Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa
File:                     3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa (raw, json)
Hash identifier:          ENoCFkwNmd/28/TVbdeZLxKLwAvifUaAppDTqjVUB5c=
Subject key identifier:   B3:17:E5:4C:AB:10:AA:66:CA:B2:B1:0E:A7:92:E4:6A:F4:7F:E2:64
Certificate issuer:       /CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
Certificate serial:       6440B42A8C7755CEE7873873F6D5F4A34B25DD82
Authority key identifier: F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa
Signing time:             Tue 23 Jun 2026 14:49:05 +0000
ROA not before:           Tue 23 Jun 2026 14:44:05 +0000
ROA not after:            Tue 22 Jun 2027 14:49:05 +0000
asID:                     271947
IP address blocks:        177.74.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:40:b4:2a:8c:77:55:ce:e7:87:38:73:f6:d5:f4:a3:4b:25:dd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
        Validity
            Not Before: Jun 23 14:44:05 2026 GMT
            Not After : Jun 22 14:49:05 2027 GMT
        Subject: CN=B317E54CAB10AA66CAB2B10EA792E46AF47FE264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:b5:b1:0b:27:8a:2a:6f:93:c3:17:fd:4c:
                    d6:76:fa:69:24:81:c4:41:c6:44:b8:6e:f3:98:11:
                    47:00:c4:8b:19:19:59:89:07:67:71:2b:0f:48:3c:
                    92:45:79:79:c6:81:44:f2:a9:c5:4f:ae:83:72:93:
                    98:0d:10:5f:51:46:d3:63:33:6c:75:63:18:9d:84:
                    40:28:5c:6c:cd:cc:9e:8b:c2:91:fe:21:64:c0:d6:
                    f0:97:12:54:0b:dc:04:c5:45:7e:7e:0e:14:a4:fe:
                    6f:8c:70:ad:d9:9b:4d:8f:e4:2f:83:32:5c:c2:43:
                    13:a7:b2:ac:26:87:b0:5e:4f:9a:51:ad:7d:b8:b0:
                    42:4f:33:02:a6:e1:ee:15:90:1b:f6:8d:64:40:49:
                    7b:c5:7c:25:66:12:60:11:9f:e9:69:bf:9d:25:31:
                    a7:56:56:2f:ea:5b:6e:b0:0d:ff:46:5c:c1:d2:cc:
                    a3:4d:f7:9d:26:19:b0:26:78:c7:84:47:e1:d7:8a:
                    9a:6d:76:21:1b:fd:84:3b:47:cb:33:2f:7a:23:63:
                    70:3f:75:f3:29:14:1a:6b:d3:d2:c7:48:1d:14:33:
                    19:07:d7:e2:55:d3:60:05:5f:fa:dd:a1:8b:31:ae:
                    16:c8:9b:8a:bf:66:55:8d:5b:7b:49:47:b0:02:94:
                    9a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:17:E5:4C:AB:10:AA:66:CA:B2:B1:0E:A7:92:E4:6A:F4:7F:E2:64
            X509v3 Authority Key Identifier:
                keyid:F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:28:be:a5:94:44:fe:70:ca:aa:d0:9f:96:92:39:5e:a3:80:
         fa:d1:22:09:4a:a6:90:06:10:28:49:ec:a1:eb:d2:9c:c2:dd:
