Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e31362e302f32312d3231203d3e203237373638.roa
File:                     3137372e3235302e31362e302f32312d3231203d3e203237373638.roa (raw, json)
Hash identifier:          FfKfmq53EiLbBl2gMCkAvXc304y4wczW7iBlKfx7Z5Y=
Subject key identifier:   00:55:74:5C:D2:98:39:78:10:E4:30:61:38:7B:63:C1:35:A2:74:E9
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       6F4F24439089891D5520F7E8B3AC64702BBC37B2
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e31362e302f32312d3231203d3e203237373638.roa
Signing time:             Fri 09 Oct 2026 19:39:41 +0000
ROA not before:           Fri 09 Oct 2026 19:34:41 +0000
ROA not after:            Fri 08 Oct 2027 19:39:41 +0000
asID:                     27768
IP address blocks:        177.250.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 21:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4f:24:43:90:89:89:1d:55:20:f7:e8:b3:ac:64:70:2b:bc:37:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct  9 19:34:41 2026 GMT
            Not After : Oct  8 19:39:41 2027 GMT
        Subject: CN=0055745CD298397810E43061387B63C135A274E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:a7:a8:4a:2b:a0:72:8d:2c:68:93:41:62:
                    f4:46:44:17:d8:9a:43:5f:1c:6a:ee:dd:bb:56:59:
                    7f:31:18:39:d7:8f:72:e6:1d:f3:62:ec:5e:e6:19:
                    6c:bc:1d:fd:a3:2c:f5:85:2f:4f:4f:8a:58:72:fc:
                    1f:36:18:52:30:5a:81:63:cb:a5:10:1a:bb:e2:d6:
                    9a:7f:8e:9d:f9:42:21:32:81:77:94:6d:4c:cb:a0:
                    4a:ae:a6:69:88:5f:06:8e:27:87:03:f9:58:db:bf:
                    cf:42:f9:44:6a:e5:be:3d:45:ff:fa:f2:69:0d:03:
                    5e:fb:d3:c6:00:91:0c:e5:5b:ea:c5:a8:09:6a:28:
                    d8:cb:6c:36:ca:d8:a7:97:3a:f8:b7:05:0e:47:77:
                    b2:b7:be:16:10:1b:d8:2d:72:cf:ce:12:1d:39:cd:
                    94:b0:76:3f:5f:13:72:70:b5:c1:ea:52:4d:18:83:
                    a6:56:f7:d2:a6:9a:54:c9:46:12:f2:a0:24:61:b9:
                    ef:ba:c7:ba:be:10:91:9c:60:7a:fa:5d:e0:23:e6:
                    e7:f1:5e:f4:9a:67:d1:27:f4:5f:e3:4e:86:ad:9f:
                    ff:02:57:f3:fb:32:92:fe:39:86:42:f4:8b:09:b3:
                    dd:8e:98:0b:8d:c6:c8:a6:7e:ca:de:25:b7:8e:6b:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:74:5C:D2:98:39:78:10:E4:30:61:38:7B:63:C1:35:A2:74:E9
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e31362e302f32312d3231203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:58:ad:52:8e:ab:b8:d4:d1:fd:05:98:3b:f5:d4:e2:3d:
         ef:c4:f2:47:3a:1f:06:67:ea:e4:06:21:b4:c9:94:3b:a5:00:
         86:d7:2d:e3:55:80:59:05:ef:23:91:1b:2b:08:fd:13:4f:bd:
         23:08:a3:d7:67:cc:8c:70:32:c8:a4:c8:b4:d2:b9:88:ab:72:
         da:08:a3:91:45:28:67:d8:18:ff:77:50:c1:08:2c:55:f1:89:
         68:96:25:79:f4:b8:f7:e7:24:4b:7a:a7:ec:ff:a8:ee:6f:ee:
         45:4d:a9:06:16:27:0e:89:b2:cc:54:ea:a4:59:b7:91:01:9b:
         23:85:c6:b4:38:7a:d3:a6:bc:1d:df:b9:24:6f:b5:eb:94:a6:
         0f:0b:0a:09:73:d7:eb:4f:f4:f0:8a:56:ef:51:c4:8a:7a:3f:
         13:20:91:88:6b:9a:4f:3a:57:56:f7:41:bd:6a:3a:d4:fe:5d:
         92:8b:55:b0:84:79:a1:ba:9a:e7:10:b6:0d:29:d6:7b:2f:6a:
         a3:fa:20:92:83:ac:16:85:a7:22:df:dd:5c:b8:dd:f5:4b:51:
         10:b8:41:36:f5:fd:74:84:a8:f4:7b:b7:b7:2e:4d:3b:55:60:
         6d:8e:d0:35:c5:c7:fb:07:06:01:58:6a:7a:2f:87:47:fc:f2:
         2d:e8:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:48:09 2026 by rpki-client