Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36362e302f32342d3234203d3e203134323332.roa
File:                     3230312e3231392e36362e302f32342d3234203d3e203134323332.roa (raw, json)
Hash identifier:          Sr9VWgvrCNB8SfUqVSi8tVqqqXS1CuOSPmbToDiegec=
Subject key identifier:   C1:2C:13:B3:F8:83:34:E3:72:44:69:08:1F:81:99:FF:3E:E8:55:D0
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       2B9D2CDF522079B55A9575194AA25D566397EDFA
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36362e302f32342d3234203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:09 +0000
ROA not before:           Fri 16 Oct 2026 15:55:09 +0000
ROA not after:            Fri 15 Oct 2027 16:00:09 +0000
asID:                     14232
IP address blocks:        201.219.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 18:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9d:2c:df:52:20:79:b5:5a:95:75:19:4a:a2:5d:56:63:97:ed:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:09 2026 GMT
            Not After : Oct 15 16:00:09 2027 GMT
        Subject: CN=C12C13B3F88334E3724469081F8199FF3EE855D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:d0:33:43:3f:9e:28:6c:f2:fe:6c:83:a2:
                    97:7f:98:35:ab:56:47:18:0c:aa:92:73:51:7d:20:
                    71:c6:76:22:a1:d0:cc:6a:9f:5e:a4:ef:7a:18:08:
                    5c:4b:68:2b:2e:69:d6:39:75:8e:73:1c:59:4b:a3:
                    b5:11:0c:70:0b:23:e8:c3:fa:fb:83:02:a4:4c:42:
                    61:c1:7f:13:2a:74:11:1d:46:a2:54:66:77:25:62:
                    5b:58:7f:7b:0f:97:73:76:af:67:5a:41:ca:b2:61:
                    16:c5:8a:e0:f9:7f:08:06:8d:d2:8d:cb:46:4f:fd:
                    44:92:7d:64:38:df:43:58:a7:ca:c5:4c:19:8f:d6:
                    e0:b9:39:1a:a0:52:23:89:6b:57:78:77:5a:92:31:
                    4e:fc:96:4b:4a:27:c6:91:3a:db:9c:92:f8:d4:c9:
                    d5:ff:f6:b3:1a:af:e0:b2:d1:25:b4:89:ec:82:ab:
                    9d:5a:31:5c:5e:cf:15:71:07:25:af:b2:7c:0b:ef:
                    8a:92:af:ab:ab:82:d9:53:f4:7f:00:75:02:fc:61:
                    e9:0c:55:cc:22:0a:7e:d2:70:fd:96:1c:46:e1:71:
                    1f:41:f5:84:e3:6a:01:dd:aa:50:74:31:07:a2:a2:
                    92:09:b2:85:6c:3f:56:fb:66:56:6d:0e:e0:3e:93:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2C:13:B3:F8:83:34:E3:72:44:69:08:1F:81:99:FF:3E:E8:55:D0
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36362e302f32342d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:b9:3a:4d:51:3e:a0:02:16:81:da:cb:45:12:31:23:53:
         86:f9:a4:0a:47:0e:de:7d:ef:e5:94:21:ec:63:1a:44:91:3d:
         ab:f2:9f:48:8b:9f:22:e1:73:8a:b8:d5:d7:6f:17:c2:a2:5f:
         f7:84:e0:81:d6:70:20:e4:fa:a6:9b:1f:9e:d4:d5:c3:fd:eb:
         1c:27:4f:ab:ef:cb:cc:8a:65:43:7d:1a:6c:82:58:1b:aa:c9:
         e8:7e:3a:17:76:e6:c0:d3:cc:68:f0:00:19:00:48:66:98:6e:
         b7:3d:73:1d:88:e3:2f:74:e2:1d:1b:a6:fd:b2:e6:d2:1d:99:
         c1:43:62:6a:07:b7:56:87:38:bd:96:80:f1:d8:ad:f3:e4:82:
         ec:6c:d3:29:61:17:ac:a8:6f:b0:a8:4f:1c:1f:6b:2f:b4:db:
         4a:1f:72:bd:f0:0f:54:44:15:03:f7:40:fb:66:6e:c2:8d:27:
         45:84:8b:0b:3d:34:42:24:48:31:20:6c:ad:55:a8:63:47:2e:
         ad:95:28:7b:b3:c5:be:ec:16:e7:68:ad:1c:80:b1:8a:f4:bd:
         92:1e:f1:4f:24:51:1f:3d:ce:dd:0e:70:e6:24:8c:7d:45:d4:
         17:6a:11:aa:a6:5d:b3:5e:dc:ab:f2:7d:4e:b0:95:ff:28:91:
         fd:e6:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:57:39 2026 by rpki-client