Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa
File:                     3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa (raw, json)
Hash identifier:          YW7ljuOU8XMP+M75R7/KKrxBc2jp+nyqVQocbmFF5R0=
Subject key identifier:   EE:8A:32:95:36:90:E2:37:BC:75:19:43:55:B2:1D:3A:24:6F:80:6D
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       51B9E47513881CD8CF3B300CED227E151C43296D
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa
Signing time:             Mon 07 Sep 2026 21:34:13 +0000
ROA not before:           Mon 07 Sep 2026 21:29:13 +0000
ROA not after:            Mon 06 Sep 2027 21:34:13 +0000
asID:                     27881
IP address blocks:        200.110.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b9:e4:75:13:88:1c:d8:cf:3b:30:0c:ed:22:7e:15:1c:43:29:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Sep  7 21:29:13 2026 GMT
            Not After : Sep  6 21:34:13 2027 GMT
        Subject: CN=EE8A32953690E237BC75194355B21D3A246F806D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:e7:92:03:8d:31:5e:03:ec:63:45:08:f5:
                    0d:05:82:e9:52:5d:78:cb:83:d7:f6:09:1b:36:3f:
                    89:08:3f:77:b6:98:b1:58:66:da:1d:8b:73:57:ed:
                    f5:74:88:3f:da:45:e0:ec:7b:48:3a:f1:73:e3:ff:
                    8f:b2:68:0e:54:26:f8:f0:23:fa:86:d8:86:39:d4:
                    9b:21:5f:da:ef:e5:18:fb:de:44:a2:36:75:48:64:
                    5a:73:e5:ea:6f:3f:1a:6c:81:10:b5:dc:19:f7:c6:
                    ed:79:7a:5f:13:77:57:29:8c:e6:3a:fe:bd:21:be:
                    fe:53:bf:59:01:98:1f:99:37:3b:ae:dc:fb:8e:01:
                    ec:8c:c9:76:74:20:27:6d:27:95:7e:e7:4d:69:59:
                    8d:86:cf:7a:86:88:df:0e:3b:3e:c8:d5:1a:44:30:
                    16:f5:43:57:a5:93:f8:50:03:de:c9:d4:a6:62:59:
                    1e:e8:d7:65:67:a6:a2:be:16:2f:f3:86:88:b4:f3:
                    1a:c1:1e:18:91:a1:b9:1d:37:d9:75:25:93:7b:ec:
                    93:1d:a4:1e:6d:3c:c4:d9:ed:db:b1:69:fb:f3:1a:
                    00:9b:fc:95:b2:49:d4:98:42:48:a2:1a:ba:bf:8d:
                    a7:ab:ba:db:52:36:47:11:3e:5b:06:02:f7:d7:cb:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8A:32:95:36:90:E2:37:BC:75:19:43:55:B2:1D:3A:24:6F:80:6D
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:41:aa:8e:94:76:69:66:c6:37:91:c5:2f:c8:4d:4c:91:9d:
         02:85:cd:6f:98:44:b4:69:98:2d:9e:68:31:20:34:64:22:f0:
         f4:7c:66:5b:d0:b3:25:3f:88:be:3a:e9:58:63:80:89:42:ad:
         1e:a5:86:f4:f7:ea:31:98:f6:a3:25:35:e4:2b:99:9e:55:b8:
         89:0b:7e:52:52:e5:01:f9:77:b3:11:3b:4a:f2:83:f0:74:69:
         c9:bc:db:ee:87:f8:62:eb:6b:6c:b1:cb:0a:01:b2:b0:a8:de:
         89:b9:be:c5:89:7d:18:83:02:a4:64:a7:a6:25:08:26:c3:24:
         9a:63:0c:b4:2e:11:97:f3:37:fc:c6:36:e3:89:f6:ff:fa:a0:
         86:74:da:4a:cf:8a:08:6b:10:0f:54:98:0f:77:7d:ad:c3:3e:
         f6:e6:80:a5:96:df:0c:ce:c6:9f:d7:45:5a:57:e2:9b:8d:de:
         0e:2a:6f:da:4f:ae:a6:47:65:12:d5:c7:e7:d4:5f:03:db:9a:
         c4:d1:90:88:e0:a3:1e:61:83:ad:68:68:77:db:99:51:ec:a8:
         4d:9b:73:c7:dd:35:53:6f:de:a4:d5:27:39:6d:9a:cd:88:1d:
         b1:7d:69:82:b1:0e:fe:8f:86:68:3f:36:8e:32:f0:85:57:b7:
         c2:30:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:44:43 2026 by rpki-client