Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130362e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130362e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          HE4w9N+LBKvN3cAWbk4zs6bauu8LaxxDMkp8A0bVeuE=
Subject key identifier:   74:32:35:B0:15:6F:66:36:16:6C:FA:7B:9B:1E:A6:D8:B4:44:DF:12
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       1084DDA559191F1E5F1B3C73C0EB0C84396F6B65
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130362e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:00 +0000
ROA not before:           Fri 09 Oct 2026 20:35:00 +0000
ROA not after:            Fri 08 Oct 2027 20:40:00 +0000
asID:                     27787
IP address blocks:        200.107.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:84:dd:a5:59:19:1f:1e:5f:1b:3c:73:c0:eb:0c:84:39:6f:6b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:00 2026 GMT
            Not After : Oct  8 20:40:00 2027 GMT
        Subject: CN=743235B0156F6636166CFA7B9B1EA6D8B444DF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:82:91:86:22:1b:58:a0:fe:a9:30:84:d8:
                    ff:12:eb:ee:70:89:64:63:15:34:78:cb:86:f1:9e:
                    1d:00:dc:29:e7:b3:2d:6e:f1:1a:35:6b:2c:ed:e0:
                    1e:7f:0b:72:bc:38:01:c5:f2:05:d8:90:f2:6a:d7:
                    79:65:77:97:ed:14:67:ab:57:72:68:f2:32:df:a7:
                    ea:13:6d:d6:62:02:59:73:0f:0d:1c:35:06:49:03:
                    44:2b:e6:50:4f:3a:d0:b8:20:a5:4b:c5:09:1d:26:
                    09:45:b0:77:75:6b:06:3a:dc:fe:79:00:b9:81:d3:
                    92:fe:08:96:b2:bd:d6:84:7a:e9:c9:51:62:d7:e4:
                    1e:b3:7c:5b:24:ba:2f:e4:59:4b:7d:bb:ce:9b:ba:
                    69:7b:8a:72:a5:54:47:ca:40:4e:45:81:3d:36:4c:
                    b1:9d:2f:3b:2f:e5:97:3b:f4:62:e0:bb:97:d9:52:
                    3d:2b:4f:be:5e:86:32:ee:49:0e:54:81:97:90:24:
                    fe:50:e1:85:9d:d9:83:77:3d:76:e6:a5:a4:62:5e:
                    7e:79:e1:da:34:50:c0:a7:9f:b2:a2:7d:e3:5c:ff:
                    c7:65:24:1c:5e:ca:70:ca:e7:1c:c6:7d:b4:64:64:
                    fc:cd:7d:c0:6e:0d:55:03:24:49:c0:c6:e1:2d:65:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:35:B0:15:6F:66:36:16:6C:FA:7B:9B:1E:A6:D8:B4:44:DF:12
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130362e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:c0:14:a5:d1:43:d0:75:cb:71:a9:a4:3f:0f:2c:69:0b:
         e5:fe:c5:67:bc:62:3b:15:83:f8:86:1d:99:00:f5:ca:6a:0a:
         ab:13:37:88:d6:24:95:be:d1:0b:94:a9:2f:84:74:79:09:f2:
         fb:b4:b4:6a:64:89:61:63:79:e6:04:57:0c:76:d7:fd:8e:07:
         21:66:f9:30:b1:96:09:85:29:9d:c2:b1:48:d5:01:3e:be:e7:
         99:7b:88:86:1b:78:78:59:07:27:8f:19:49:72:b5:d8:cd:0b:
         49:c5:85:de:b2:c1:d1:9f:57:05:3b:60:4f:57:c1:31:c1:ef:
         ee:98:1d:9b:6b:42:bc:16:3c:02:59:68:0d:ca:cd:6b:ed:46:
         88:4c:52:ab:64:a8:4f:ba:fe:95:3d:44:a7:db:a5:84:40:4d:
         93:bf:7c:46:49:b3:3f:3c:99:f0:8d:f7:32:27:6d:31:99:e7:
         cf:ef:e3:a2:da:c3:a5:7e:42:2e:c2:b6:65:46:86:13:1c:dd:
         f8:29:d9:5a:54:d7:82:a4:71:38:3c:45:fc:53:eb:ee:82:a8:
         37:77:25:12:eb:d1:75:fe:4e:a3:d4:8a:35:c6:b7:3f:e2:50:
         10:2d:b8:a3:b5:25:c3:ef:99:37:66:70:83:32:d0:e4:9e:26:
         6d:0b:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:30 2026 by rpki-client