Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130332e302f32342d3234203d3e203134323332.roa
File:                     3230312e3231392e3130332e302f32342d3234203d3e203134323332.roa (raw, json)
Hash identifier:          MZ188R5bqRQFaUBT5AUZawtxLEG9Xl1EzU/qX5SZUns=
Subject key identifier:   A6:DA:A2:25:4E:B0:13:09:8E:C9:19:EC:6E:17:2B:F6:D2:2C:B2:60
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       7779AECD903993397BB91890957EF18CFA862D1C
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130332e302f32342d3234203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:05 +0000
ROA not before:           Fri 16 Oct 2026 15:55:05 +0000
ROA not after:            Fri 15 Oct 2027 16:00:05 +0000
asID:                     14232
IP address blocks:        201.219.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:79:ae:cd:90:39:93:39:7b:b9:18:90:95:7e:f1:8c:fa:86:2d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:05 2026 GMT
            Not After : Oct 15 16:00:05 2027 GMT
        Subject: CN=A6DAA2254EB013098EC919EC6E172BF6D22CB260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:a2:6f:d7:9e:1c:e9:a7:04:e8:be:31:1c:
                    52:08:3f:4f:88:3f:94:3f:37:44:f9:8b:25:c6:4e:
                    1d:65:46:8a:52:d9:a4:43:ca:38:0b:d8:0d:cb:d3:
                    ed:c0:ae:ff:38:49:11:4a:1f:64:9f:b0:5e:0e:7c:
                    65:0d:5b:3e:9a:dd:1a:dd:87:91:74:e8:20:cd:e2:
                    8f:41:29:d4:66:9d:45:76:f3:67:27:3f:b0:10:a3:
                    41:e9:1e:cc:60:23:79:81:d8:7e:ac:2c:1d:4c:e2:
                    e4:8c:bb:aa:9a:8a:d8:68:f8:92:8b:82:dc:c0:61:
                    52:a0:3b:19:a6:08:97:42:a3:b1:ef:aa:7f:4d:a2:
                    f7:1d:99:2d:46:b8:d2:f8:ea:2e:e8:f0:74:06:07:
                    f0:e9:d5:1d:f8:a7:57:ee:ff:fe:7b:61:00:5b:cc:
                    a1:89:4b:09:fd:c2:ce:4a:b8:e7:4f:e3:da:4c:c7:
                    01:e6:34:0d:03:24:6a:c5:ec:ae:51:db:3a:5a:e0:
                    1a:4c:59:a0:68:22:30:7f:f9:5c:46:ac:5a:f1:cd:
                    b2:d8:1d:36:31:f9:b6:65:6f:d1:fd:45:e1:c1:2a:
                    0d:5c:7e:c3:ed:fb:9f:40:ba:2f:f1:9a:4c:db:0a:
                    aa:8e:2d:bb:ed:cc:7e:14:ce:b1:66:6f:c5:59:d1:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DA:A2:25:4E:B0:13:09:8E:C9:19:EC:6E:17:2B:F6:D2:2C:B2:60
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e3130332e302f32342d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:18:e8:f6:74:a3:fe:22:e0:ef:6a:82:9a:d9:6f:5b:db:
         01:dc:c5:72:a1:c9:5d:0c:e5:a1:bd:c6:de:a2:31:b5:3f:f8:
         1e:83:80:6d:e5:a7:7d:ce:5d:66:6d:92:a4:dc:33:ab:03:ec:
         7e:8f:b9:64:51:f8:e7:7b:62:ac:b7:0a:a8:1e:50:f7:89:21:
         23:fc:39:0f:6a:55:47:7b:d1:b0:09:3c:f1:5a:06:f0:26:0c:
         ab:62:92:32:db:45:60:bb:b4:57:b3:4a:cf:36:0c:d6:04:bc:
         22:2a:9d:b4:2a:56:0f:9f:21:ca:5d:bd:f9:bd:0c:38:0b:d8:
         dd:ac:57:29:4d:78:ed:d8:c2:c8:8d:e4:c2:a3:e7:10:b7:74:
         57:e7:7f:b8:07:13:3a:ab:da:39:2c:b8:27:04:d6:5c:49:59:
         1d:f3:be:be:7c:61:c4:c3:2e:ef:ae:93:3d:20:9f:bd:8c:7a:
         67:6b:5c:6c:c4:69:08:4e:ae:1c:11:63:a9:f8:59:3d:a2:80:
         79:1c:c1:68:66:ee:b6:5b:aa:b5:b5:84:6e:c2:6a:dd:bf:a5:
         4b:08:cb:cd:2f:b8:f9:50:44:c3:8d:fb:98:0f:fa:1d:5a:23:
         33:2c:3e:56:bc:42:f9:1e:25:68:29:c6:58:48:63:29:93:d8:
         63:d6:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 16:16:50 2026 by rpki-client