Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130372e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130372e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          AQqasg0sh5cXo9dITihTH/mBt+TRmkHwPfNYnKlJ/yI=
Subject key identifier:   48:39:F4:63:1D:D3:55:AC:60:1D:F9:41:4B:3D:C3:88:88:58:EE:C7
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       13B985C42F44C8E1BAFB9E33FD53D743812EEE19
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130372e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:03 +0000
ROA not before:           Fri 09 Oct 2026 20:35:03 +0000
ROA not after:            Fri 08 Oct 2027 20:40:03 +0000
asID:                     27787
IP address blocks:        200.107.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b9:85:c4:2f:44:c8:e1:ba:fb:9e:33:fd:53:d7:43:81:2e:ee:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:03 2026 GMT
            Not After : Oct  8 20:40:03 2027 GMT
        Subject: CN=4839F4631DD355AC601DF9414B3DC3888858EEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:ea:20:0d:00:69:87:e6:80:94:2c:19:1a:
                    cd:ae:a9:cd:8d:8d:a3:c7:84:a5:af:fc:c7:8b:a9:
                    81:05:81:df:44:9e:76:4a:86:fc:37:fe:2f:9e:9e:
                    51:0c:44:3a:8e:9f:7a:85:36:b7:74:65:dd:de:01:
                    b1:47:c3:46:f9:19:88:ce:ed:29:9d:03:ba:31:35:
                    5c:6e:b5:e2:94:16:db:1d:c6:f7:6d:b5:47:fa:22:
                    ac:53:a4:13:af:df:38:6a:ce:9f:62:83:7b:22:2f:
                    ed:dd:d0:88:bd:63:2d:b3:8e:e8:42:93:73:60:1f:
                    c6:29:10:b6:10:1a:84:35:84:3d:43:98:b0:f4:54:
                    b6:bd:5c:b2:34:11:c3:23:2c:56:0f:80:96:78:15:
                    e4:67:5f:58:0a:52:80:9d:ea:64:72:ce:6f:f2:ef:
                    61:39:6e:a6:ed:8c:36:4f:55:99:92:93:95:a0:5d:
                    67:6c:4a:c0:e3:40:fd:c2:bf:0a:bb:e5:62:41:a4:
                    b0:f4:01:68:59:c1:42:70:1d:02:da:0a:22:ae:e4:
                    6a:85:63:28:95:dc:24:29:36:dd:d0:ee:32:c2:c3:
                    48:28:81:14:c5:33:20:a1:14:b8:5c:92:9f:dd:93:
                    7d:cf:e0:83:f9:ac:c6:2a:f0:71:00:ce:18:f6:ed:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:39:F4:63:1D:D3:55:AC:60:1D:F9:41:4B:3D:C3:88:88:58:EE:C7
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130372e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:45:5f:3f:5c:e1:e3:04:25:19:38:4e:dd:e2:17:7a:15:
         b0:83:d9:65:e3:b3:d6:e7:40:1b:b1:66:11:d0:05:97:bb:e3:
         5e:9f:6c:5d:bd:5c:c6:98:dc:7d:27:6d:d5:83:45:2d:33:9f:
         04:74:05:de:3a:50:2c:6d:ca:50:30:f7:15:8b:8a:61:1a:88:
         79:3d:a3:87:1b:fd:fc:8f:31:ec:34:30:cd:5b:a6:3f:20:1a:
         84:77:6c:90:fe:69:e2:27:8c:75:ec:3b:ad:61:c1:d6:80:04:
         9c:92:2c:f9:0c:0e:62:4d:28:59:61:fd:18:ae:33:96:9d:a5:
         ac:a9:91:a5:f1:7f:ac:66:1f:bb:97:0c:fd:b5:58:a1:e3:1a:
         21:8e:60:d4:d2:15:03:bb:a4:74:a3:a3:0d:fb:f2:03:f3:47:
         2d:c1:05:89:02:a5:6b:92:36:76:cf:f4:13:0f:88:1a:99:ec:
         ae:90:8b:e0:80:19:14:80:93:93:2a:31:28:c2:59:dc:fb:80:
         9d:68:f0:54:31:e7:8c:38:ca:7b:d0:9c:0b:d3:82:26:5c:e3:
         8e:e6:d2:6a:d7:88:82:4e:0a:0a:fe:55:7e:17:4b:1a:f1:73:
         a1:e2:19:dc:01:28:bc:aa:9d:54:75:4e:c7:5d:d2:f3:76:5f:
         58:f3:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:25 2026 by rpki-client