Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3232203d3e20323731393437.roa
File:                     3137372e37342e3130302e302f32322d3232203d3e20323731393437.roa (raw, json)
Hash identifier:          8WwAx2fFXsfmQxSStiHpoyi3QAteVyHe/7s3E7cRA78=
Subject key identifier:   3D:6A:E2:52:60:9D:81:FE:EF:1F:33:F7:3E:45:12:A0:0A:22:F0:64
Certificate issuer:       /CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
Certificate serial:       3A49B8C8839B7F08C15690AE0DEE22B9903A6D40
Authority key identifier: F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3232203d3e20323731393437.roa
Signing time:             Wed 02 Jul 2025 19:55:00 +0000
ROA not before:           Wed 02 Jul 2025 19:50:00 +0000
ROA not after:            Wed 01 Jul 2026 19:55:00 +0000
asID:                     271947
IP address blocks:        177.74.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:b8:c8:83:9b:7f:08:c1:56:90:ae:0d:ee:22:b9:90:3a:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
        Validity
            Not Before: Jul  2 19:50:00 2025 GMT
            Not After : Jul  1 19:55:00 2026 GMT
        Subject: CN=3D6AE252609D81FEEF1F33F73E4512A00A22F064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:ee:fc:6f:54:68:63:80:6d:77:d1:5f:7e:
                    9c:91:6c:2d:18:21:be:e0:9e:3d:ce:5f:16:c8:53:
                    a6:f4:92:51:7b:01:d1:a6:d6:61:23:de:b7:1a:66:
                    ac:8c:60:75:76:4c:54:65:01:b8:82:9a:5f:2e:9d:
                    9a:85:0e:52:73:c7:18:2c:75:4a:c1:1d:c2:c8:41:
                    d1:8f:48:f9:8f:5e:15:2e:76:96:4d:cc:8e:e7:89:
                    bd:6d:60:a5:00:8d:17:23:13:e0:b8:18:d8:5c:8e:
                    e9:af:28:83:50:95:71:dc:4f:f2:16:af:15:0b:b4:
                    01:a9:1b:9f:1c:63:87:dd:52:b2:65:cd:1d:cc:de:
                    d1:ef:a0:7e:29:fa:92:28:e4:62:9b:ff:c9:91:42:
                    b3:c0:e6:cf:02:cf:06:97:00:5d:d3:4d:b9:a0:13:
                    be:53:43:35:03:29:cc:61:74:15:5c:3d:f0:66:63:
                    0c:c8:9e:38:d5:27:89:10:4a:58:f8:21:fe:21:ee:
                    33:13:61:cc:e4:f4:18:7d:c8:82:a2:c6:6d:6e:ac:
                    78:2f:e3:47:7e:94:a8:4e:1d:19:0e:81:26:74:96:
                    d4:94:0a:1f:ae:ae:c1:7e:cd:89:5d:43:1a:ca:e9:
                    81:19:1e:1e:2a:4d:42:7c:47:fa:91:eb:84:b4:77:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6A:E2:52:60:9D:81:FE:EF:1F:33:F7:3E:45:12:A0:0A:22:F0:64
            X509v3 Authority Key Identifier:
                keyid:F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3232203d3e20323731393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:af:47:ad:70:31:ce:e4:cf:47:b5:35:ef:6f:bd:4f:94:63:
         0f:7d:ad:18:e6:b1:69:5c:fc:ca:a1:97:db:4e:a8:6c:66:48:
         53:7a:2e:a6:7b:84:be:2b:3c:a7:a4:28:e2:ab:13:49:3f:78:
         f1:22:3c:74:90:c4:d1:e6:91:0d:d0:61:2d:c1:96:de:5d:77:
         46:c4:64:ec:be:8b:21:c4:bb:2b:be:32:92:28:be:bf:cb:4a:
         49:ee:2c:dc:59:1f:70:5c:ec:f9:e6:d3:6b:f6:e0:7e:4a:36:
         70:e5:50:c4:38:66:d1:6a:d4:23:8e:60:72:50:2f:2f:57:c6:
         e1:c4:f0:58:e4:54:30:ef:ac:15:4c:c1:e0:eb:85:1b:71:e5:
         f5:d5:56:81:98:1a:f6:48:0d:3e:68:ea:33:9d:dc:c9:73:5b:
         a2:c2:95:74:16:59:06:bd:e0:1a:1b:fb:a7:75:7c:db:2e:e9:
         fb:6d:7c:8a:35:7a:59:45:07:29:7d:7c:9d:40:4a:63:c0:ab:
         77:b9:aa:c2:48:a6:8b:da:c7:de:a8:79:18:b8:ca:8f:3c:52:
         53:2e:27:83:1d:b3:07:73:34:27:67:c0:78:ed:5d:8e:8e:a6:
         63:e0:29:38:23:30:1c:a0:42:2e:a1:00:d3:e2:6c:21:ff:fb:
         bf:a1:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:23:16 2025 by rpki-client