Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272827.roa
File:                     AS272827.roa (raw, json)
Hash identifier:          x0TKu0kOqVk9Elxu2khHeFIfY8aYXZ+4mxlfqb4EEx4=
Subject key identifier:   BA:6A:CD:D8:B0:51:87:07:E6:7E:CD:97:87:ED:38:38:79:75:2E:38
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       388B973725DD8BCDF026C54DD65DB3B55D66529F
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272827.roa
Signing time:             Fri 09 Oct 2026 04:39:29 +0000
ROA not before:           Fri 09 Oct 2026 04:34:29 +0000
ROA not after:            Fri 08 Oct 2027 04:39:29 +0000
asID:                     272827
IP address blocks:        200.7.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 05:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8b:97:37:25:dd:8b:cd:f0:26:c5:4d:d6:5d:b3:b5:5d:66:52:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Oct  9 04:34:29 2026 GMT
            Not After : Oct  8 04:39:29 2027 GMT
        Subject: CN=BA6ACDD8B0518707E67ECD9787ED383879752E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:86:67:34:b9:2c:76:40:c8:3a:8f:37:68:
                    fe:6a:d4:5c:ad:9a:0b:3f:db:f0:d6:5e:a2:a6:8e:
                    d8:fa:bc:f1:69:fe:d7:3f:06:a6:20:7a:ac:5f:e0:
                    c7:b5:ea:75:fc:55:bc:31:02:94:ee:15:74:a2:1f:
                    51:03:4f:25:ac:c6:98:53:f5:99:90:95:37:d0:d5:
                    ac:8c:ee:99:a3:2c:8f:33:97:16:74:54:02:fb:d3:
                    53:ee:55:e9:f9:e5:88:c6:50:a8:46:a5:ad:2b:8f:
                    f1:f7:02:e8:bf:bc:c2:c7:2f:2a:b7:ca:16:fe:68:
                    ae:b5:20:65:99:df:1e:97:ab:94:71:82:3b:7c:71:
                    f4:9e:09:46:8d:46:4f:69:18:74:2c:f0:ec:ca:c5:
                    af:e7:6f:c1:aa:b7:8f:e3:63:f0:58:cf:0f:4e:26:
                    a4:6a:4b:72:e4:c0:c9:36:2b:49:c6:ce:51:47:ca:
                    d9:17:1a:f4:06:c7:e0:23:61:8f:0c:a3:cc:81:6c:
                    1c:67:70:90:e0:3f:b9:06:be:79:2c:35:85:cb:90:
                    c5:67:35:23:8b:81:7b:32:ef:11:b1:93:51:fb:92:
                    43:a3:c9:c5:6e:89:e3:78:19:89:80:78:c5:25:d0:
                    47:b3:a7:c9:1e:22:1e:08:e8:02:e9:52:4f:f6:98:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6A:CD:D8:B0:51:87:07:E6:7E:CD:97:87:ED:38:38:79:75:2E:38
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272827.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fd:3d:2e:ab:03:62:7e:f8:d7:e9:66:d3:ef:ea:5b:78:f7:
         f1:85:fc:62:97:98:77:30:21:48:d9:cb:6a:28:2e:60:7e:2b:
         d0:4c:a8:5e:ee:4e:40:76:d0:a1:df:36:00:60:11:2f:d3:c4:
         ae:6a:b1:27:37:f2:73:02:2e:6e:bd:83:94:90:af:2b:70:37:
         12:9c:00:f9:e2:22:f7:02:e6:d9:77:17:ef:99:9f:98:75:c7:
         3e:d0:a0:16:32:52:4b:ab:ad:00:47:69:bc:2d:a8:21:ac:f4:
         22:66:1d:a2:60:d9:bf:24:be:3b:89:70:c0:5b:8c:ec:75:19:
         9c:58:8c:d9:75:c3:8c:fe:43:7e:52:96:e6:b4:64:3f:9a:5f:
         dc:7e:8b:91:32:7f:af:bb:71:11:6b:f7:33:43:32:1d:56:bd:
         2a:bb:df:0e:13:5b:40:23:6a:d2:54:17:44:3f:72:cc:aa:d8:
         1a:8b:40:cf:91:47:e5:c2:b0:bf:25:fe:ae:44:0d:00:b4:11:
         58:c3:9c:c2:5d:9c:35:71:5b:15:f8:cf:3c:10:db:76:ad:78:
         c8:45:d6:dc:fd:15:c9:7a:13:11:85:80:80:48:31:d0:9c:e2:
         ec:b8:39:bd:bf:61:54:74:fb:38:b8:d1:27:3b:b7:3e:7b:54:
         9c:82:33:26
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUOIuXNyXdi83wJsVN1l2ztV1mUp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1RTI5OENDQTBCODQwREI3MjZGNjBFRUQxNDBDMzdG
REIyM0JENjAeFw0yNjEwMDkwNDM0MjlaFw0yNzEwMDgwNDM5MjlaMDMxMTAvBgNV
BAMTKEJBNkFDREQ4QjA1MTg3MDdFNjdFQ0Q5Nzg3RUQzODM4Nzk3NTJFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+oZnNLksdkDIOo83aP5q1Fyt
mgs/2/DWXqKmjtj6vPFp/tc/BqYgeqxf4Me16nX8VbwxApTuFXSiH1EDTyWsxphT
9ZmQlTfQ1ayM7pmjLI8zlxZ0VAL701PuVen55YjGUKhGpa0rj/H3Aui/vMLHLyq3
yhb+aK61IGWZ3x6Xq5Rxgjt8cfSeCUaNRk9pGHQs8OzKxa/nb8Gqt4/jY/BYzw9O
JqRqS3LkwMk2K0nGzlFHytkXGvQGx+AjYY8Mo8yBbBxncJDgP7kGvnksNYXLkMVn
NSOLgXsy7xGxk1H7kkOjycVuieN4GYmAeMUl0Eezp8keIh4I6ALpUk/2mBb9AgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUumrN2LBRhwfmfs2Xh+04OHl1LjgwHwYDVR0j
BBgwFoAUcl4pjMoLhA23JvYO7RQMN/2yO9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4
Mjc2MDA5MDc0RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvNzI1RTI5OENDQTBCODQw
REI3MjZGNjBFRUQxNDBDMzdGREIyM0JENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjVFMjk4Q0NBMEI4NDBEQjcy
NkY2MEVFRDE0MEMzN0ZEQjIzQkQ2LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4Mjc2MDA5MDc0
RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvQVMyNzI4Mjcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIB/ow
DQYJKoZIhvcNAQELBQADggEBAHv9PS6rA2J++NfpZtPv6lt49/GF/GKXmHcwIUjZ
y2ooLmB+K9BMqF7uTkB20KHfNgBgES/TxK5qsSc38nMCLm69g5SQrytwNxKcAPni
IvcC5tl3F++Zn5h1xz7QoBYyUkurrQBHabwtqCGs9CJmHaJg2b8kvjuJcMBbjOx1
GZxYjNl1w4z+Q35Slua0ZD+aX9x+i5Eyf6+7cRFr9zNDMh1WvSq73w4TW0AjatJU
F0Q/csyq2BqLQM+RR+XCsL8l/q5EDQC0EVjDnMJdnDVxWxX4zzwQ23ateMhF1tz9
Fcl6ExGFgIBIMdCc4uy4Ob2/YVR0+zi40Sc7tz57VJyCMyY=
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:20:31 2026 by rpki-client