Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/3137372e35332e3231322e3134342f32392d3239203d3e20323633323338.roa
File:                     3137372e35332e3231322e3134342f32392d3239203d3e20323633323338.roa (raw, json)
Hash identifier:          kl6Y0rjwJLumpWRrPlkSDiSjPzeESlznJm8GDjfRfG8=
Subject key identifier:   D3:F0:47:23:63:1C:18:0C:88:19:D8:82:23:D4:07:93:34:78:24:31
Certificate issuer:       /CN=82820FBD294C9FDD6A3105442F6C7F1A7573F8AF
Certificate serial:       2C5B607A7155BC987504F2237ADD4E109460C2
Authority key identifier: 82:82:0F:BD:29:4C:9F:DD:6A:31:05:44:2F:6C:7F:1A:75:73:F8:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/3137372e35332e3231322e3134342f32392d3239203d3e20323633323338.roa
Signing time:             Wed 28 Oct 2026 03:43:18 +0000
ROA not before:           Wed 28 Oct 2026 03:38:18 +0000
ROA not after:            Wed 27 Oct 2027 03:43:18 +0000
asID:                     263238
IP address blocks:        177.53.212.144/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5b:60:7a:71:55:bc:98:75:04:f2:23:7a:dd:4e:10:94:60:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82820FBD294C9FDD6A3105442F6C7F1A7573F8AF
        Validity
            Not Before: Oct 28 03:38:18 2026 GMT
            Not After : Oct 27 03:43:18 2027 GMT
        Subject: CN=D3F04723631C180C8819D88223D4079334782431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:21:d2:55:74:84:a6:f1:69:bc:70:19:dc:
                    70:b7:64:bd:b5:56:df:50:e9:cd:82:6e:b3:15:b1:
                    0a:78:73:51:35:de:7c:f4:88:20:b8:13:11:42:4d:
                    c0:b0:0d:36:16:6d:f2:a9:fb:1e:9b:0c:65:3d:35:
                    1d:35:43:b6:2a:2b:bb:f7:fa:1b:34:05:03:4d:60:
                    c1:e6:68:7b:20:0e:96:e3:91:22:fa:a2:7a:2b:cf:
                    4e:0f:4b:0d:f2:be:04:91:56:24:68:b1:53:8a:42:
                    8b:e0:73:22:10:fd:08:97:e4:83:79:ce:a3:81:86:
                    21:a0:0e:de:c4:9a:04:48:d5:a0:83:2d:41:ed:92:
                    7e:23:f9:71:e8:3d:21:68:f7:26:1b:25:67:ba:ec:
                    81:a2:63:83:39:2e:c6:d4:df:d4:5d:b8:db:64:e5:
                    e1:6d:1a:fe:8b:d2:f7:89:bb:bb:d6:80:1c:b9:19:
                    30:69:ad:9b:36:55:e0:d1:a5:03:45:23:04:b2:1c:
                    6d:2c:26:d6:d7:47:94:e8:8b:db:8f:96:c4:1d:8c:
                    b5:03:15:cc:87:d0:17:6f:57:bd:9f:2e:26:e2:36:
                    c6:b6:61:8d:c8:4a:2a:2f:0e:5e:c7:c4:89:2e:9b:
                    39:29:72:d1:bf:e9:6e:9c:2f:45:5a:c7:a2:f5:e6:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F0:47:23:63:1C:18:0C:88:19:D8:82:23:D4:07:93:34:78:24:31
            X509v3 Authority Key Identifier:
                keyid:82:82:0F:BD:29:4C:9F:DD:6A:31:05:44:2F:6C:7F:1A:75:73:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/3137372e35332e3231322e3134342f32392d3239203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.212.144/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:78:cc:ee:e7:cf:55:2c:0b:59:94:e1:03:50:d4:78:a4:
         00:f6:f3:ad:d0:dc:36:5e:84:18:c0:d1:af:39:56:c2:33:bb:
         a6:e6:92:0b:bc:b2:5e:e7:88:8c:9c:40:3f:ef:cc:4f:1e:40:
         c0:8d:be:65:04:3b:6a:67:ab:29:62:da:26:66:26:20:91:a6:
         9d:ad:9e:97:89:56:28:d7:c6:d0:14:9e:53:89:81:87:d9:9d:
         86:c8:e2:08:df:6e:f6:4f:2f:a4:b7:e5:cd:f1:a6:66:bc:aa:
         4c:28:b9:16:b2:57:37:84:5e:aa:dd:88:9c:5b:66:b6:4b:37:
         29:f1:2f:79:36:a0:90:47:04:c0:cb:7e:d3:27:03:b1:9f:63:
         82:c8:a3:73:d6:86:81:0c:ed:5d:2c:10:79:5f:4c:11:72:b8:
         85:c0:94:4a:8f:61:43:c4:3c:05:88:84:88:74:54:13:82:1b:
         9f:49:c8:10:f2:eb:58:72:bd:0d:94:24:3f:18:ab:54:54:7b:
         75:84:b3:20:a7:8c:36:6c:56:64:b1:e0:aa:c1:ad:09:92:b5:
         8d:ca:9a:1f:64:63:92:a1:6d:cb:af:3d:35:7d:49:c0:e6:b1:
         40:a1:34:68:56:1d:ee:6c:b1:5e:05:f8:82:33:d2:41:ff:f7:
         61:e1:fc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:21:00 2026 by rpki-client