Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3136372e3235302e3130382e302f32322d3232203d3e20333934343734.roa
File:                     3136372e3235302e3130382e302f32322d3232203d3e20333934343734.roa (raw, json)
Hash identifier:          1YCmJmtazY3xS5C07KJKh87TMwfQUpf6+cLX1SjxYB0=
Subject key identifier:   EC:5A:AB:4F:20:18:2A:B1:86:54:B7:2E:6F:A2:A7:F8:56:2B:1C:61
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       7CDCCE93C1E3D2BC9DE114B7D8BDDCE6F18883DE
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3136372e3235302e3130382e302f32322d3232203d3e20333934343734.roa
Signing time:             Mon 23 Jun 2025 17:23:21 +0000
ROA not before:           Mon 23 Jun 2025 17:18:21 +0000
ROA not after:            Mon 22 Jun 2026 17:23:21 +0000
asID:                     394474
IP address blocks:        167.250.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:dc:ce:93:c1:e3:d2:bc:9d:e1:14:b7:d8:bd:dc:e6:f1:88:83:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Jun 23 17:18:21 2025 GMT
            Not After : Jun 22 17:23:21 2026 GMT
        Subject: CN=EC5AAB4F20182AB18654B72E6FA2A7F8562B1C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:b4:77:c5:f0:a3:0e:16:8d:b0:65:ac:b0:
                    8b:0d:07:08:02:08:cc:b6:4a:d5:90:be:b6:fc:3b:
                    13:fe:19:49:60:ac:36:67:b4:d5:9c:f9:06:0f:aa:
                    c5:3b:75:fe:24:52:bf:26:6c:bc:4b:34:10:51:95:
                    4d:8a:c1:45:2f:17:d1:fd:07:30:01:33:28:e2:58:
                    ba:19:ef:fd:80:10:4a:75:e5:b2:ef:8a:d2:23:db:
                    63:50:02:cf:d2:58:69:9e:78:86:2a:c7:b5:08:ff:
                    56:45:90:79:8c:50:4d:0b:c8:50:38:4f:db:e2:a2:
                    74:96:5d:f5:95:45:41:37:a9:06:3a:2f:b5:74:e1:
                    ca:7a:cc:17:a0:f2:c4:78:65:b5:5e:90:cd:12:0e:
                    26:5d:d3:7a:e3:49:2e:4b:d3:72:a8:2e:d6:fa:ab:
                    a8:17:13:aa:06:c5:b3:76:4b:7c:f6:20:cf:b4:91:
                    77:50:99:3d:03:61:fe:d9:46:dd:fe:92:d0:9d:3d:
                    c8:fa:ae:fe:47:f9:f7:f0:f1:c5:e6:57:8d:a3:ca:
                    5c:15:d0:eb:87:8c:60:2f:9e:79:21:b5:5f:bf:8b:
                    13:17:10:c5:e5:12:a5:ed:84:b9:6c:d3:4e:5c:bc:
                    dc:05:d1:31:47:b4:12:b7:b0:fb:ed:33:86:9e:a6:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:AB:4F:20:18:2A:B1:86:54:B7:2E:6F:A2:A7:F8:56:2B:1C:61
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3136372e3235302e3130382e302f32322d3232203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:fb:74:1c:04:d6:57:68:73:8c:62:2f:3e:c0:df:17:4a:
         79:43:94:5d:8f:5b:35:e9:cd:79:ba:37:f4:06:ae:85:14:86:
         f5:f4:db:f5:e3:2d:0d:27:4a:a9:99:44:9b:1a:46:c8:d9:86:
         c1:60:a4:ae:f6:1d:af:0d:78:0d:b6:96:4d:1b:4d:30:d3:1e:
         f4:1d:d2:9d:98:b7:af:05:1d:54:c0:70:f0:48:53:a0:d4:ba:
         7d:27:7d:a8:ac:39:15:f2:2c:b3:d2:dc:00:82:5c:1b:2f:fa:
         3d:0f:95:fb:5a:52:67:f1:47:54:b6:78:7e:24:04:ce:b2:e6:
         31:fb:4d:e3:6e:0e:32:80:c5:0e:d4:10:05:47:15:03:24:8f:
         4c:68:eb:f5:66:1b:14:d8:8f:67:87:30:a7:83:9f:a6:2c:84:
         62:66:48:a4:6b:8a:69:14:91:44:10:d7:0b:ed:2e:0d:29:34:
         2c:5b:68:76:25:ac:d3:94:08:d3:0a:1b:c7:7b:91:3e:20:eb:
         ff:ff:54:77:77:a5:4d:60:44:28:71:e4:ab:a7:7e:b8:2a:3c:
         fb:64:23:9a:b7:25:3c:d4:d7:01:d6:20:fa:ac:6e:cd:6a:fc:
         d1:f8:f9:0d:a4:39:ef:84:b9:a4:a0:f7:c0:44:6d:67:48:0d:
         a8:7d:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:23:41 2025 by rpki-client