Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e39382e302f32342d3234203d3e203237373837.roa
File:                     3230302e3130372e39382e302f32342d3234203d3e203237373837.roa (raw, json)
Hash identifier:          iXVBjs3zwECetlSgACmdBS4P9udElOTlUphhmqUDjQM=
Subject key identifier:   8B:F3:41:42:DC:F1:1A:54:00:61:43:CF:28:EA:49:57:CB:04:42:13
Certificate issuer:       /CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
Certificate serial:       3573AB776FD584B0503D7A760ADFAB7210DEAC89
Authority key identifier: ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e39382e302f32342d3234203d3e203237373837.roa
Signing time:             Fri 09 Oct 2026 20:40:04 +0000
ROA not before:           Fri 09 Oct 2026 20:35:04 +0000
ROA not after:            Fri 08 Oct 2027 20:40:04 +0000
asID:                     27787
IP address blocks:        200.107.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:73:ab:77:6f:d5:84:b0:50:3d:7a:76:0a:df:ab:72:10:de:ac:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED573202FA92796CFA81CD5CBD279688344B2C0A
        Validity
            Not Before: Oct  9 20:35:04 2026 GMT
            Not After : Oct  8 20:40:04 2027 GMT
        Subject: CN=8BF34142DCF11A54006143CF28EA4957CB044213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:da:28:18:13:ba:f0:5c:9b:5e:f2:4a:9c:
                    bf:17:18:7d:ca:43:27:91:bf:65:2e:82:f4:cb:a4:
                    87:a5:25:3f:fe:20:d9:6e:0a:55:b6:42:3a:f5:81:
                    c6:1b:4a:33:86:c8:ad:bf:f1:1a:60:e0:f7:2c:a6:
                    0e:d3:bd:6a:d1:b6:46:30:1f:1a:3b:e2:8f:43:4e:
                    aa:f5:c7:a3:e3:73:2d:e7:47:f9:b0:42:1f:30:32:
                    d4:e8:05:e4:bd:02:61:62:6e:69:59:ec:7b:3d:10:
                    9b:bd:f7:04:a0:88:65:14:c9:a8:b5:c3:4b:05:66:
                    c6:ea:2a:05:2c:ff:7c:da:ab:da:9b:44:72:48:94:
                    91:ab:d7:ef:7d:66:a9:32:d8:3d:11:92:fa:68:9f:
                    b0:48:8a:19:38:c7:92:84:f6:7a:26:a1:7e:8a:5c:
                    73:a4:3f:06:79:68:d2:26:30:f5:bb:24:ca:83:f1:
                    21:10:34:96:b6:a6:e7:14:4c:db:b0:c4:24:7c:c0:
                    47:0d:2b:92:da:86:f7:04:fd:e5:dd:6b:3d:59:03:
                    9d:90:73:3c:a3:ff:f6:a5:77:87:e2:0e:bc:ec:ec:
                    c2:f2:ae:57:27:78:1a:cb:34:3b:9e:61:3a:79:d4:
                    85:c2:b1:e3:c7:1c:94:71:7c:7c:f5:b1:f9:34:c6:
                    49:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:41:42:DC:F1:1A:54:00:61:43:CF:28:EA:49:57:CB:04:42:13
            X509v3 Authority Key Identifier:
                keyid:ED:57:32:02:FA:92:79:6C:FA:81:CD:5C:BD:27:96:88:34:4B:2C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED573202FA92796CFA81CD5CBD279688344B2C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/972877CC5190B42892EB5CFC1D68455B13451BE51420C21FBDF0BAEC6A6AC4B6/0/3230302e3130372e39382e302f32342d3234203d3e203237373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:c6:f6:16:7c:b1:14:9f:eb:0c:3a:fb:28:63:97:65:01:
