Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137342e302f32342d3234203d3e20323639393237.roa
File:                     3230372e3139312e3137342e302f32342d3234203d3e20323639393237.roa (raw, json)
Hash identifier:          seOpE6A/slpR0G7VbiTtsLWSIrgBHl3LUOQ5xSkk99I=
Subject key identifier:   5C:40:46:B3:E1:A1:9E:30:9B:07:61:7F:47:93:2B:13:6D:B1:50:9D
Certificate issuer:       /CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
Certificate serial:       412FC3E332BD4FE64AAB0DC11A580E0CD9B5823B
Authority key identifier: 1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137342e302f32342d3234203d3e20323639393237.roa
Signing time:             Wed 07 Oct 2026 23:39:12 +0000
ROA not before:           Wed 07 Oct 2026 23:34:12 +0000
ROA not after:            Wed 06 Oct 2027 23:39:12 +0000
asID:                     269927
IP address blocks:        207.191.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2f:c3:e3:32:bd:4f:e6:4a:ab:0d:c1:1a:58:0e:0c:d9:b5:82:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
        Validity
            Not Before: Oct  7 23:34:12 2026 GMT
            Not After : Oct  6 23:39:12 2027 GMT
        Subject: CN=5C4046B3E1A19E309B07617F47932B136DB1509D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:f5:84:07:ec:a2:ee:71:7a:9a:62:23:4d:
                    91:89:5e:80:87:f0:2d:f5:93:e7:f7:5b:b4:66:59:
                    2c:6d:26:f6:d2:79:8b:54:71:a4:48:1a:52:e2:55:
                    1d:25:54:4d:a9:b2:28:02:23:6b:05:62:90:3a:b2:
                    fc:ae:17:bb:95:62:e7:62:f1:c8:bd:f8:72:f7:e9:
                    ca:cb:65:29:90:ba:5e:c5:fc:51:63:79:ce:25:80:
                    a0:cf:a2:df:56:45:f8:30:e7:8b:dd:97:05:f9:02:
                    05:a6:f1:d8:f6:45:ad:e4:43:ce:34:e4:6a:6a:fe:
                    c6:59:86:e6:0c:58:8a:1d:60:07:61:18:3d:aa:b6:
                    b9:1d:35:25:88:65:9a:bf:7e:20:0e:70:36:e1:a0:
                    c5:11:e6:78:24:39:51:c2:79:b1:1e:81:31:ac:96:
                    b7:c8:45:80:6f:11:40:03:1d:01:46:cf:7f:ca:86:
                    7b:36:bc:ea:5a:a2:da:eb:cb:7d:0b:b7:24:26:18:
                    0a:38:33:61:a2:7c:51:da:7b:9a:32:12:cb:76:b0:
                    6b:d0:61:2c:cb:04:94:53:58:c6:7e:64:70:60:f3:
                    f0:56:fd:e3:00:a1:d4:6c:46:d8:f4:87:91:36:48:
                    da:21:f4:38:ce:85:2a:83:53:95:bf:78:7a:03:bf:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:40:46:B3:E1:A1:9E:30:9B:07:61:7F:47:93:2B:13:6D:B1:50:9D
            X509v3 Authority Key Identifier:
                keyid:1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137342e302f32342d3234203d3e20323639393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:6f:d7:74:93:fc:92:75:1d:a3:20:e9:28:19:cb:3c:63:5a:
         f5:15:5a:22:8e:8d:14:ad:31:ab:1f:1e:30:1f:93:ad:d4:d8:
         ef:af:e5:c9:79:1c:b4:c8:43:7a:9a:c8:65:ef:5b:58:ed:bd:
         c3:74:ea:67:65:e1:be:33:7e:fc:97:88:2a:89:55:67:c8:dc:
         b4:8c:7c:52:d1:39:19:48:ba:08:71:6e:44:b4:57:5b:0f:c4:
         c0:c1:a2:7b:92:df:f9:8a:ef:05:80:8a:60:6e:d1:0c:3e:2c:
         9e:4c:0c:1b:e4:89:20:fe:39:54:7f:ad:f1:9a:a2:77:dc:5e:
         46:bf:3c:4e:cd:84:02:06:0c:87:19:f8:f8:f6:ff:41:6d:b3:
         49:ef:9e:47:42:b3:83:b2:7a:5f:42:5e:a1:08:b8:d4:06:ba:
         8e:f8:e8:f3:4a:12:0e:d2:74:03:7c:f2:cb:a2:c9:a2:29:dc:
         60:8d:19:0c:31:aa:09:72:79:16:93:99:23:14:d7:0a:dc:2e:
         f6:c5:6e:93:fd:4d:66:db:5c:0a:4e:12:1a:8e:30:d9:54:ac:
         1c:e7:c5:c1:70:b4:f2:16:2a:8e:1f:a3:98:2e:09:21:1c:b5:
         90:b5:46:5b:bf:c1:0e:e5:b9:e0:b6:47:05:56:c9:12:63:9b:
         c5:a1:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 17:56:02 2026 by rpki-client