Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e31332e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          e1fmT6TsqQrjTLMcGMw8XxbPnRAs8Ny8sp4MA+uFX9E=
Subject key identifier:   D7:55:28:7E:14:53:C5:F8:06:33:B4:72:E9:C3:1C:9A:B9:F6:C8:BB
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       1A877C69BEE1B305CC670125A55123FFA2C9DA2E
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 14 Oct 2025 14:50:17 +0000
ROA not before:           Tue 14 Oct 2025 14:45:17 +0000
ROA not after:            Tue 13 Oct 2026 14:50:17 +0000
asID:                     27768
IP address blocks:        201.217.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 17:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:87:7c:69:be:e1:b3:05:cc:67:01:25:a5:51:23:ff:a2:c9:da:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct 14 14:45:17 2025 GMT
            Not After : Oct 13 14:50:17 2026 GMT
        Subject: CN=D755287E1453C5F80633B472E9C31C9AB9F6C8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:ef:41:b6:81:de:ec:bb:9d:7c:0a:26:39:
                    21:c7:06:7f:e6:2c:2b:af:0b:e4:37:62:c4:07:6b:
                    f7:e9:c9:b5:b9:37:33:6f:e8:bb:cd:ab:48:da:6a:
                    de:5e:5c:1a:68:a7:b9:14:6f:0d:07:19:5a:5c:f7:
                    88:d0:2f:47:27:97:cc:88:fc:9e:86:fb:fa:12:c3:
                    58:3b:e5:88:67:b6:e4:b6:6a:18:2e:b5:28:96:10:
                    0a:11:64:ff:ac:6c:41:ea:18:a4:46:98:c4:30:99:
                    b7:2c:4f:be:a9:ca:5c:af:f0:05:ab:f8:e4:65:2f:
                    d4:74:12:d6:61:a3:73:48:8f:31:34:b9:ff:38:a5:
                    3b:94:0b:14:ea:68:e3:d6:9f:b5:a6:23:21:b9:66:
                    8a:ff:17:b7:24:13:f3:39:22:9d:61:56:2f:19:4f:
                    c6:ac:de:13:e7:75:36:5a:8e:67:d3:cc:84:ce:36:
                    82:7c:95:94:0c:ca:24:d9:56:0e:ab:38:81:88:d9:
                    33:69:7e:f7:20:f9:10:86:1b:e5:ca:21:df:9f:fe:
                    5d:45:b5:c4:cc:8e:13:8a:4a:f7:d4:3a:e0:66:dd:
                    96:0b:71:3c:2e:d7:cb:24:55:46:c0:91:b8:75:e1:
                    a2:b7:8a:d1:e7:4a:ed:db:84:85:69:74:9e:f4:ad:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:55:28:7E:14:53:C5:F8:06:33:B4:72:E9:C3:1C:9A:B9:F6:C8:BB
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:2f:bb:a2:05:dd:80:20:d2:5b:c9:ea:9c:b3:c6:a4:cd:
         0f:ea:d2:40:07:83:10:c4:ed:a6:2b:1d:b8:c8:38:f2:1b:09:
         45:2f:a0:bf:a9:7a:87:06:83:b6:7d:8c:17:6a:fa:4c:34:2e:
         21:37:7e:59:1f:42:a3:80:8d:09:bc:f9:5d:28:74:bf:72:5e:
         64:1b:9e:2b:0d:eb:f6:25:60:e8:f8:a2:e4:8f:18:36:45:b8:
         3d:28:d6:2b:0c:a3:1c:b0:ea:e0:41:f1:ec:ac:a3:61:38:e4:
         d0:e5:2f:69:4c:f2:de:3a:f2:b5:eb:d6:91:66:14:a0:cc:bf:
         d5:a2:af:0d:c3:b3:dd:fa:1c:06:84:c9:95:71:ff:43:00:c8:
         1a:11:7c:31:02:d3:59:e8:6f:df:69:be:95:20:a3:15:a6:2f:
         62:0f:23:8d:e5:5c:b0:d0:34:59:36:c1:1b:d3:65:17:4b:fc:
         51:f8:a7:a2:26:67:4a:ac:99:b9:af:7e:9a:9c:0e:ba:ce:16:
         94:88:2e:f5:0c:c4:cf:b6:b7:79:3d:b2:21:6b:4d:72:35:da:
         8f:88:ab:54:22:c2:42:cb:e8:f3:27:41:5c:25:e3:ca:13:d6:
         31:44:04:02:22:89:57:6e:f5:94:15:61:0e:59:5f:94:c1:44:
         e2:78:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:53:33 2025 by rpki-client