Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/3139312e3130322e33332e302f32342d3234203d3e20313734.roa
File:                     3139312e3130322e33332e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          3jtiS1Jm20wftA1hyuw2MwhOB7k9Je2C3JPMdjcEwsY=
Subject key identifier:   32:F4:55:F3:1D:22:A4:CC:87:EE:9E:26:B8:E8:F7:CB:28:4F:A5:6A
Certificate issuer:       /CN=D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC
Certificate serial:       309FD5CBDECDCD39C90E543097E6DF658AC239A0
Authority key identifier: D5:CD:D1:00:D1:AC:8C:A9:01:EC:CD:34:EB:AF:27:70:47:42:F6:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/3139312e3130322e33332e302f32342d3234203d3e20313734.roa
Signing time:             Fri 02 Oct 2026 16:30:00 +0000
ROA not before:           Fri 02 Oct 2026 16:25:00 +0000
ROA not after:            Fri 01 Oct 2027 16:30:00 +0000
asID:                     174
IP address blocks:        191.102.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 04:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9f:d5:cb:de:cd:cd:39:c9:0e:54:30:97:e6:df:65:8a:c2:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC
        Validity
            Not Before: Oct  2 16:25:00 2026 GMT
            Not After : Oct  1 16:30:00 2027 GMT
        Subject: CN=32F455F31D22A4CC87EE9E26B8E8F7CB284FA56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:f7:6d:5e:ce:bd:08:fc:3f:66:e9:82:42:
                    2d:17:47:1e:50:82:73:c3:6b:33:e4:a0:53:0f:ca:
                    b2:7c:32:48:f6:08:90:23:70:9f:05:fc:76:19:44:
                    80:1c:46:77:a9:87:1a:58:0a:8c:c0:ac:e7:84:aa:
                    ff:dc:c1:ed:12:87:3f:4e:45:f0:4e:0d:4f:58:34:
                    80:8c:0f:eb:c8:cd:cc:35:ca:6f:67:65:07:7a:a1:
                    02:77:9c:96:6f:62:c1:37:b7:fa:55:82:ea:d8:25:
                    11:49:60:b7:06:05:6a:6e:17:08:29:1f:0b:7a:3f:
                    82:2c:09:c4:bf:69:1a:b3:c1:e4:07:a7:6a:5f:ff:
                    d1:97:78:42:0d:28:c0:37:a1:b0:49:b2:2b:e0:7c:
                    2c:b5:1e:81:d4:c3:62:e4:7c:69:e7:e3:3b:3b:a2:
                    3c:b4:0b:fb:07:3e:61:df:d9:e4:f7:6f:e7:47:81:
                    a6:77:4f:77:9a:ab:29:37:d9:6e:cd:cc:01:6b:de:
                    66:2d:eb:cd:eb:23:fa:b6:b4:6d:51:98:3f:b6:63:
                    68:28:db:10:ae:37:ad:c1:20:c4:1c:6a:4e:6e:b3:
                    5d:a3:93:3e:60:26:f3:0f:90:ae:02:57:2a:b6:34:
                    e5:a0:d8:b0:7c:81:8f:c7:fc:52:7d:34:3d:b9:df:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F4:55:F3:1D:22:A4:CC:87:EE:9E:26:B8:E8:F7:CB:28:4F:A5:6A
            X509v3 Authority Key Identifier:
                keyid:D5:CD:D1:00:D1:AC:8C:A9:01:EC:CD:34:EB:AF:27:70:47:42:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/3139312e3130322e33332e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:97:7f:43:11:0f:25:a0:74:8e:c1:70:62:54:f3:e0:08:f3:
         64:01:8e:07:d2:7d:60:7a:bc:c1:10:c6:72:48:f8:b8:8f:fe:
         44:89:fc:07:73:57:61:96:88:9d:77:dc:08:08:7b:c8:d9:0c:
         7c:fe:36:15:31:12:70:5f:25:b5:be:4c:06:63:18:80:19:44:
         0d:37:c1:a4:09:3e:79:3a:89:21:c1:14:70:69:a7:1e:0d:60:
         97:ee:e1:fa:ae:09:ee:9b:12:09:c9:10:71:e0:e7:5b:5a:5c:
         37:bc:23:60:c2:1c:2a:52:c5:93:56:e1:00:61:3a:fc:52:08:
         e1:a5:f1:fa:01:c5:3a:a7:bf:9d:e1:1d:4f:8f:6c:13:7a:88:
         f1:51:7d:77:e4:14:7e:b9:b6:1e:94:b3:ff:d4:7e:d5:38:c9:
         6c:50:4b:05:97:01:75:4d:5d:d9:75:a1:d1:8d:91:37:dd:ef:
         05:78:ac:7c:51:06:55:6c:38:06:a0:f7:4d:0a:ff:87:e4:94:
         63:3c:49:a6:ae:0a:b0:81:b8:be:04:f2:43:29:39:c5:bf:e9:
         6b:39:43:b5:ae:cf:85:19:71:39:3d:60:24:ac:dd:5d:e0:86:
         42:ae:4c:74:9d:5a:76:77:b3:93:29:2c:76:e2:d7:2e:ee:53:
         4e:d9:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:29:27 2026 by rpki-client