Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa
File:                     3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa (raw, json)
Hash identifier:          GWjo2Ipk1CWVB5vekVAmHG4rzow6/u6SLbXFIbw+NQQ=
Subject key identifier:   D9:F9:E4:D7:C7:76:83:04:79:AE:B4:12:3A:03:65:B9:C4:F8:A6:7F
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       05604177B59B22A04466691A3BAD36B3F11F1333
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa
Signing time:             Sat 10 Oct 2026 23:39:52 +0000
ROA not before:           Sat 10 Oct 2026 23:34:52 +0000
ROA not after:            Sat 09 Oct 2027 23:39:52 +0000
asID:                     27866
IP address blocks:        177.250.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:60:41:77:b5:9b:22:a0:44:66:69:1a:3b:ad:36:b3:f1:1f:13:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct 10 23:34:52 2026 GMT
            Not After : Oct  9 23:39:52 2027 GMT
        Subject: CN=D9F9E4D7C776830479AEB4123A0365B9C4F8A67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:98:dc:c0:f5:d5:04:a5:d5:9a:ce:5c:f4:
                    ab:33:87:35:02:17:1a:14:84:5f:21:4f:46:d4:0d:
                    47:e2:f9:20:ef:59:62:61:ed:e3:a2:fe:a3:c8:d8:
                    93:93:ad:1b:a8:07:dd:36:cc:0c:bc:33:c3:2f:64:
                    1b:7c:3c:01:97:1f:6e:13:69:8c:23:57:49:5f:99:
                    4d:2c:84:00:77:4d:82:71:20:4e:f1:d3:fa:d3:55:
                    97:5b:f8:8e:7a:fb:39:f1:a0:3f:85:22:41:fd:46:
                    ac:b0:d2:f5:83:6c:d4:90:4b:c8:e2:1d:56:96:20:
                    8b:08:83:a9:dc:2b:0b:67:86:50:fa:63:80:e4:9c:
                    4a:67:fe:79:51:20:d8:36:4b:6c:99:b7:ab:e1:8a:
                    86:6c:dc:32:33:09:b1:ef:da:cd:00:43:7f:4d:6f:
                    09:9b:d8:ef:ba:74:39:63:ec:8a:14:87:4b:72:91:
                    12:fd:4a:e5:22:f5:89:a9:de:b4:d2:58:17:d0:7e:
                    f3:51:be:47:65:6d:c8:08:6d:f5:4e:26:aa:e7:07:
                    5b:b3:61:80:34:dc:e6:2b:2a:c5:ea:a1:29:20:12:
                    28:2b:1b:2e:ef:c9:1d:71:7d:aa:50:1b:9f:4e:5b:
                    d9:8e:3d:64:97:46:bb:e5:75:3f:1f:54:25:24:d1:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F9:E4:D7:C7:76:83:04:79:AE:B4:12:3A:03:65:B9:C4:F8:A6:7F
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:a6:fa:ee:5d:ae:ca:5c:e6:b4:a2:aa:22:34:d3:2e:fe:
         ba:42:75:db:10:5a:ac:4a:bf:5d:55:bb:34:29:1b:71:57:49:
         eb:73:ce:59:db:7d:0a:11:5a:ef:a2:02:9f:9b:04:fa:a2:fe:
         bf:67:70:a2:69:83:85:f5:4e:88:02:e3:7e:de:8a:71:ee:4e:
         c6:8c:4c:37:01:40:6e:be:45:d6:54:69:25:90:88:ca:3b:60:
         98:d9:6d:99:fe:41:84:51:ef:a9:af:f1:44:dc:ff:7d:41:07:
         95:5b:73:04:0f:91:3a:85:af:85:64:7d:76:08:bd:75:63:7e:
         22:f7:39:e9:85:a8:02:6f:95:ad:7b:60:9b:1b:b0:cd:7e:c0:
         09:33:d9:43:ae:c6:50:cd:f6:14:bd:03:52:0e:75:4e:5e:c3:
         63:f5:32:f6:e3:82:33:39:f5:8d:ec:e4:5b:b1:38:2a:33:6a:
         88:c5:9a:3c:68:6d:a4:f2:f3:d0:44:67:fe:08:4a:5a:12:19:
         84:4d:7d:7d:3c:9e:df:a2:1a:5a:91:48:ac:39:a5:4a:0c:5e:
         ba:10:96:26:ec:54:a0:88:b7:8b:67:1e:37:fc:ca:28:39:11:
         7e:8e:e1:d9:d7:a4:39:6e:4b:d1:c8:d9:37:98:a9:a7:65:1c:
         2e:32:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:36:34 2026 by rpki-client