Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e33322e302f31392d3139203d3e203237373638.roa
File:                     3137372e3235312e33322e302f31392d3139203d3e203237373638.roa (raw, json)
Hash identifier:          YOibby48PeCq7UQ7QWoejnyDqAiTXaXmmt97mrR9g9M=
Subject key identifier:   66:4B:3E:A8:5E:1E:29:CE:CA:E4:B8:26:99:FD:BB:AD:B8:FD:01:B7
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       085A52014CC9D35E88558A80E1081C3A2A72770B
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e33322e302f31392d3139203d3e203237373638.roa
Signing time:             Fri 09 Oct 2026 19:39:42 +0000
ROA not before:           Fri 09 Oct 2026 19:34:42 +0000
ROA not after:            Fri 08 Oct 2027 19:39:42 +0000
asID:                     27768
IP address blocks:        177.251.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 13:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5a:52:01:4c:c9:d3:5e:88:55:8a:80:e1:08:1c:3a:2a:72:77:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct  9 19:34:42 2026 GMT
            Not After : Oct  8 19:39:42 2027 GMT
        Subject: CN=664B3EA85E1E29CECAE4B82699FDBBADB8FD01B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:5a:1e:87:c9:2e:9c:7b:fb:16:91:42:b7:
                    21:4b:1e:5f:d0:cd:e3:17:3a:4c:b7:c4:71:6c:f1:
                    cc:aa:10:6e:4b:c2:60:87:a7:54:5b:29:61:86:63:
                    63:5c:d3:89:44:76:12:22:33:55:f3:7f:d0:dd:bb:
                    d2:db:71:4a:98:ad:58:31:df:6b:a8:63:9c:98:cd:
                    d9:b5:ac:8e:95:38:34:1e:8a:d3:01:06:65:68:1f:
                    f5:5d:60:b8:d3:cc:4f:07:12:3c:22:7a:6a:ee:cf:
                    82:4d:5f:e6:69:68:d4:0e:0a:f7:28:26:05:35:fe:
                    c4:92:1e:ab:48:b2:8f:e7:5e:b6:02:14:8b:c9:8c:
                    68:fe:32:93:a9:99:35:81:ae:5c:b1:28:45:97:9f:
                    ba:a8:07:11:83:af:32:64:1c:89:41:34:fd:b3:6b:
                    80:39:94:a2:c8:f6:75:ea:1d:57:bb:4c:a1:e5:78:
                    70:37:05:42:4e:20:ca:be:ef:1a:e8:db:53:44:45:
                    96:fd:ca:f1:8e:21:33:33:30:99:c8:49:13:08:38:
                    d1:09:40:0a:41:e7:c2:37:9e:c3:da:09:d2:4b:9a:
                    b5:73:e8:14:7c:93:ae:df:08:c1:15:59:c5:2c:8c:
                    b5:e5:87:6f:b1:eb:f0:d3:a9:c6:71:b3:d8:93:1d:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:3E:A8:5E:1E:29:CE:CA:E4:B8:26:99:FD:BB:AD:B8:FD:01:B7
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e33322e302f31392d3139203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.251.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:36:2b:52:0f:d6:6a:19:a4:9f:a8:6d:4c:cf:02:1a:80:
         69:10:7b:93:72:f7:0d:d6:5a:61:dc:e9:9a:7d:18:6f:4e:60:
         7d:90:2b:32:a7:ae:85:60:dc:28:8b:fd:eb:b1:de:19:37:db:
         96:c4:44:48:71:e8:27:d9:e6:3f:94:83:eb:a9:bc:8e:82:09:
         2a:5b:15:1c:d6:ec:d7:a1:fc:bf:ba:b1:ae:09:d2:b7:44:8f:
         d5:48:52:cb:11:de:40:58:25:74:b0:ea:b2:e6:ca:c2:6f:35:
         aa:f6:de:6c:95:a0:5a:b5:41:9b:86:a9:52:89:86:58:97:51:
         22:0e:64:21:68:06:05:b7:5e:d3:d0:29:82:2c:04:0c:c1:cb:
         bf:3e:50:31:f4:a7:46:00:19:ba:6f:fd:ff:4d:7d:69:60:ec:
         96:7e:f9:6b:d2:b3:e7:6f:f6:96:23:95:a7:67:08:1a:57:c5:
         3e:4e:4a:8c:2e:65:a9:8e:93:71:49:e7:fa:d9:67:4b:2c:07:
         8d:df:0a:6c:16:4f:45:74:7e:2d:03:56:f8:87:e3:a1:e8:a6:
         58:13:b9:77:4f:ca:26:cb:de:52:1a:71:da:5c:25:03:9f:9d:
         83:80:5d:d1:67:04:96:df:1d:30:7d:6f:95:a0:3d:e0:1e:e6:
         e4:a7:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:10:14 2026 by rpki-client