Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e36342e302f31382d3138203d3e203237373638.roa
File:                     3137372e3235312e36342e302f31382d3138203d3e203237373638.roa (raw, json)
Hash identifier:          sV51aRyXt30SPDnU3G2VqFQFlwB/Ug+4HhhQJ15SMjA=
Subject key identifier:   3D:14:0C:4C:4B:F5:A4:C9:87:04:AB:2D:05:3B:3C:64:62:C4:2D:DF
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       11E648FC3EDACD986627354ED5869396CF5BF96D
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e36342e302f31382d3138203d3e203237373638.roa
Signing time:             Fri 09 Oct 2026 19:39:44 +0000
ROA not before:           Fri 09 Oct 2026 19:34:44 +0000
ROA not after:            Fri 08 Oct 2027 19:39:44 +0000
asID:                     27768
IP address blocks:        177.251.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 13:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e6:48:fc:3e:da:cd:98:66:27:35:4e:d5:86:93:96:cf:5b:f9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct  9 19:34:44 2026 GMT
            Not After : Oct  8 19:39:44 2027 GMT
        Subject: CN=3D140C4C4BF5A4C98704AB2D053B3C6462C42DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:44:83:e2:51:2d:c4:9a:31:73:d5:7e:85:
                    e8:68:5c:e7:2f:a2:1c:78:5e:39:74:f2:7c:da:b8:
                    a5:93:fb:f2:7a:fd:e7:1c:28:39:d1:f1:c2:8e:b2:
                    21:91:33:01:ae:64:3c:93:0f:52:d0:21:c5:8b:53:
                    df:c4:40:bc:92:10:10:ff:c8:5e:9d:a7:2d:cf:e8:
                    8b:2c:58:f9:22:03:34:ab:6b:aa:ed:94:f3:67:fd:
                    61:5e:cb:4f:4c:5c:ac:dd:d8:6f:9f:08:31:44:2c:
                    df:a1:5c:47:b8:2e:01:ed:5f:e5:13:0a:28:a1:8a:
                    22:93:75:72:08:5b:3d:0b:c0:9c:e4:6f:e0:25:f5:
                    2c:cc:b9:24:57:fd:29:05:05:b8:30:87:f6:a0:ab:
                    57:99:c9:d2:be:28:b3:6f:0b:d6:b6:d0:62:7a:8f:
                    95:4f:85:5e:cc:c2:d3:92:a1:53:1b:a8:a3:67:e1:
                    e8:24:36:92:03:d5:9f:14:28:f4:b2:18:5f:af:1f:
                    45:5d:da:b4:4a:53:1a:a0:8d:88:47:58:c6:35:59:
                    73:54:eb:8c:7c:33:b0:a4:f8:7a:3b:d5:17:38:b3:
                    4b:9f:f8:64:e5:1a:6d:b8:6d:e5:eb:1e:1e:9f:74:
                    28:71:de:39:4a:a8:b4:58:6f:f8:54:41:58:25:f5:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:14:0C:4C:4B:F5:A4:C9:87:04:AB:2D:05:3B:3C:64:62:C4:2D:DF
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e36342e302f31382d3138203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.251.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:8b:2c:36:da:a3:22:12:aa:36:67:96:9a:c9:49:54:ee:
         93:f5:58:bf:e5:d6:61:d2:a0:9d:4d:6c:3f:52:98:00:03:d3:
         29:27:e9:2f:0c:0b:ec:70:da:f8:b0:02:cf:76:c7:27:28:7c:
         c0:e3:c0:6d:37:86:5e:82:01:7b:94:ac:b5:17:9d:06:9d:57:
         33:20:88:c9:0b:37:6e:39:9c:4a:29:57:92:3a:de:74:75:47:
         f1:24:cf:39:de:b0:45:9b:4d:8e:fa:13:92:ba:f4:1e:56:1a:
         47:fa:c2:9b:84:f5:ca:59:f3:a0:c8:40:92:b7:c3:73:11:89:
         73:21:b5:d9:66:c6:7b:66:58:83:f9:71:9a:02:61:42:6a:cc:
         23:41:18:4f:8f:58:06:11:18:45:5d:d7:fa:c8:f3:53:d9:fd:
         d5:10:3f:a7:b8:68:43:e5:1b:e6:35:6f:47:48:82:3a:43:e2:
         b6:92:3c:38:5a:c7:a2:e5:26:5d:30:c5:3d:1c:c4:e9:1a:42:
         10:c6:69:25:79:94:73:a7:69:d2:1d:e1:95:59:5a:52:a7:1d:
         96:5a:ca:99:07:18:32:16:54:99:bc:fb:55:fb:67:2f:47:22:
         e2:08:ae:1e:96:93:e4:90:bd:6f:d1:7b:43:6a:c9:b6:e0:bb:
         76:4f:b9:df
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEeZI/D7azZhmJzVO1YaTls9b+W0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNjEwMDkxOTM0NDRaFw0yNzEwMDgxOTM5NDRaMDMxMTAvBgNV
BAMTKDNEMTQwQzRDNEJGNUE0Qzk4NzA0QUIyRDA1M0IzQzY0NjJDNDJEREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgUSD4lEtxJoxc9V+hehoXOcv
ohx4Xjl08nzauKWT+/J6/eccKDnR8cKOsiGRMwGuZDyTD1LQIcWLU9/EQLySEBD/
yF6dpy3P6IssWPkiAzSra6rtlPNn/WFey09MXKzd2G+fCDFELN+hXEe4LgHtX+UT
CiihiiKTdXIIWz0LwJzkb+Al9SzMuSRX/SkFBbgwh/agq1eZydK+KLNvC9a20GJ6
j5VPhV7MwtOSoVMbqKNn4egkNpID1Z8UKPSyGF+vH0Vd2rRKUxqgjYhHWMY1WXNU
64x8M7Ck+Ho71Rc4s0uf+GTlGm24beXrHh6fdChx3jlKqLRYb/hUQVgl9SmrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPRQMTEv1pMmHBKstBTs8ZGLELd8wHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMxMzczNzJlMzIzNTMxMmUzNjM0MmUz
MDJmMzEzODJkMzEzODIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrH7QDAN
BgkqhkiG9w0BAQsFAAOCAQEAn16LLDbaoyISqjZnlprJSVTuk/VYv+XWYdKgnU1s
P1KYAAPTKSfpLwwL7HDa+LACz3bHJyh8wOPAbTeGXoIBe5SstRedBp1XMyCIyQs3
bjmcSilXkjredHVH8STPOd6wRZtNjvoTkrr0HlYaR/rCm4T1ylnzoMhAkrfDcxGJ
cyG12WbGe2ZYg/lxmgJhQmrMI0EYT49YBhEYRV3X+sjzU9n91RA/p7hoQ+Ub5jVv
R0iCOkPitpI8OFrHouUmXTDFPRzE6RpCEMZpJXmUc6dp0h3hlVlaUqcdllrKmQcY
MhZUmbz7VftnL0ci4giuHpaT5JC9b9F7Q2rJtuC7dk+53w==
-----END CERTIFICATE-----
Generated at Tue Oct 20 01:18:07 2026 by rpki-client