Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa
File:                     3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa (raw, json)
Hash identifier:          ahfJDn5ku9VN23Jltxogatji03rmLR7LU2T/X6gyXvs=
Subject key identifier:   2C:6D:CE:02:44:27:12:A6:40:91:D8:A0:37:C9:54:97:7C:C8:4D:A7
Certificate issuer:       /CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
Certificate serial:       5F3D4A8788B5D3228E9BB8EBBAB2BF0BD5FEAF00
Authority key identifier: 1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa
Signing time:             Wed 07 Oct 2026 23:39:12 +0000
ROA not before:           Wed 07 Oct 2026 23:34:12 +0000
ROA not after:            Wed 06 Oct 2027 23:39:12 +0000
asID:                     269927
IP address blocks:        207.191.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3d:4a:87:88:b5:d3:22:8e:9b:b8:eb:ba:b2:bf:0b:d5:fe:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
        Validity
            Not Before: Oct  7 23:34:12 2026 GMT
            Not After : Oct  6 23:39:12 2027 GMT
        Subject: CN=2C6DCE02442712A64091D8A037C954977CC84DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:99:c1:e9:1b:69:95:68:37:42:83:52:1c:
                    1f:5c:8a:34:a8:06:9c:3c:03:91:4d:e3:48:2f:3a:
                    85:78:4f:51:72:7e:ca:d7:8e:39:5f:c7:48:3c:a7:
                    55:b7:92:39:1e:5b:c9:47:b3:bf:90:14:6d:02:d0:
                    10:32:95:39:a2:59:13:a7:2c:66:c9:7c:f2:c7:72:
                    37:33:d2:88:1b:19:4d:7b:74:6a:08:e6:39:b8:8e:
                    ba:b0:5e:24:57:ba:74:b0:01:9e:a5:87:d6:3a:70:
                    87:8e:1c:ba:f1:0b:7d:ee:90:a2:90:a4:8b:dd:f5:
                    21:0d:fa:87:e2:e2:37:17:cf:4c:a6:92:17:47:a0:
                    c1:af:be:03:df:73:41:95:04:3c:f5:f0:7e:45:f5:
                    da:01:7c:e0:53:6a:22:1c:71:89:0b:c4:8f:86:56:
                    be:78:11:4a:31:4d:d0:4e:84:be:95:2a:53:33:b0:
                    24:0e:94:ec:24:2c:3e:14:1d:a6:e8:cb:2f:15:64:
                    79:b1:3c:5b:13:d0:b8:da:84:e3:05:aa:e5:bf:f6:
                    02:84:b1:92:c0:c3:ea:d3:2b:01:77:3b:b1:34:91:
                    2d:be:47:eb:70:a1:d8:37:ff:78:fa:af:83:f0:4c:
                    24:1f:a9:a3:f0:9d:21:db:27:da:70:24:e1:50:02:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6D:CE:02:44:27:12:A6:40:91:D8:A0:37:C9:54:97:7C:C8:4D:A7
            X509v3 Authority Key Identifier:
                keyid:1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:da:b0:3b:44:e9:a2:da:9a:1e:e7:ac:83:61:52:14:a0:2c:
         15:10:f8:94:9c:cd:a1:8c:d3:2f:13:bf:59:5c:ea:56:3d:f1:
         f8:e2:a4:fd:4e:40:9f:21:14:ce:1f:12:b3:77:b0:0e:47:98:
         2f:64:b8:d4:15:a1:39:61:92:fe:25:c6:b9:7f:cb:2a:52:22:
         60:2b:06:f3:fb:9b:55:6b:55:d6:50:8c:02:58:d6:df:f5:c2:
         d4:9d:fa:02:9d:1c:7f:76:18:e0:b0:64:3b:97:5f:28:5e:31:
         a9:b1:52:83:c5:28:9d:fd:78:4f:01:30:51:12:74:85:66:7a:
         32:f3:6a:6f:e9:3f:f2:55:63:0d:33:39:87:3c:e2:07:a5:c0:
         06:9c:38:4e:4c:a6:8a:ea:c9:33:f3:a5:b0:09:32:b9:aa:71:
         af:93:62:eb:bf:ff:35:d6:07:bd:b1:ea:43:aa:eb:b7:f8:84:
         aa:8a:c5:30:6f:5b:2c:5e:71:80:c3:a0:00:53:0f:f3:ab:fb:
         d9:9f:6f:f3:81:b8:80:17:7c:c8:36:91:bd:f3:60:2a:ef:32:
         7f:df:81:bb:5a:3a:7d:86:91:a3:46:6f:8c:a2:18:95:d0:8b:
         9d:a1:f6:8b:ab:4b:c6:2a:41:a7:12:ba:60:c2:f8:95:22:1d:
         68:3b:e7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:32:15 2026 by rpki-client