Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130392e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e3130392e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          dwuUhD9r/FO2bGP0So7XfVB5OyGgIXpkPiQu9mS8Atk=
Subject key identifier:   B6:63:EC:8C:10:39:EF:82:F8:BB:A8:2E:08:83:C1:40:7F:A4:79:04
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       239B2B57C1F4C810BC5117593ED5C36EC4F71046
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130392e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:07 +0000
ROA not before:           Fri 09 Oct 2026 20:35:07 +0000
ROA not after:            Fri 08 Oct 2027 20:40:07 +0000
asID:                     27787
IP address blocks:        200.107.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9b:2b:57:c1:f4:c8:10:bc:51:17:59:3e:d5:c3:6e:c4:f7:10:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:07 2026 GMT
            Not After : Oct  8 20:40:07 2027 GMT
        Subject: CN=B663EC8C1039EF82F8BBA82E0883C1407FA47904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:47:ba:04:3c:46:fe:c3:17:ed:b9:cd:d7:
                    61:f2:c8:12:2a:d8:74:4f:0a:68:d2:2c:63:b2:19:
                    da:c1:e9:1e:be:1a:a5:08:d6:c6:69:c1:ae:7a:4f:
                    aa:43:2d:51:46:77:4f:fe:28:4b:25:26:1a:cf:68:
                    8f:9f:67:58:7c:ef:ae:4d:c3:b6:17:be:ab:fb:c5:
                    09:33:fd:09:ec:13:00:1d:e8:8e:73:fc:56:ee:32:
                    49:c7:cc:95:b9:60:6b:c1:16:85:25:a7:65:17:79:
                    e5:10:c2:2a:f1:2e:df:b8:dc:90:b3:bf:bf:49:86:
                    c9:42:da:d9:f8:a5:f0:92:0d:b7:d7:c8:1b:4d:fc:
                    37:29:60:2f:e8:50:55:51:69:a8:b7:95:94:e5:2f:
                    97:75:c6:e6:80:97:6b:53:c8:28:fc:3e:48:75:27:
                    d5:97:3f:ed:2f:50:81:79:b9:35:e3:78:27:51:25:
                    88:72:d0:2e:5a:e5:4f:50:48:64:74:67:2a:7a:fb:
                    29:fd:7b:72:a8:4d:4b:99:c9:01:d9:c6:90:9e:cf:
                    02:ab:d8:0d:b7:e3:1e:a9:d4:7b:51:de:fe:2f:f7:
                    74:14:9c:95:92:fa:41:b3:5d:c0:d2:70:32:24:8f:
                    2a:36:c2:b5:05:b3:b7:6d:3c:ba:9a:9f:55:d2:68:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:EC:8C:10:39:EF:82:F8:BB:A8:2E:08:83:C1:40:7F:A4:79:04
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e3130392e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:be:93:6b:c2:89:dd:cb:04:f7:45:63:ae:de:e7:44:ba:
         2c:b8:71:6a:2c:8d:47:e8:10:40:9f:3a:ca:63:7c:7c:11:29:
         48:d0:a6:40:93:01:84:02:13:2e:4e:c5:e6:5f:d5:aa:e2:01:
         61:1e:0c:80:4d:c1:f0:17:e4:a8:e2:6a:9a:3d:bd:ca:8a:8c:
         77:ce:da:87:30:8e:99:02:8e:fb:6e:77:f0:1e:e6:5c:3f:e0:
         83:b8:40:11:d9:90:98:15:13:21:b7:80:92:a7:96:e0:5e:21:
         8f:72:27:d0:64:37:5b:42:ae:da:87:99:d1:bd:17:c8:62:e1:
         b9:7b:db:77:3b:c0:22:69:4b:2f:c4:15:2f:19:a6:e7:4b:2a:
         83:e3:63:95:64:58:0b:26:a9:63:21:0a:8a:14:76:3f:15:cc:
         1e:2d:da:5c:05:3c:af:3c:c8:b3:bd:52:97:1c:29:03:39:1b:
         31:42:a1:ae:17:a9:ed:d8:66:49:a7:08:ba:82:ab:a7:b7:77:
         06:7d:7a:2f:b7:41:7e:90:f4:16:cf:4e:e3:5b:7f:1b:4e:4e:
         e0:13:28:d7:27:f4:5d:11:36:97:4f:6e:55:05:99:3d:c4:f7:
         2a:3f:c7:99:33:3a:cb:52:58:57:c5:ec:d2:b8:e7:ea:99:ff:
         9d:cc:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:32:50 2026 by rpki-client