Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32372e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          VW+sb/CS4fDugsyNtJbu64HB1qX+N9SpLP7jMrOOuc0=
Subject key identifier:   51:DC:1F:A7:6E:A9:51:D2:16:AF:C8:99:D9:0B:4D:F4:06:09:FD:A3
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       4A9BE65DBF2AC1A7E6A7D9D20E2B631A0C803643
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa
Signing time:             Sun 11 Oct 2026 00:39:54 +0000
ROA not before:           Sun 11 Oct 2026 00:34:54 +0000
ROA not after:            Sun 10 Oct 2027 00:39:54 +0000
asID:                     27768
IP address blocks:        201.217.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9b:e6:5d:bf:2a:c1:a7:e6:a7:d9:d2:0e:2b:63:1a:0c:80:36:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct 11 00:34:54 2026 GMT
            Not After : Oct 10 00:39:54 2027 GMT
        Subject: CN=51DC1FA76EA951D216AFC899D90B4DF40609FDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:57:90:be:a0:c9:24:b6:d6:05:48:d3:1d:
                    7f:a0:c4:03:93:39:ae:b6:7f:29:ed:5f:80:e3:41:
                    9b:fe:8c:e2:8e:6c:ea:e7:80:ba:d0:2b:e3:6a:91:
                    41:43:10:86:ed:1e:0b:42:30:64:97:9b:bb:e2:5a:
                    c1:d5:18:b7:62:ec:69:0e:b9:09:1b:4d:af:c1:95:
                    71:a5:ba:c1:f9:a9:97:ef:3a:07:39:7e:2b:9f:11:
                    30:9b:cb:86:cd:37:17:89:0e:cf:8f:32:d0:4b:9b:
                    4a:74:c3:5e:0c:ba:c7:0e:a2:0d:21:34:bc:9f:51:
                    f4:15:c0:6d:93:5f:64:2c:c7:71:32:6b:59:18:a0:
                    16:b1:93:91:ed:17:65:29:3f:11:32:40:67:a2:42:
                    48:aa:84:cd:65:5e:66:33:4d:7b:f8:0c:4e:5c:56:
                    d4:92:b8:06:23:52:9d:a5:76:f3:bd:50:09:0c:ac:
                    a2:4b:26:27:7d:f5:6e:d0:05:6b:43:f9:63:81:34:
                    2f:3f:ff:72:7f:ee:fc:e2:4d:86:c2:b9:03:69:31:
                    d3:8a:11:8f:81:0f:34:0f:9f:0c:83:db:f1:76:7f:
                    92:20:70:70:f2:3d:5e:c1:84:d1:6d:82:b1:3e:bf:
                    87:fe:0a:71:d6:c1:cf:c5:5e:a2:9f:d0:89:c7:99:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DC:1F:A7:6E:A9:51:D2:16:AF:C8:99:D9:0B:4D:F4:06:09:FD:A3
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:f2:fd:d6:0e:77:22:e9:ce:56:11:b4:b1:72:24:f6:64:
         d5:0a:90:80:c1:09:e7:9d:f8:f1:27:33:5f:91:45:37:d1:0c:
         75:03:6f:9e:a1:94:e3:59:24:c7:93:50:6a:14:94:50:c6:29:
         36:fc:f3:db:92:bf:f3:0c:88:e3:a1:ca:5a:86:71:8f:d5:f5:
         bf:db:17:8f:30:c7:ea:7d:97:1d:a9:0c:03:38:79:0e:24:6c:
         69:6c:d2:4f:07:0c:d6:7b:a1:a8:a8:d4:a0:30:cb:80:e9:1b:
         f7:80:2c:49:91:3f:d8:e3:bd:95:db:a8:e7:b1:b7:f3:39:c6:
         59:b4:59:8b:3c:be:1a:29:a5:63:dd:e4:7b:8a:7a:03:88:e3:
         5a:23:1c:ef:97:c0:62:19:f8:f7:1e:fc:02:d2:fb:89:31:cb:
         d9:ee:d8:8e:7a:ad:08:4c:f4:7f:49:c8:8d:c7:b5:cf:c4:10:
         fb:07:d6:24:64:13:92:c1:f6:d4:2a:12:56:f4:49:ca:9c:62:
         a8:6e:d2:08:06:f5:2d:43:c4:13:e0:42:07:a8:ca:42:28:3e:
         0c:ff:88:8c:59:98:fd:3a:81:94:51:11:92:d3:ab:07:56:61:
         30:cf:80:d1:06:52:bf:61:2d:fc:eb:58:e5:ea:10:6a:42:66:
         f0:a0:b5:a7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSpvmXb8qwafmp9nSDitjGgyANkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNjEwMTEwMDM0NTRaFw0yNzEwMTAwMDM5NTRaMDMxMTAvBgNV
BAMTKDUxREMxRkE3NkVBOTUxRDIxNkFGQzg5OUQ5MEI0REY0MDYwOUZEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWVeQvqDJJLbWBUjTHX+gxAOT
Oa62fyntX4DjQZv+jOKObOrngLrQK+NqkUFDEIbtHgtCMGSXm7viWsHVGLdi7GkO
uQkbTa/BlXGlusH5qZfvOgc5fiufETCby4bNNxeJDs+PMtBLm0p0w14MuscOog0h
NLyfUfQVwG2TX2Qsx3Eya1kYoBaxk5HtF2UpPxEyQGeiQkiqhM1lXmYzTXv4DE5c
VtSSuAYjUp2ldvO9UAkMrKJLJid99W7QBWtD+WOBNC8//3J/7vziTYbCuQNpMdOK
EY+BDzQPnwyD2/F2f5IgcHDyPV7BhNFtgrE+v4f+CnHWwc/FXqKf0InHmVgVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUdwfp26pUdIWr8iZ2QtN9AYJ/aMwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZGzAN
BgkqhkiG9w0BAQsFAAOCAQEAlGry/dYOdyLpzlYRtLFyJPZk1QqQgMEJ55348Scz
X5FFN9EMdQNvnqGU41kkx5NQahSUUMYpNvzz25K/8wyI46HKWoZxj9X1v9sXjzDH
6n2XHakMAzh5DiRsaWzSTwcM1nuhqKjUoDDLgOkb94AsSZE/2OO9lduo57G38znG
WbRZizy+GimlY93ke4p6A4jjWiMc75fAYhn49x78AtL7iTHL2e7YjnqtCEz0f0nI
jce1z8QQ+wfWJGQTksH21CoSVvRJypxiqG7SCAb1LUPEE+BCB6jKQig+DP+IjFmY
/TqBlFERktOrB1ZhMM+A0QZSv2Et/OtY5eoQakJm8KC1pw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:52 2026 by rpki-client