Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32342e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32342e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          +9PFiauxoiwWKrguAWzFg4L40sTjLFViOI9TNfKYa9Q=
Subject key identifier:   83:68:DB:A7:31:00:87:12:F8:0B:E3:AD:E8:1E:50:A4:49:3A:57:1B
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       2385990D7C1B1D9E05E245C64264CAFEF2365583
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32342e302f32342d3234203d3e203237373638.roa
Signing time:             Sun 11 Oct 2026 00:39:54 +0000
ROA not before:           Sun 11 Oct 2026 00:34:54 +0000
ROA not after:            Sun 10 Oct 2027 00:39:54 +0000
asID:                     27768
IP address blocks:        201.217.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:85:99:0d:7c:1b:1d:9e:05:e2:45:c6:42:64:ca:fe:f2:36:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct 11 00:34:54 2026 GMT
            Not After : Oct 10 00:39:54 2027 GMT
        Subject: CN=8368DBA731008712F80BE3ADE81E50A4493A571B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:77:b2:20:1d:81:52:ad:25:49:68:dc:b4:
                    70:e9:5a:ae:5c:4c:72:e3:96:b6:84:20:94:2a:78:
                    17:e1:6f:90:2d:ab:4b:7e:64:9f:65:25:76:b8:4d:
                    d2:c2:e9:d6:5e:05:03:84:b9:bf:c6:13:7b:bc:78:
                    ac:fb:67:ef:d4:09:08:5a:6c:db:e6:91:c0:a1:90:
                    44:a2:6c:2c:9a:91:f3:a7:55:7c:c7:5c:2b:6f:2c:
                    a3:44:ec:f9:8d:0a:53:13:a7:a8:bb:21:eb:d6:9a:
                    c1:f2:17:4b:8e:7e:36:61:ed:1a:9b:77:ec:07:91:
                    18:6c:81:8b:9b:65:20:ba:51:a3:e1:5e:49:9c:f6:
                    83:51:a8:42:11:5e:9d:5d:c1:83:40:fd:29:19:07:
                    b0:a5:ab:d0:8b:b5:57:cc:6e:29:e0:4c:f1:c4:36:
                    72:d5:0d:07:e5:9f:6c:30:6e:3e:3d:e2:78:e8:ec:
                    9d:2b:36:76:d9:15:a5:3a:10:5c:14:63:da:a9:4f:
                    6b:3f:6b:6a:24:de:bc:25:7d:b5:19:41:96:2a:29:
                    0a:c4:fe:8e:6c:29:22:81:42:a1:2a:4b:06:ff:e2:
                    ac:51:d0:95:7d:95:a9:65:94:32:89:04:7b:ca:fc:
                    ad:3c:0a:da:27:36:b0:d4:1d:fb:c7:e6:79:a4:4b:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:DB:A7:31:00:87:12:F8:0B:E3:AD:E8:1E:50:A4:49:3A:57:1B
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32342e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fb:da:21:e3:64:01:e4:fa:3f:62:4b:e3:e7:c6:30:53:f2:
         ce:b7:d0:84:4c:c6:64:c7:cb:6a:b6:cb:8e:d6:72:23:fa:b1:
         43:08:a0:e5:a4:5e:5f:f3:55:c1:8c:a4:e1:3c:49:91:7f:db:
         42:58:d0:bf:40:84:49:3e:9e:9f:97:27:8d:06:29:d1:54:4f:
         33:dd:ca:3a:57:ae:a6:bb:2d:68:d2:5b:9b:ad:2e:1f:55:35:
         5b:73:80:f5:39:e4:67:37:c8:a8:10:8e:d9:44:c0:31:b2:b9:
         86:25:f5:f6:f6:85:b1:78:98:77:61:68:42:0f:48:eb:a6:f8:
         62:c5:87:38:c0:a7:bd:df:91:6a:3c:89:4f:78:f5:4a:b0:bd:
         bf:67:21:82:86:dc:69:50:a8:42:83:20:de:93:94:8f:ff:80:
         b7:35:80:2e:d2:ec:d4:16:77:b1:fb:26:dd:d4:d1:fa:ee:83:
         14:3f:0e:3c:bc:0a:2a:3b:ed:25:a9:a3:ce:8d:03:eb:3f:e6:
         68:87:48:d0:77:93:53:71:56:39:c4:09:1a:1b:66:b4:43:e7:
         91:9a:86:72:90:fe:4e:26:1e:2c:8f:71:bc:1c:74:ef:85:10:
         59:37:85:cf:d7:9f:7b:0d:ed:57:81:32:07:25:f6:b9:3e:78:
         a6:8c:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:24:57 2026 by rpki-client