Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f31382d3138203d3e203237373638.roa
File:                     3137372e3235302e36342e302f31382d3138203d3e203237373638.roa (raw, json)
Hash identifier:          MOKr7pDZ8aAb0YGd+rtdPxXlfwYGl5tH7/VLCkhkFEo=
Subject key identifier:   7B:DC:D3:B2:9F:F9:68:BF:D6:7C:66:53:08:9A:2A:50:32:BE:2D:F3
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       5DA8FBD64C023C67C6BEFC4EC1BCC127B3831C83
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f31382d3138203d3e203237373638.roa
Signing time:             Fri 09 Oct 2026 19:39:43 +0000
ROA not before:           Fri 09 Oct 2026 19:34:43 +0000
ROA not after:            Fri 08 Oct 2027 19:39:43 +0000
asID:                     27768
IP address blocks:        177.250.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a8:fb:d6:4c:02:3c:67:c6:be:fc:4e:c1:bc:c1:27:b3:83:1c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct  9 19:34:43 2026 GMT
            Not After : Oct  8 19:39:43 2027 GMT
        Subject: CN=7BDCD3B29FF968BFD67C6653089A2A5032BE2DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:a4:b9:4b:3e:06:48:ac:b0:27:11:c5:6c:
                    3f:93:f4:f9:63:67:fa:ce:06:7f:b7:e2:59:f1:ae:
                    af:ec:14:b5:8f:d7:aa:60:62:80:91:b2:3c:d2:c2:
                    68:6a:bf:84:6b:74:f6:82:e0:6b:f6:10:88:04:a4:
                    ac:00:94:47:d0:85:87:ec:75:37:43:10:8c:27:2d:
                    be:f9:a8:21:ce:a4:72:24:18:19:45:e3:c6:5f:14:
                    83:bd:42:fd:bc:fa:2c:28:f9:79:91:4d:14:12:03:
                    72:3f:f9:76:25:e1:bb:6b:38:06:57:24:5f:e6:35:
                    4d:01:e2:5e:53:d6:59:5c:2a:81:46:b1:0a:a5:d7:
                    ad:aa:4c:a5:fc:56:90:5d:00:e4:90:5f:68:f9:5b:
                    4c:ae:93:6c:8e:77:56:4a:77:24:e3:50:aa:55:4c:
                    ce:35:5e:a0:06:97:3b:20:60:a3:ff:cc:5b:04:e6:
                    76:b7:70:a6:51:cd:8c:cc:bb:8e:f7:f3:90:9a:d9:
                    a9:74:5b:5f:ca:58:7d:df:cb:c7:9c:e8:0e:0b:f7:
                    38:01:c6:b1:6e:78:c4:a5:46:dd:0b:13:68:65:8f:
                    ae:ef:e0:54:f1:f4:bd:78:85:93:52:b5:13:ce:64:
                    6d:f1:7b:dd:a4:a7:8a:7c:de:45:36:8e:18:7f:f4:
                    a7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DC:D3:B2:9F:F9:68:BF:D6:7C:66:53:08:9A:2A:50:32:BE:2D:F3
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f31382d3138203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:df:d1:fe:c6:fb:4b:92:ed:d5:57:55:34:25:ca:b0:33:
         07:5b:d6:e7:97:d1:9f:63:a4:1f:55:4f:33:0b:42:b1:3d:c4:
         5f:c1:1f:c2:18:92:5f:ec:cc:54:a5:51:9f:f1:d4:db:4d:cb:
         10:60:06:f0:38:89:fe:e4:bf:08:38:aa:b3:19:e5:a4:ea:f7:
         cc:9f:1d:7b:68:99:3d:37:98:86:9c:4d:da:48:a5:8a:ed:25:
         56:72:f3:5f:43:66:3b:52:33:bf:37:5a:9e:f5:0c:79:d5:4f:
         fe:00:9c:fb:bc:20:48:87:1c:3d:3d:b1:6b:95:2c:60:27:ae:
         68:ac:d8:16:88:8f:cd:3f:4d:e3:1d:45:46:34:49:66:f5:1f:
         fc:d8:1f:76:0b:65:5b:d9:75:88:9e:ce:23:2f:e4:dc:ed:cc:
         d1:5b:6a:e8:40:3b:5a:73:a7:96:97:5d:f6:1e:2c:3c:bb:01:
         79:5d:4b:44:bf:02:41:de:82:2e:24:6d:56:6a:40:6e:8b:de:
         bf:62:0b:04:9f:e9:ba:b8:0b:9b:b5:34:47:03:d6:ad:89:8e:
         35:dc:3e:ef:71:30:0a:b9:d4:54:cc:fe:16:f4:f8:4f:f9:4d:
         9e:22:1b:2c:ec:86:c7:5f:19:cb:ec:6b:d6:e3:c8:34:9b:3c:
         ec:20:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:11:43 2026 by rpki-client