBRUM2QTZBQzRCNi8wLzMyMzAzMDJlMzEzMDM3MmUzMTMwMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczODM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGto
MA0GCSqGSIb3DQEBCwUAA4IBAQAAAVgr7o/o40Y2Cv4WhRWS8POUo+jkLG7jLwal
Kn8RSEJOa0jqIc0vmX3Z5Yh5BJI5oTOpXZW/tj66Pc/FTJmA8cIjtYDBLe0gu44U
VzWr1VnQ1o1ku/ksG5hKG7wv8jqdQNBOaMFEVOjAmiAOxATLCagsFB+1s5ok3YaE
srM9Ch2GZCk/HonaQ4ePBeOk5k6ADjoXn3e5bf1TgQxee9cCrdZLjpRlCtMutaRB
VqtnGUj/vV9KFlnUx7coxOHrQ2q49gEE8scL7ZmUZ0Wlj9v/FYKmqB68VQhqS5lh
qUjKqha3RbcbUHX1wLCry3kD/eo8NTZOIQOKMqWKeWEwwiyp
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:25 2026 by rpki-client