Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235322e302f32332d3233203d3e203237373638.roa
File:                     3137372e3235312e3235322e302f32332d3233203d3e203237373638.roa (raw, json)
Hash identifier:          IuMD6SOMBxGjWfwzfMnHs0sK1Xz4BJ+B25SmJztNg3Y=
Subject key identifier:   D4:DD:C0:86:1B:7D:25:72:4E:E5:54:05:07:7B:3D:68:60:6A:9C:EB
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       177D75F53753319E7E149DC43EE58DB62C9E10CC
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235322e302f32332d3233203d3e203237373638.roa
Signing time:             Fri 09 Oct 2026 19:39:42 +0000
ROA not before:           Fri 09 Oct 2026 19:34:42 +0000
ROA not after:            Fri 08 Oct 2027 19:39:42 +0000
asID:                     27768
IP address blocks:        177.251.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7d:75:f5:37:53:31:9e:7e:14:9d:c4:3e:e5:8d:b6:2c:9e:10:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct  9 19:34:42 2026 GMT
            Not After : Oct  8 19:39:42 2027 GMT
        Subject: CN=D4DDC0861B7D25724EE55405077B3D68606A9CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1b:0b:0a:f3:32:1e:c8:8c:01:56:89:e6:9b:
                    a4:ea:06:40:09:49:49:34:44:7e:59:e7:af:c6:09:
                    e0:f3:4f:05:f9:2e:99:85:cd:e7:9b:03:10:bb:87:
                    9a:0f:9d:46:a2:65:e5:67:61:2b:63:05:08:03:91:
                    db:2c:c6:93:d2:13:9c:a4:a8:58:55:50:8e:02:1a:
                    ac:ab:7a:d0:1f:4e:71:96:8a:e0:35:92:a6:df:ed:
                    1d:b0:ed:8e:09:2a:7e:e4:a7:d1:eb:bc:77:55:a8:
                    6e:7e:82:a1:6f:9c:d2:3e:ea:72:51:8d:29:e7:17:
                    65:cf:0f:eb:2c:1f:4e:74:b9:8c:f1:c6:59:ce:a2:
                    b8:da:69:eb:e9:78:39:4c:a1:b2:da:46:db:d9:58:
                    5e:8d:0b:15:b2:b9:65:26:2f:ba:65:b7:c9:1b:d9:
                    ba:d5:7a:11:13:79:f5:46:21:2d:c5:e0:ef:29:9a:
                    9c:fc:16:6b:a2:d0:b9:29:50:3e:d2:1c:1f:ec:0e:
                    3e:4d:8a:de:b7:74:67:36:92:7b:f4:43:6e:0d:f8:
                    de:e8:ed:ce:20:98:83:04:21:3d:6d:2b:98:c3:7d:
                    2e:0d:df:54:9f:08:38:4e:64:b4:24:66:49:5d:97:
                    40:56:4f:7a:e4:d7:1a:8f:be:df:78:7d:7b:ad:e5:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DD:C0:86:1B:7D:25:72:4E:E5:54:05:07:7B:3D:68:60:6A:9C:EB
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e3235322e302f32332d3233203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.251.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:11:a2:8c:cf:5d:21:2b:dc:c7:6d:8d:26:d2:45:31:22:87:
         f5:29:c6:9d:22:3f:81:b7:c4:c6:e4:b0:87:19:e9:b5:a6:de:
         b5:90:0e:e1:52:9d:d6:0c:f4:bf:0a:48:75:1d:13:0e:00:18:
         09:77:92:b6:92:08:ef:ce:86:ea:51:d5:4a:4e:f4:65:c2:4a:
         97:0a:78:fd:5c:64:b7:99:9b:1f:5e:d2:24:06:f2:8b:9c:00:
         eb:e3:22:bc:aa:61:58:22:85:c5:2a:2d:db:7e:d9:57:f9:cf:
         ea:8d:a3:63:16:ac:78:6c:0b:c1:04:eb:2c:ca:c2:2c:66:8e:
         b0:b6:02:12:90:30:9e:79:01:14:d7:8f:9e:d2:0c:82:25:2d:
         0a:0b:9f:83:ad:e9:c5:21:00:df:21:cb:46:21:0f:8e:33:2d:
         16:31:b3:4a:b6:83:53:bb:da:fa:f1:65:15:69:4b:f7:0b:e2:
         81:28:dd:92:6a:65:8b:e8:41:25:9f:b8:65:71:5f:28:a2:dd:
         9c:76:5d:7c:57:da:6d:a3:75:17:b7:ba:3e:75:dc:03:db:ac:
         42:9d:36:3c:04:36:6b:25:d0:28:82:e5:33:6f:74:d0:b0:1e:
         03:7c:96:7b:86:86:e8:db:38:2f:32:08:88:03:04:83:6d:0f:
         aa:15:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:35:51 2026 by rpki-client