Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e32342e302f32312d3231203d3e203237373638.roa
File:                     3137372e3235302e32342e302f32312d3231203d3e203237373638.roa (raw, json)
Hash identifier:          40ka1Dr0iP4KfvDz5FkoLtVQ1QUwgg0wdiRvxsyf0Y8=
Subject key identifier:   38:31:9B:44:85:61:AE:2B:EB:80:43:DF:D7:3A:80:F4:F7:D1:32:0B
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       1B6E554BCCB74D27A6BEB948C3E5CACA83FE17FA
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e32342e302f32312d3231203d3e203237373638.roa
Signing time:             Fri 09 Oct 2026 19:39:45 +0000
ROA not before:           Fri 09 Oct 2026 19:34:45 +0000
ROA not after:            Fri 08 Oct 2027 19:39:45 +0000
asID:                     27768
IP address blocks:        177.250.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 18:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:55:4b:cc:b7:4d:27:a6:be:b9:48:c3:e5:ca:ca:83:fe:17:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct  9 19:34:45 2026 GMT
            Not After : Oct  8 19:39:45 2027 GMT
        Subject: CN=38319B448561AE2BEB8043DFD73A80F4F7D1320B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:b4:45:4e:f9:40:b3:87:43:9f:74:78:77:
                    fa:11:77:aa:5c:f2:d2:f9:7b:fa:f7:d5:db:ad:a4:
                    19:c4:d7:cd:d7:3e:22:81:75:7c:f2:ff:15:5f:b0:
                    c1:8c:c1:dd:78:08:1e:da:bc:42:5d:b8:c5:e7:7f:
                    c8:50:2e:e5:8f:91:86:5d:4f:89:c8:fd:df:e5:2e:
                    36:fd:f8:23:90:8c:b8:f5:02:97:08:a2:14:fe:e5:
                    a5:cc:03:68:28:05:8c:a6:b5:1c:aa:34:eb:7d:73:
                    e3:c1:4a:ef:74:74:8b:fb:7f:be:6b:81:6f:bc:c4:
                    65:ed:0f:72:8e:23:34:8f:1b:c6:bc:b5:83:7f:08:
                    5a:9b:3b:e3:37:8a:74:2c:bb:73:82:70:a7:1f:d6:
                    42:ac:b2:cb:0e:b9:90:d9:69:2e:6a:9d:c7:dc:46:
                    46:1d:94:fd:8c:f5:b7:08:02:54:69:a1:17:45:ca:
                    b5:3b:20:5b:58:dc:1b:90:0c:db:55:ad:53:0a:0d:
                    18:6b:2c:a8:22:5b:cf:c5:75:af:cd:2c:e0:77:a0:
                    27:1c:45:39:14:8a:2b:4f:33:26:89:0a:eb:3e:14:
                    f4:1e:d6:a0:3b:18:e1:33:49:da:bb:af:79:15:b1:
                    a6:cf:fc:63:7a:38:ef:24:be:d3:1a:6c:87:71:cb:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:9B:44:85:61:AE:2B:EB:80:43:DF:D7:3A:80:F4:F7:D1:32:0B
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e32342e302f32312d3231203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:9f:4b:dd:af:42:7c:2c:ea:db:dc:86:80:b3:2f:40:87:d3:
         bf:2a:37:26:05:14:a0:79:ce:d7:d6:a2:d8:6e:09:90:ba:84:
         39:88:4c:18:cb:07:a6:bf:c9:da:f4:5f:af:6b:a6:90:d4:a6:
         a6:b1:c1:89:cb:ae:e8:73:d0:20:19:90:e7:a3:05:ff:29:0f:
         a3:81:a2:82:64:12:92:84:4a:21:0d:ac:63:13:98:7f:56:4e:
         76:a4:d5:43:e4:db:cc:d1:c3:87:61:b0:12:c8:b6:3f:4d:1c:
         00:88:9e:1e:4d:47:55:38:6c:bf:34:1d:87:bc:70:a3:3d:f7:
         d6:fc:b0:e0:62:ec:fe:ad:34:47:0b:25:df:e1:10:42:f3:0c:
         f3:db:41:3e:fd:f8:ec:dd:fe:df:3d:f8:6c:7d:bd:cb:84:70:
         c2:dd:c6:93:d1:c9:fc:2f:64:f6:10:33:ba:70:01:c7:f2:0b:
         79:cb:bb:97:61:e4:37:5d:11:8e:9b:54:05:d0:9e:6e:56:c0:
         2e:20:38:0c:50:a0:e7:6f:d1:37:d8:42:bf:88:5e:c6:90:a5:
         41:b9:2b:f5:25:20:ba:01:ea:89:af:9d:12:df:a7:42:40:88:
         14:88:12:70:cd:23:93:8c:8e:8e:e9:e2:8b:3a:a7:bb:f3:7f:
         66:f0:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:15:35 2026 by rpki-client