Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3131302e302f32332d3233203d3e20323635373731.roa
File:                     3132382e3230312e3131302e302f32332d3233203d3e20323635373731.roa (raw, json)
Hash identifier:          TCrD56MNM9aJEltxNae1Fqpqum8zzlTQ+Zv0AwDT4q8=
Subject key identifier:   2A:06:50:F8:E3:D5:A5:A8:A5:A9:F1:66:A2:E3:E1:DB:10:82:72:D7
Certificate issuer:       /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial:       16A83C7518B9AA7881F79D991E4AEDCEB5410197
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3131302e302f32332d3233203d3e20323635373731.roa
Signing time:             Sat 24 Oct 2026 22:43:14 +0000
ROA not before:           Sat 24 Oct 2026 22:38:14 +0000
ROA not after:            Sat 23 Oct 2027 22:43:14 +0000
asID:                     265771
IP address blocks:        128.201.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a8:3c:75:18:b9:aa:78:81:f7:9d:99:1e:4a:ed:ce:b5:41:01:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
        Validity
            Not Before: Oct 24 22:38:14 2026 GMT
            Not After : Oct 23 22:43:14 2027 GMT
        Subject: CN=2A0650F8E3D5A5A8A5A9F166A2E3E1DB108272D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0a:2a:bb:15:c0:71:e2:89:63:f3:1a:4e:c0:
                    87:e2:f2:e9:4a:49:f4:2a:b8:ca:a7:e2:d6:5b:12:
                    2a:ee:70:87:8f:ec:8e:26:eb:a9:38:2e:d4:0e:74:
                    76:45:bf:6f:e4:8b:ed:c5:8c:07:f3:60:6e:72:98:
                    f3:f8:44:92:6c:d5:df:9c:c1:95:ef:99:9c:79:bf:
                    66:4d:2d:1b:5a:a1:65:12:e0:fd:cd:82:66:71:33:
                    81:9a:ac:36:6f:60:e8:bf:0d:1d:79:15:b7:1b:65:
                    60:04:86:90:a6:4d:65:d7:e6:34:82:91:08:1d:58:
                    2d:33:a5:73:d3:6e:8b:9b:03:f6:18:b1:c8:62:10:
                    8b:06:0e:10:1e:87:1c:55:a8:21:0f:29:1b:66:02:
                    83:c3:7f:82:d4:d3:41:bc:06:a5:ae:8f:95:f7:64:
                    21:fc:64:bd:5c:0d:79:dc:12:3c:b2:1f:74:9f:7f:
                    dd:0a:93:6b:ca:61:19:f2:78:e3:26:63:ab:74:e7:
                    dd:e6:77:f8:1c:25:57:67:10:97:75:68:0e:45:25:
                    bf:71:04:26:46:8f:82:cc:31:45:dc:56:71:dc:b2:
                    d1:dd:db:a1:13:7c:ba:88:f2:87:11:3e:91:4e:b3:
                    03:cb:e4:b2:23:2a:97:ce:90:f7:f4:37:27:98:21:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:06:50:F8:E3:D5:A5:A8:A5:A9:F1:66:A2:E3:E1:DB:10:82:72:D7
            X509v3 Authority Key Identifier:
                keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3131302e302f32332d3233203d3e20323635373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:53:c7:82:bc:8f:9c:12:0f:09:fc:b9:75:77:6a:09:7a:
