Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa
File:                     3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          /soJDsisRVNdnOKWqpp/dkmbdQvWZq954u5wxixjq9A=
Subject key identifier:   17:18:F8:A1:7A:07:4E:36:5D:40:03:BF:16:80:C4:D1:23:00:0E:AD
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       020E65CAD6E5ABF14654A8BA4CD11D4DB71FF69D
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa
Signing time:             Fri 09 Oct 2026 19:39:43 +0000
ROA not before:           Fri 09 Oct 2026 19:34:43 +0000
ROA not after:            Fri 08 Oct 2027 19:39:43 +0000
asID:                     27768
IP address blocks:        177.251.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 11:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0e:65:ca:d6:e5:ab:f1:46:54:a8:ba:4c:d1:1d:4d:b7:1f:f6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct  9 19:34:43 2026 GMT
            Not After : Oct  8 19:39:43 2027 GMT
        Subject: CN=1718F8A17A074E365D4003BF1680C4D123000EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:fe:6a:2b:f5:ba:b4:aa:08:fe:0f:89:36:
                    b4:be:3a:a9:3b:a4:72:46:fa:1d:df:f6:c6:dd:1c:
                    d9:15:78:be:aa:29:c0:30:6e:4e:f4:a1:7c:ea:90:
                    e3:29:31:64:ea:a6:85:bf:86:e7:e4:9a:f2:87:36:
                    49:33:89:6f:5a:df:81:54:4e:9a:c1:e6:64:be:e7:
                    fc:4d:a5:54:95:df:ab:36:7e:34:a2:a6:11:6c:29:
                    f4:0c:6e:13:35:47:c6:2d:97:57:7f:db:58:38:9a:
                    47:8e:3d:fb:85:6b:18:22:38:ef:7c:02:18:2f:7b:
                    c5:ef:70:11:bc:61:df:8d:4c:fa:04:7f:4e:86:7a:
                    af:87:5d:86:fe:22:74:df:68:85:2d:e2:f5:17:49:
                    c8:21:5a:c6:29:13:4c:b8:84:64:5b:b9:46:05:01:
                    94:a5:ff:85:2e:81:5c:5e:fb:d0:26:28:c6:3e:b4:
                    9b:16:58:5b:9c:e0:d1:6a:0f:92:12:7a:1e:7e:08:
                    98:1f:61:c2:c1:ee:19:08:e8:d6:f1:7b:54:d0:e6:
                    f6:0d:d7:b6:12:e9:22:1f:d9:b7:29:db:43:0c:a6:
                    46:57:10:de:24:b4:b7:06:b4:75:a8:5a:75:69:48:
                    3d:71:22:3c:c5:16:f8:63:a9:41:6f:4e:04:95:47:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:F8:A1:7A:07:4E:36:5D:40:03:BF:16:80:C4:D1:23:00:0E:AD
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235342e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.251.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:7b:86:f8:a9:04:9c:b3:07:de:80:11:01:9d:41:0a:93:
         75:c4:68:4c:32:5d:aa:49:14:a3:6b:6a:e1:72:22:af:f6:9d:
         9c:c5:27:fe:06:b9:fa:2e:8c:1e:73:93:f5:96:ec:db:64:88:
         2a:74:4c:cb:8f:2b:46:20:d9:b4:12:57:5f:a5:fb:63:39:0a:
         c3:59:ad:e8:7e:85:06:7f:17:e7:31:82:30:13:6f:89:c6:42:
         06:d4:57:ec:60:49:52:27:79:b6:f2:8c:56:bd:5d:5a:63:21:
         2e:21:7a:a4:32:3d:3f:2e:26:cb:e6:81:de:27:cc:93:e4:0c:
         f3:98:6d:86:4c:c2:f5:a3:d8:d1:ee:a0:70:c4:cb:a6:c0:8b:
         e5:e8:8b:ac:d1:cd:98:8f:d3:2c:ad:58:f2:9e:5b:a7:fc:2d:
         6b:55:00:50:78:8a:a6:63:f7:1c:15:3a:86:81:c8:3c:16:d8:
         44:dc:43:1b:14:56:f6:e8:38:d9:4f:71:19:b8:98:4a:a2:f0:
         03:02:7c:e0:18:10:4c:f0:79:4e:54:46:7c:3d:18:b2:df:23:
         33:b7:95:9c:41:ab:b6:ad:a7:94:4f:94:82:16:ff:ca:2c:60:
         b8:5d:73:52:2d:0c:a2:1b:e6:1d:8e:04:fc:96:94:f5:2c:fb:
         af:e2:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:19:09 2026 by rpki-client