Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34342e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          dZ07cx6OyEGahqypFODlXd3C6QBePZh63lzFYVQBGTI=
Subject key identifier:   EA:AA:02:90:01:1C:8B:81:C8:AF:72:29:82:E3:F2:46:EC:71:7C:BF
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       17C08CE4C8068634B0C49168A974D05324E34EF3
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa
Signing time:             Sun 11 Oct 2026 00:39:53 +0000
ROA not before:           Sun 11 Oct 2026 00:34:53 +0000
ROA not after:            Sun 10 Oct 2027 00:39:53 +0000
asID:                     27768
IP address blocks:        201.217.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 23:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c0:8c:e4:c8:06:86:34:b0:c4:91:68:a9:74:d0:53:24:e3:4e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct 11 00:34:53 2026 GMT
            Not After : Oct 10 00:39:53 2027 GMT
        Subject: CN=EAAA0290011C8B81C8AF722982E3F246EC717CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:3f:0b:57:7a:3f:33:d1:48:a1:c8:a9:60:
                    b0:a3:04:26:48:6a:52:83:8e:bc:1e:dd:05:39:99:
                    55:05:6a:74:04:d4:23:50:bb:9a:12:04:bb:bd:b6:
                    e2:88:4b:b5:46:70:96:ab:20:0b:37:85:1f:f4:35:
                    66:29:9b:cc:02:1a:80:cb:a2:f9:81:23:f0:2a:fa:
                    0c:43:23:17:56:f7:66:c6:b2:54:20:c3:7e:03:74:
                    d3:ad:fe:be:df:34:8d:5c:b8:80:cc:2f:e9:04:ce:
                    3a:47:c3:98:c0:47:1b:56:23:9f:36:d6:31:9b:c7:
                    28:00:73:9d:0d:3d:8e:be:41:25:02:8b:e8:5f:c1:
                    2b:a5:66:50:83:7d:2c:44:fc:36:6c:f1:be:09:30:
                    24:c9:35:9f:81:20:2f:3a:d8:90:24:0d:b6:c2:ad:
                    27:af:fb:8d:c7:b4:16:bb:65:2a:95:fc:e7:f9:4e:
                    b1:18:00:85:33:48:40:48:e0:a1:07:d8:b6:a9:22:
                    a4:ad:b4:3a:f9:86:dc:86:cf:d2:b6:fd:85:c1:07:
                    0e:28:b7:7c:4d:e9:d2:d3:17:a1:6a:d4:1c:4a:87:
                    87:36:43:a5:ef:d1:02:60:2e:22:68:ae:b0:b3:7c:
                    96:a1:b2:54:c0:70:29:60:ef:0f:6a:ca:a7:ea:65:
                    94:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AA:02:90:01:1C:8B:81:C8:AF:72:29:82:E3:F2:46:EC:71:7C:BF
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:42:a2:35:97:a0:23:3a:cb:15:4e:94:3c:d8:6c:0b:d4:
         4c:dc:b0:a8:e4:dd:bb:9c:bc:cc:de:e3:cb:c4:af:a2:c5:78:
         12:74:d1:b5:de:47:21:11:ef:d7:83:1a:3e:c4:28:48:33:f8:
         8b:05:79:9a:61:2b:7c:70:18:ce:37:4c:57:3d:06:9d:7d:ef:
         06:7c:39:e1:17:64:3c:30:83:58:85:56:c9:b2:a0:51:27:6b:
         d7:ec:f2:40:4b:af:35:de:48:ac:f5:d6:16:11:2b:51:01:28:
         9e:72:e9:10:c3:cc:59:d9:4d:b2:03:5e:5f:03:d3:a1:dc:a6:
         32:24:da:a7:60:39:98:4b:0b:04:4a:6b:c7:fd:d3:e0:a1:6c:
         3f:f5:01:97:e5:21:79:e4:6f:a7:f8:ea:39:10:27:e4:f5:e6:
         c9:ad:0a:3d:89:bb:c9:91:3c:34:3c:d3:26:66:3a:70:40:f0:
         8f:24:01:d8:6c:79:27:02:5f:6a:3b:0c:b1:18:97:6e:82:cb:
         44:7a:c6:13:6f:18:f8:34:63:aa:65:dc:08:cd:4d:fb:2e:36:
         b5:d4:d3:d6:d1:c3:bd:dc:10:f9:de:a8:25:9f:62:75:b6:26:
         5a:b9:8b:35:27:53:37:5d:c2:a2:0b:ae:b0:a2:8c:28:c4:db:
         56:e6:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:31:38 2026 by rpki-client