         c6:b6:ea:fb:83:37:8b:b9:eb:0c:0a:74:17:6e:62:5b:36:2e:
         60:cf:c0:fc:a9:89:c1:e4:ad:3a:d5:cf:e5:0b:6c:39:ca:1b:
         64:af:2c:bd:6c:f4:37:aa:4d:35:dd:6e:40:0d:47:2f:f1:94:
         90:2b:11:af:4c:22:61:8d:31:57:80:c2:de:d8:96:b9:da:e3:
         30:46:e7:c4:62:8d:25:f3:72:3b:a6:d5:8b:6f:07:1a:3c:a1:
         94:ae:59:32:83:7a:70:b0:29:9e:25:17:20:02:5f:97:d4:0f:
         f0:01:47:be:d2:38:5a:3e:b3:20:8b:f3:3b:65:13:de:b9:0c:
         7e:30:ae:b8:41:41:04:e4:9f:49:cd:4f:57:e7:88:e8:53:85:
         92:f2:9c:b4:43:e9:61:17:9c:b1:62:d1:04:d5:80:b6:b3:4d:
         d0:23:2f:b6:7f:9e:2e:91:f4:13:d3:c9:01:3b:57:4f:5b:38:
         e7:bc:f3:d9:0d:ee:ce:0f:de:47:ac:83:bf:35:5d:62:3d:98:
         a4:6f:20:ad:ef:cc:17:54:de:bc:17:c0:a2:fe:7e:c8:95:5b:
         16:5d:e8:81
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZEC0Kox3Vc7nhzhz9tX0o0sl3YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkzNjhBRjk0Qzk0RUUyQkE5RjI0NzVBNDU3ODRDRjhD
RUM2MTZCNzAeFw0yNjA2MjMxNDQ0MDVaFw0yNzA2MjIxNDQ5MDVaMDMxMTAvBgNV
BAMTKEIzMTdFNTRDQUIxMEFBNjZDQUIyQjEwRUE3OTJFNDZBRjQ3RkUyNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlbWxCyeKKm+Twxf9TNZ2+mkk
gcRBxkS4bvOYEUcAxIsZGVmJB2dxKw9IPJJFeXnGgUTyqcVProNyk5gNEF9RRtNj
M2x1YxidhEAoXGzNzJ6LwpH+IWTA1vCXElQL3ATFRX5+DhSk/m+McK3Zm02P5C+D
MlzCQxOnsqwmh7BeT5pRrX24sEJPMwKm4e4VkBv2jWRASXvFfCVmEmARn+lpv50l
MadWVi/qW26wDf9GXMHSzKNN950mGbAmeMeER+HXipptdiEb/YQ7R8szL3ojY3A/
dfMpFBpr09LHSB0UMxkH1+JV02AFX/rdoYsxrhbIm4q/ZlWNW3tJR7AClJrlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUsxflTKsQqmbKsrEOp5LkavR/4mQwHwYDVR0j
BBgwFoAU+TaK+UyU7iup8kdaRXhM+M7GFrcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjI3RDU5QkUxODRGOEIyOTc5NkEyQkVCRDU2QTE0QjA0
N0VFQTU5M0RCOUUwQTQ1MDhDNUUzRUZFNTk0RkVELzAvRjkzNjhBRjk0Qzk0RUUy
QkE5RjI0NzVBNDU3ODRDRjhDRUM2MTZCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTM2OEFGOTRDOTRFRTJCQTlG
MjQ3NUE0NTc4NENGOENFQzYxNkI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYyN0Q1OUJFMTg0RjhCMjk3OTZBMkJFQkQ1NkExNEIwNDdFRUE1OTNE
QjlFMEE0NTA4QzVFM0VGRTU5NEZFRC8wLzMxMzczNzJlMzczNDJlMzEzMDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsUpk
MA0GCSqGSIb3DQEBCwUAA4IBAQBYKL6llET+cMqq0J+Wkjleo4D60SIJSqaQBhAo
Seyh69Kcwt3Gtur7gzeLuesMCnQXbmJbNi5gz8D8qYnB5K061c/lC2w5yhtkryy9
bPQ3qk013W5ADUcv8ZSQKxGvTCJhjTFXgMLe2Ja52uMwRufEYo0l83I7ptWLbwca
PKGUrlkyg3pwsCmeJRcgAl+X1A/wAUe+0jhaPrMgi/M7ZRPeuQx+MK64QUEE5J9J
zU9X54joU4WS8py0Q+lhF5yxYtEE1YC2s03QIy+2f54ukfQT08kBO1dPWzjnvPPZ
De7OD95HrIO/NV1iPZikbyCt78wXVN68F8Ci/n7IlVsWXeiB
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:34 2026 by rpki-client