Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130302e302f32342d3234203d3e203134323332.roa
File:                     3230312e3231392e3130302e302f32342d3234203d3e203134323332.roa (raw, json)
Hash identifier:          ZI6yGU4Fh3ZZEVrWHYbuntBgB2pNKvt6IHgMt+Q/do8=
Subject key identifier:   AB:90:97:3D:64:B7:8F:51:70:35:81:95:BF:BE:74:AE:D0:0F:C5:65
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       0AFB65969F69A9330867CAD7ECBC37D133F4D21C
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130302e302f32342d3234203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:00 +0000
ROA not before:           Fri 16 Oct 2026 15:55:00 +0000
ROA not after:            Fri 15 Oct 2027 16:00:00 +0000
asID:                     14232
IP address blocks:        201.219.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fb:65:96:9f:69:a9:33:08:67:ca:d7:ec:bc:37:d1:33:f4:d2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:00 2026 GMT
            Not After : Oct 15 16:00:00 2027 GMT
        Subject: CN=AB90973D64B78F5170358195BFBE74AED00FC565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:bc:a6:bf:a3:4c:8b:fb:b5:8a:de:9c:c8:
                    92:c9:6b:b2:1d:e7:37:93:e5:c4:fc:25:d8:4b:8b:
                    a2:aa:0f:2e:b7:ce:38:70:b6:f0:c4:be:f4:8d:8a:
                    d1:c0:63:92:76:ff:55:9a:6d:f8:a0:c8:1a:18:2c:
                    18:8a:90:c3:c2:1a:7a:43:5a:d9:cc:0c:bc:b9:55:
                    ac:73:95:df:df:32:ff:39:54:6e:a4:9e:4b:3a:e0:
                    e1:d6:10:6d:3d:4a:5a:69:c1:a4:a5:d8:50:1f:7c:
                    21:d2:37:e3:d4:3e:b7:78:61:08:a2:3e:e5:1f:37:
                    62:ca:3b:3c:ae:cc:57:03:a1:3f:a2:31:fa:af:53:
                    ad:f5:b8:c5:7a:95:e7:bc:c5:20:32:47:ba:39:89:
                    d9:ce:04:1b:df:31:f6:e1:ef:de:11:9e:d7:54:51:
                    1b:b9:11:a3:36:4f:c9:48:d7:12:aa:de:a2:c1:0b:
                    3a:6f:15:8e:62:e7:94:53:7f:8e:91:23:a7:07:61:
                    ef:5c:64:6c:0e:00:6b:91:2b:f0:5d:24:dc:27:77:
                    a0:da:c0:38:4a:ce:32:b6:fb:72:3c:eb:b6:56:ce:
                    37:eb:70:e9:3e:b2:da:89:bb:8d:4a:1c:c0:e3:30:
                    40:82:13:90:95:3b:ff:ba:b6:e4:d8:09:18:d5:e5:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:97:3D:64:B7:8F:51:70:35:81:95:BF:BE:74:AE:D0:0F:C5:65
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130302e302f32342d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d3:07:16:df:d8:d6:d6:df:fb:29:04:d7:b6:62:02:58:6c:
         3d:70:d7:56:e1:63:44:95:3a:35:33:44:da:b3:be:f0:df:56:
         1c:06:43:5d:d9:9f:f9:15:1c:7b:05:6f:88:43:51:95:a4:6b:
         dc:28:ef:32:10:0d:d4:af:16:40:c9:f0:4e:f0:ab:e0:8c:a5:
         38:e9:38:b5:e7:a8:1c:68:89:18:72:b7:41:6e:24:7c:bc:72:
         72:36:54:c0:b5:6a:5a:ec:d5:91:e1:6a:60:0b:62:de:ab:c0:
         2e:77:c4:9b:60:b4:6f:fe:08:dc:ca:d5:e6:3e:95:b5:2a:b6:
         0b:49:66:c9:1b:5b:cc:f4:5c:f6:4d:2e:53:89:fd:83:ab:ab:
         d2:6f:0f:ee:e1:94:bb:71:59:fd:97:c1:65:ca:b3:c5:6f:7c:
         d3:50:46:02:5e:9c:19:36:de:67:a4:72:42:b2:50:b6:8b:6e:
         aa:c3:31:db:89:b8:46:f2:b9:0d:5a:27:cb:f6:63:68:0c:28:
         d7:e4:b3:5c:c8:d1:b7:4c:f4:52:e0:97:87:03:81:a1:b2:ed:
         c3:fa:54:91:20:91:d1:ba:37:5a:e8:db:c9:5c:df:26:9c:7d:
         79:2b:7f:d9:e7:4c:df:a5:33:fb:39:a1:d6:71:16:d7:bf:97:
         f7:65:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:46:24 2026 by rpki-client