Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130352e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130352e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          oX+77qvv7HtxITojLrm2tZjda06BmNwEf7G3LSzhX24=
Subject key identifier:   2E:29:84:A1:7B:A6:AC:6A:CA:0B:71:B2:58:3A:2A:01:7C:DA:4E:18
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       4B9B8932EFBF1D80E28BCB702CE173C7E6CF203A
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130352e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:05 +0000
ROA not before:           Fri 09 Oct 2026 20:35:05 +0000
ROA not after:            Fri 08 Oct 2027 20:40:05 +0000
asID:                     27787
IP address blocks:        200.107.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9b:89:32:ef:bf:1d:80:e2:8b:cb:70:2c:e1:73:c7:e6:cf:20:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:05 2026 GMT
            Not After : Oct  8 20:40:05 2027 GMT
        Subject: CN=2E2984A17BA6AC6ACA0B71B2583A2A017CDA4E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:21:d1:57:21:c6:74:97:f7:3b:42:3f:9d:
                    28:7a:b7:99:6e:04:57:00:21:ba:94:5e:f3:e5:c2:
                    d1:32:45:08:83:a8:74:f3:43:ce:51:a5:5b:d0:b8:
                    73:cf:71:10:ba:6d:fc:9d:c4:75:48:f5:61:d7:22:
                    ab:d0:b8:74:f2:95:56:e1:a9:9f:d1:6d:b6:ac:ab:
                    00:f2:64:c6:8a:93:37:08:62:dc:be:a0:8c:10:d4:
                    28:0b:1a:34:eb:f8:30:ca:e6:ed:c2:78:dd:9c:92:
                    45:9b:34:11:be:20:7f:4e:1a:a7:0a:d8:72:2a:ab:
                    3c:be:54:23:91:bd:ee:08:3c:3c:9c:47:5f:41:d8:
                    fd:2b:3f:2e:12:9c:db:f2:95:40:4d:8b:73:d9:fe:
                    c5:49:2f:0a:ed:05:70:ae:12:6e:c7:73:5c:62:f0:
                    cc:f1:59:33:66:b1:2a:9e:3c:d0:9a:f9:a0:ff:f8:
                    ad:c9:c8:d6:45:a9:67:d0:89:8a:8f:76:6c:96:38:
                    f3:e1:6b:68:b2:7e:a5:ce:e6:1e:c9:16:ed:11:c7:
                    84:66:c9:05:ff:27:f1:e4:7c:d5:0a:ce:75:cb:8b:
                    a8:3d:ec:23:6c:4d:3b:49:8a:94:15:b9:2a:d2:21:
                    df:45:86:88:68:44:ef:ef:61:28:55:ef:6e:5f:bc:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:84:A1:7B:A6:AC:6A:CA:0B:71:B2:58:3A:2A:01:7C:DA:4E:18
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130352e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:3b:e1:16:a3:8b:56:e7:fe:91:a8:7a:e3:b2:f3:fc:9d:
         82:5a:41:1e:a1:aa:64:a5:d8:d2:17:b5:3b:6c:86:4d:86:dd:
         24:ff:b5:42:09:c3:a5:d6:e9:9d:7c:04:c0:b1:ee:a0:ec:c1:
