Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272097.roa
File:                     AS272097.roa (raw, json)
Hash identifier:          sKiNlFjfb83X2dl10PBRk16PkZF0pzuliWRCGC304xs=
Subject key identifier:   6C:C9:54:DA:92:2D:BE:F3:78:D4:0E:07:04:35:24:7D:8C:D8:F4:87
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       5451CA8145A9A6C8696AA1C27B626F1EDB8D30CC
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272097.roa
Signing time:             Thu 03 Jul 2025 21:24:32 +0000
ROA not before:           Thu 03 Jul 2025 21:19:32 +0000
ROA not after:            Thu 02 Jul 2026 21:24:32 +0000
asID:                     272097
IP address blocks:        181.188.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:51:ca:81:45:a9:a6:c8:69:6a:a1:c2:7b:62:6f:1e:db:8d:30:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Jul  3 21:19:32 2025 GMT
            Not After : Jul  2 21:24:32 2026 GMT
        Subject: CN=6CC954DA922DBEF378D40E070435247D8CD8F487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:24:ea:37:f4:51:dc:c1:12:10:82:c2:a2:
                    a7:f4:56:f2:bd:5e:00:01:c8:cf:4e:b9:e2:d5:94:
                    e5:4c:f9:5f:6e:b8:f4:8a:5c:43:ff:c4:fc:c5:39:
                    a6:f4:54:30:b7:53:7f:5e:dc:be:9a:02:cf:a1:9b:
                    d1:a4:68:8f:27:62:cf:ae:ff:90:e2:75:c9:d1:75:
                    8a:fc:93:a0:f4:88:b4:3e:d3:0e:86:41:16:e9:fd:
                    1a:99:f4:c9:c3:ab:ce:95:79:e1:f2:dc:a4:f2:db:
                    02:94:8a:c6:e6:bf:5f:26:dd:9f:ef:b8:90:be:45:
                    c7:7e:c5:85:2a:39:cd:99:7e:37:90:dd:e2:26:02:
                    5d:33:be:93:40:54:2f:d1:dc:a4:72:33:ab:fa:57:
                    28:2a:50:0d:27:17:20:73:11:a1:60:b9:59:9b:92:
                    bd:84:aa:39:33:72:8b:8c:8f:67:1d:73:df:fc:28:
                    16:d5:5d:9f:b7:9d:ad:a5:3e:4d:ab:63:12:2a:de:
                    96:b7:03:5a:f3:28:7f:92:8d:00:c5:f7:ce:a4:3f:
                    6b:72:c8:b3:47:ce:e1:9a:48:20:36:15:9b:2b:58:
                    64:41:09:01:24:34:62:5d:62:a2:c5:9d:f4:74:1f:
                    dc:30:0b:a7:60:15:52:c5:d2:93:b3:8e:f4:48:69:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C9:54:DA:92:2D:BE:F3:78:D4:0E:07:04:35:24:7D:8C:D8:F4:87
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:46:c6:5a:6f:e9:c0:7d:09:d4:5b:2e:75:1f:a4:3a:f2:
         a8:b8:db:1f:19:43:b8:31:2c:08:e1:db:b0:3d:3f:65:53:ab:
         c7:52:41:39:ad:df:63:d9:6b:e3:72:0d:87:63:fe:0a:c5:2b:
         e6:f7:5b:7e:07:39:7d:1a:89:a0:f5:9f:33:62:a3:4c:d7:6c:
         12:35:70:9b:f3:a0:ff:5d:2a:3a:1e:98:ab:79:50:3f:60:e0:
         35:e6:d0:86:c3:b5:1b:b3:bb:ba:1b:d2:aa:f1:e1:2a:29:e1:
         74:0a:2f:11:72:1f:3d:11:c2:59:b3:0e:53:61:71:b8:a5:ad:
         b0:83:8e:2b:33:34:db:d5:6d:d9:44:ae:a4:ef:1b:21:01:6a:
         82:c7:02:09:cb:8a:84:c2:ff:72:89:e5:87:26:9b:a4:dd:6d:
         a3:7b:61:be:78:e9:71:6e:6a:aa:42:62:6e:c7:5d:9b:cc:e6:
         f0:86:cf:1d:78:f5:ca:bd:66:e9:5b:3f:b3:a6:32:ab:72:a1:
         1f:f4:a7:0c:9a:7e:35:9b:8b:bc:c8:9a:53:f4:9f:9d:39:64:
         d2:2f:6b:92:f2:95:59:49:e8:b9:d7:d5:cf:a2:39:15:8f:5b:
         61:b9:0b:bf:dd:4b:e9:3e:d7:dc:33:7b:04:21:b9:da:e8:63:
         dd:10:fa:2e
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUVFHKgUWppshpaqHCe2JvHtuNMMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1RTI5OENDQTBCODQwREI3MjZGNjBFRUQxNDBDMzdG
REIyM0JENjAeFw0yNTA3MDMyMTE5MzJaFw0yNjA3MDIyMTI0MzJaMDMxMTAvBgNV
BAMTKDZDQzk1NERBOTIyREJFRjM3OEQ0MEUwNzA0MzUyNDdEOENEOEY0ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcCTqN/RR3MESEILCoqf0VvK9
XgAByM9OueLVlOVM+V9uuPSKXEP/xPzFOab0VDC3U39e3L6aAs+hm9GkaI8nYs+u
/5DidcnRdYr8k6D0iLQ+0w6GQRbp/RqZ9MnDq86VeeHy3KTy2wKUisbmv18m3Z/v
uJC+Rcd+xYUqOc2ZfjeQ3eImAl0zvpNAVC/R3KRyM6v6VygqUA0nFyBzEaFguVmb
kr2EqjkzcouMj2cdc9/8KBbVXZ+3na2lPk2rYxIq3pa3A1rzKH+SjQDF986kP2ty
yLNHzuGaSCA2FZsrWGRBCQEkNGJdYqLFnfR0H9wwC6dgFVLF0pOzjvRIaQsHAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUbMlU2pItvvN41A4HBDUkfYzY9IcwHwYDVR0j
BBgwFoAUcl4pjMoLhA23JvYO7RQMN/2yO9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4
Mjc2MDA5MDc0RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvNzI1RTI5OENDQTBCODQw
REI3MjZGNjBFRUQxNDBDMzdGREIyM0JENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjVFMjk4Q0NBMEI4NDBEQjcy
NkY2MEVFRDE0MEMzN0ZEQjIzQkQ2LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4Mjc2MDA5MDc0
RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvQVMyNzIwOTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1vPww
DQYJKoZIhvcNAQELBQADggEBAIl7RsZab+nAfQnUWy51H6Q68qi42x8ZQ7gxLAjh
27A9P2VTq8dSQTmt32PZa+NyDYdj/grFK+b3W34HOX0aiaD1nzNio0zXbBI1cJvz
oP9dKjoemKt5UD9g4DXm0IbDtRuzu7ob0qrx4Sop4XQKLxFyHz0RwlmzDlNhcbil
rbCDjiszNNvVbdlErqTvGyEBaoLHAgnLioTC/3KJ5Ycmm6TdbaN7Yb546XFuaqpC
Ym7HXZvM5vCGzx149cq9ZulbP7OmMqtyoR/0pwyafjWbi7zImlP0n505ZNIva5Ly
lVlJ6LnX1c+iORWPW2G5C7/dS+k+19wzewQhudroY90Q+i4=
-----END CERTIFICATE-----
Generated at Fri Jul 4 15:56:27 2025 by rpki-client