         0a:03:87:e2:3b:59:a2:d7:6d:33:c7:b1:4d:1a:9e:e9:1c:cf:
         84:c1:05:f1:f7:7f:b4:d5:32:2d:32:8c:d3:06:42:b9:93:ca:
         e8:0b:3e:da:00:79:0c:20:68:a7:45:23:45:bd:51:86:47:ed:
         0a:9c:b3:50:73:f4:ac:fc:2e:bd:18:16:ac:06:59:24:34:ba:
         11:97:4b:72:ae:32:d4:77:5b:70:03:6e:31:b8:bc:e8:e9:e1:
         2f:fa:85:73:1c:79:d6:b5:68:5b:be:33:75:5f:82:f8:97:1b:
         f1:44:cd:c8:d3:3c:55:9f:8f:7d:f5:65:4f:a0:b5:bb:51:41:
         88:28:64:cc:e2:49:93:0f:79:fa:37:d3:d1:3b:78:57:af:87:
         30:74:21:f2:88:0e:1d:9f:e1:9a:62:27:fe:ad:3f:ac:da:e8:
         1d:b1:31:3b:0f:1e:0c:97:96:f0:47:31:e8:b2:2d:08:79:d7:
         ae:c9:06:f2:bf:43:4f:29:5b:43:43:f6:35:71:d1:83:a8:9a:
         27:b7:fa:28:23:e4:05:ff:68:c5:9c:e9:f3:d5:f7:ce:81:58:
         5a:5a:47:05:30:27:da:c8:74:36:b4:27:9f:a4:a5:24:b7:36:
         b1:bc:17:7e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNXOrd2/VhLBQPXp2Ct+rchDerIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ1NzMyMDJGQTkyNzk2Q0ZBODFDRDVDQkQyNzk2ODgz
NDRCMkMwQTAeFw0yNjEwMDkyMDM1MDRaFw0yNzEwMDgyMDQwMDRaMDMxMTAvBgNV
BAMTKDhCRjM0MTQyRENGMTFBNTQwMDYxNDNDRjI4RUE0OTU3Q0IwNDQyMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLdooGBO68FybXvJKnL8XGH3K
QyeRv2UugvTLpIelJT/+INluClW2Qjr1gcYbSjOGyK2/8Rpg4Pcspg7TvWrRtkYw
Hxo74o9DTqr1x6Pjcy3nR/mwQh8wMtToBeS9AmFibmlZ7Hs9EJu99wSgiGUUyai1
w0sFZsbqKgUs/3zaq9qbRHJIlJGr1+99Zqky2D0Rkvpon7BIihk4x5KE9nomoX6K
XHOkPwZ5aNImMPW7JMqD8SEQNJa2pucUTNuwxCR8wEcNK5LahvcE/eXdaz1ZA52Q
czyj//ald4fiDrzs7MLyrlcneBrLNDueYTp51IXCsePHHJRxfHz1sfk0xkk9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUi/NBQtzxGlQAYUPPKOpJV8sEQhMwHwYDVR0j
BBgwFoAU7VcyAvqSeWz6gc1cvSeWiDRLLAowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzI4NzdDQzUxOTBCNDI4OTJFQjVDRkMxRDY4NDU1QjEz
NDUxQkU1MTQyMEMyMUZCREYwQkFFQzZBNkFDNEI2LzAvRUQ1NzMyMDJGQTkyNzk2
Q0ZBODFDRDVDQkQyNzk2ODgzNDRCMkMwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDU3MzIwMkZBOTI3OTZDRkE4
MUNENUNCRDI3OTY4ODM0NEIyQzBBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcyODc3Q0M1MTkwQjQyODkyRUI1Q0ZDMUQ2ODQ1NUIxMzQ1MUJFNTE0
MjBDMjFGQkRGMEJBRUM2QTZBQzRCNi8wLzMyMzAzMDJlMzEzMDM3MmUzOTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhrYjAN
BgkqhkiG9w0BAQsFAAOCAQEAAEzG9hZ8sRSf6ww6+yhjl2UBCgOH4jtZotdtM8ex
TRqe6RzPhMEF8fd/tNUyLTKM0wZCuZPK6As+2gB5DCBop0UjRb1RhkftCpyzUHP0
rPwuvRgWrAZZJDS6EZdLcq4y1HdbcANuMbi86OnhL/qFcxx51rVoW74zdV+C+Jcb
8UTNyNM8VZ+PffVlT6C1u1FBiChkzOJJkw95+jfT0Tt4V6+HMHQh8ogOHZ/hmmIn
/q0/rNroHbExOw8eDJeW8Ecx6LItCHnXrskG8r9DTylbQ0P2NXHRg6iaJ7f6KCPk
Bf9oxZzp89X3zoFYWlpHBTAn2sh0NrQnn6SlJLc2sbwXfg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:26 2026 by rpki-client