         fc:f4:3c:3e:05:42:0e:e0:ea:c8:04:c5:9c:d0:b2:6f:e5:d5:
         02:f6:ee:56:8f:e3:3b:db:2f:d0:03:e2:c2:cb:e4:eb:b1:77:
         70:c5:ae:9d:99:25:72:9e:60:e0:02:d7:2b:48:c0:62:c7:18:
         56:4f:1f:39:6d:50:0b:65:26:fa:94:47:a9:fd:2f:d1:db:c8:
         c7:bc:02:93:32:ac:f6:ac:2d:8b:85:44:34:e9:b7:04:b9:e7:
         a8:bc:2f:d4:3f:60:59:64:70:46:d5:44:bf:57:f4:da:02:a6:
         12:1d:07:d6:ad:bb:9d:79:64:af:2f:79:b0:71:f9:2f:76:56:
         91:18:8c:6d:d5:43:68:56:59:fd:21:30:f9:cc:a5:95:23:4b:
         05:44:37:40:d9:b4:03:64:4e:77:bc:d1:a2:7e:1e:3d:5f:5b:
         1b:38:e9:9d:02:61:2b:e3:e8:e8:75:9a:06:1e:06:93:eb:dd:
         91:a0:50:40:94:8c:e1:76:5e:14:2b:6a:bd:09:a0:f2:07:e3:
         56:38:40:26
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUS5uJMu+/HYDii8twLOFzx+bPIDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ1NzMyMDJGQTkyNzk2Q0ZBODFDRDVDQkQyNzk2ODgz
NDRCMkMwQTAeFw0yNjEwMDkyMDM1MDVaFw0yNzEwMDgyMDQwMDVaMDMxMTAvBgNV
BAMTKDJFMjk4NEExN0JBNkFDNkFDQTBCNzFCMjU4M0EyQTAxN0NEQTRFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjByHRVyHGdJf3O0I/nSh6t5lu
BFcAIbqUXvPlwtEyRQiDqHTzQ85RpVvQuHPPcRC6bfydxHVI9WHXIqvQuHTylVbh
qZ/RbbasqwDyZMaKkzcIYty+oIwQ1CgLGjTr+DDK5u3CeN2ckkWbNBG+IH9OGqcK
2HIqqzy+VCORve4IPDycR19B2P0rPy4SnNvylUBNi3PZ/sVJLwrtBXCuEm7Hc1xi
8MzxWTNmsSqePNCa+aD/+K3JyNZFqWfQiYqPdmyWOPPha2iyfqXO5h7JFu0Rx4Rm
yQX/J/HkfNUKznXLi6g97CNsTTtJipQVuSrSId9FhohoRO/vYShV725fvBEDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULimEoXumrGrKC3GyWDoqAXzaThgwHwYDVR0j
BBgwFoAU7VcyAvqSeWz6gc1cvSeWiDRLLAowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzI4NzdDQzUxOTBCNDI4OTJFQjVDRkMxRDY4NDU1QjEz
NDUxQkU1MTQyMEMyMUZCREYwQkFFQzZBNkFDNEI2LzAvRUQ1NzMyMDJGQTkyNzk2
Q0ZBODFDRDVDQkQyNzk2ODgzNDRCMkMwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDU3MzIwMkZBOTI3OTZDRkE4
MUNENUNCRDI3OTY4ODM0NEIyQzBBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcyODc3Q0M1MTkwQjQyODkyRUI1Q0ZDMUQ2ODQ1NUIxMzQ1MUJFNTE0
MjBDMjFGQkRGMEJBRUM2QTZBQzRCNi8wLzMyMzAzMDJlMzEzMDM3MmUzMTMwMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczODM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGtp
MA0GCSqGSIb3DQEBCwUAA4IBAQBTujvhFqOLVuf+kah647Lz/J2CWkEeoapkpdjS
F7U7bIZNht0k/7VCCcOl1umdfATAse6g7MH89Dw+BUIO4OrIBMWc0LJv5dUC9u5W
j+M72y/QA+LCy+TrsXdwxa6dmSVynmDgAtcrSMBixxhWTx85bVALZSb6lEep/S/R
28jHvAKTMqz2rC2LhUQ06bcEueeovC/UP2BZZHBG1US/V/TaAqYSHQfWrbudeWSv
L3mwcfkvdlaRGIxt1UNoVln9ITD5zKWVI0sFRDdA2bQDZE53vNGifh49X1sbOOmd
AmEr4+jodZoGHgaT692RoFBAlIzhdl4UK2q9CaDyB+NWOEAm
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:26 2026 by rpki-client