Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137322e302f32342d3234203d3e20323639393237.roa
File:                     3230372e3139312e3137322e302f32342d3234203d3e20323639393237.roa (raw, json)
Hash identifier:          +LvfNWRUVfFTAYLcfts3hh8ge5iovxXAHQ2mhzJQWmU=
Subject key identifier:   74:E4:F9:32:B6:5D:96:E1:55:52:74:2D:5E:B0:D5:33:F5:2C:13:3D
Certificate issuer:       /CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
Certificate serial:       62990AB57B0630F2C7329493C8F11899D3268C2E
Authority key identifier: 1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137322e302f32342d3234203d3e20323639393237.roa
Signing time:             Wed 07 Oct 2026 23:39:11 +0000
ROA not before:           Wed 07 Oct 2026 23:34:11 +0000
ROA not after:            Wed 06 Oct 2027 23:39:11 +0000
asID:                     269927
IP address blocks:        207.191.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 12:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:99:0a:b5:7b:06:30:f2:c7:32:94:93:c8:f1:18:99:d3:26:8c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
        Validity
            Not Before: Oct  7 23:34:11 2026 GMT
            Not After : Oct  6 23:39:11 2027 GMT
        Subject: CN=74E4F932B65D96E15552742D5EB0D533F52C133D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:ec:43:e0:05:40:c6:be:2e:86:c6:ee:d4:
                    4d:35:72:ac:36:66:ee:43:0d:74:6c:30:de:d5:e1:
                    ed:80:fc:3d:b7:46:e9:1c:0b:59:a6:77:66:2c:ef:
                    98:fd:4b:88:04:f3:9c:02:52:f9:62:c5:dc:fc:3e:
                    ca:ea:d1:6a:f9:b9:0d:60:d3:ca:98:12:c9:da:85:
                    71:97:cf:51:86:f1:1e:e4:6e:e5:24:18:92:e9:00:
                    47:85:48:28:49:b1:8b:63:59:2b:77:23:76:04:c4:
                    e9:9c:ee:a6:c0:0c:c2:61:1b:c2:50:8d:86:81:14:
                    2e:24:6a:0d:12:47:e3:6e:bc:a3:ef:e6:63:fb:71:
                    21:67:a1:7c:bd:e7:35:aa:29:fb:6b:14:1c:6c:8a:
                    49:45:fa:a5:7f:eb:6d:ca:d8:84:61:db:64:9e:64:
                    04:12:f4:65:19:ce:97:db:60:1c:89:8e:2d:49:b2:
                    be:d9:9e:0a:96:3d:94:61:98:6a:97:63:e0:49:bc:
                    f8:c7:be:fa:8a:5f:00:b7:22:f4:af:c5:8b:88:6d:
                    1b:19:fe:df:8f:5c:9b:05:25:0d:a3:ff:05:ee:dc:
                    ba:18:e8:3e:e9:15:a2:75:77:25:25:f2:35:7c:d4:
                    a1:ce:52:e8:eb:12:32:fd:e9:69:df:7b:c8:f1:f1:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E4:F9:32:B6:5D:96:E1:55:52:74:2D:5E:B0:D5:33:F5:2C:13:3D
            X509v3 Authority Key Identifier:
                keyid:1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137322e302f32342d3234203d3e20323639393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:04:05:88:d2:b3:60:5f:cc:9a:5f:5e:c7:db:6d:53:9e:
         90:ab:9b:38:e1:9e:c1:50:c9:55:5c:b1:f7:2d:bc:44:05:17:
         61:2e:24:9d:46:04:28:00:1a:63:69:ae:80:99:8e:20:cf:01:
         34:15:44:40:40:9a:f0:a5:6e:08:9c:ae:52:5a:18:2e:b7:49:
         f0:23:2d:7b:1e:5b:5c:96:af:fa:4b:e1:6a:b8:43:da:3a:d0:
         7f:94:ac:0b:4f:f7:4f:a1:4e:b7:52:94:e4:61:6b:27:c0:d2:
         56:6f:27:c5:31:2d:9d:7e:a5:a6:25:76:5d:25:b1:18:0d:7e:
         64:d8:c6:f1:e7:cc:cc:a5:19:ca:c6:3d:a7:89:f0:7a:8a:0f:
         a4:a1:55:ed:9c:e2:9e:98:16:76:30:83:0a:d2:1a:62:a3:c2:
         96:cb:fc:b8:fc:3f:a1:8f:e8:3d:8d:aa:4a:bc:68:c9:8b:eb:
         27:8b:33:58:a7:22:98:60:8c:e0:ea:09:a4:f0:f7:bb:c3:f5:
         89:fb:e8:cf:36:42:f4:12:09:b7:21:14:a6:a7:ec:42:ba:9d:
         7f:3b:ad:c0:f2:ad:50:b4:8f:aa:37:98:1a:3d:dc:2c:4d:53:
         ea:3b:4f:c3:1c:b9:84:f3:44:71:12:72:ea:bd:13:1c:1d:98:
         1e:e1:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:09:08 2026 by rpki-client