         f6:24:7e:09:56:e4:cd:3b:5b:bd:bf:1e:ba:65:34:d8:e5:38:
         0e:0b:d2:e7:27:a0:fc:65:36:42:9b:40:51:d6:47:1d:5b:bd:
         b1:49:af:8e:f7:30:68:b4:d5:c1:c3:5f:e3:f3:11:4f:f2:7c:
         50:1a:47:30:f2:35:8f:55:4a:76:a3:cb:61:8a:22:59:80:a5:
         65:fd:23:e2:bf:39:a9:f1:15:33:a7:8f:f6:3a:08:20:43:07:
         23:f1:0b:03:01:a3:47:85:53:46:97:e4:30:13:af:3e:c4:98:
         ef:2c:38:a2:ff:95:82:37:36:40:ad:c0:e2:ff:bc:3a:60:6d:
         87:6b:19:1c:b9:6d:54:5c:90:1e:ff:90:69:62:2b:3f:cd:9a:
         1a:98:ba:33:fd:ee:44:82:24:34:07:cf:20:92:c5:7d:4b:ee:
         a4:45:c9:b7:54:13:5b:fb:c5:ff:8a:6d:f3:7b:6d:25:39:9e:
         9b:2b:62:a0:4d:7b:f0:15:39:7c:93:6e:97:87:c9:c2:ee:75:
         ad:59:12:b5:35:06:34:a5:d7:b9:f6:67:00:f8:36:12:b8:a2:
         86:f5:08:c3:79:e3:b3:04:d6:1b:8b:f9:4a:90:7f:7a:5b:45:
         08:85:9c:e8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFqg8dRi5qniB952ZHkrtzrVBAZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBOUM0NTY1NTFBOUZBNDMxODU2NUU0RUY1QkY0QzZC
NUY5QUFDMzAeFw0yNjEwMjQyMjM4MTRaFw0yNzEwMjMyMjQzMTRaMDMxMTAvBgNV
BAMTKDJBMDY1MEY4RTNENUE1QThBNUE5RjE2NkEyRTNFMURCMTA4MjcyRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCiq7FcBx4olj8xpOwIfi8ulK
SfQquMqn4tZbEirucIeP7I4m66k4LtQOdHZFv2/ki+3FjAfzYG5ymPP4RJJs1d+c
wZXvmZx5v2ZNLRtaoWUS4P3NgmZxM4GarDZvYOi/DR15FbcbZWAEhpCmTWXX5jSC
kQgdWC0zpXPTboubA/YYschiEIsGDhAehxxVqCEPKRtmAoPDf4LU00G8BqWuj5X3
ZCH8ZL1cDXncEjyyH3Sff90Kk2vKYRnyeOMmY6t0593md/gcJVdnEJd1aA5FJb9x
BCZGj4LMMUXcVnHcstHd26ETfLqI8ocRPpFOswPL5LIjKpfOkPf0NyeYIZydAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUKgZQ+OPVpailqfFmouPh2xCCctcwHwYDVR0j
BBgwFoAUjanEVlUan6QxhWXk71v0xrX5qsMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNkUwQzAwQjkyMUNDQ0M1M0QyNzNBQ0Q2RjNCMjVGQTY0
Mzk4M0IxOTIwNzc4RTEwOTk2QUQxMDAwODc3OUYxLzAvOERBOUM0NTY1NTFBOUZB
NDMxODU2NUU0RUY1QkY0QzZCNUY5QUFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REE5QzQ1NjU1MUE5RkE0MzE4
NTY1RTRFRjVCRjRDNkI1RjlBQUMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTZFMEMwMEI5MjFDQ0NDNTNEMjczQUNENkYzQjI1RkE2NDM5ODNCMTky
MDc3OEUxMDk5NkFEMTAwMDg3NzlGMS8wLzMxMzIzODJlMzIzMDMxMmUzMTMxMzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzUzNzM3MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGA
yW4wDQYJKoZIhvcNAQELBQADggEBALFzU8eCvI+cEg8J/Ll1d2oJevYkfglW5M07
W72/HrplNNjlOA4L0ucnoPxlNkKbQFHWRx1bvbFJr473MGi01cHDX+PzEU/yfFAa
RzDyNY9VSnajy2GKIlmApWX9I+K/OanxFTOnj/Y6CCBDByPxCwMBo0eFU0aX5DAT
rz7EmO8sOKL/lYI3NkCtwOL/vDpgbYdrGRy5bVRckB7/kGliKz/NmhqYujP97kSC
JDQHzyCSxX1L7qRFybdUE1v7xf+KbfN7bSU5npsrYqBNe/AVOXyTbpeHycLuda1Z
ErU1BjSl17n2ZwD4NhK4oob1CMN547ME1huL+UqQf3pbRQiFnOg=
-----END CERTIFICATE-----
Generated at Thu Oct 29 07:25:56 2026 by rpki-client