Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa
File:                     3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa (raw, json)
Hash identifier:          hUzmAKBwockOJc//ExP0JqVEqLYtDnJdQUB8iI3mLp8=
Subject key identifier:   4E:4B:7C:23:16:66:C4:0D:8A:48:9D:6B:3B:86:5D:DA:E1:0E:39:B0
Certificate issuer:       /CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
Certificate serial:       1C645AD91D56DA18D1DF2C1A7DD2671AD0D7FE63
Authority key identifier: DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa
Signing time:             Sat 21 Jun 2025 13:30:00 +0000
ROA not before:           Sat 21 Jun 2025 13:25:00 +0000
ROA not after:            Sat 20 Jun 2026 13:30:00 +0000
asID:                     271862
IP address blocks:        177.126.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:64:5a:d9:1d:56:da:18:d1:df:2c:1a:7d:d2:67:1a:d0:d7:fe:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
        Validity
            Not Before: Jun 21 13:25:00 2025 GMT
            Not After : Jun 20 13:30:00 2026 GMT
        Subject: CN=4E4B7C231666C40D8A489D6B3B865DDAE10E39B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:2e:de:ff:d6:a5:e4:c6:7b:6d:24:0e:22:
                    5f:b2:6b:2f:6d:f9:95:2e:08:40:ec:85:be:be:cb:
                    cf:99:a7:42:b8:2d:bb:95:96:84:b5:92:a9:d8:6b:
                    f3:e4:ae:a5:8f:c1:e1:d1:63:b1:c0:a0:fc:83:7f:
                    ec:ac:2a:57:77:d3:44:04:f2:eb:8b:f9:1e:01:db:
                    0f:59:70:2a:1b:ac:e6:a3:e5:56:bc:67:cb:2f:28:
                    f2:1b:9d:7e:7b:b6:4a:56:54:d9:3e:f7:07:02:09:
                    39:ee:0f:c9:d0:4b:51:40:70:c5:f9:92:74:54:cf:
                    0b:9f:2f:2b:e0:6a:94:0a:8f:39:52:0d:91:e7:98:
                    8d:67:30:e7:82:9d:78:6a:08:8a:a8:34:1c:cd:ba:
                    f0:08:b5:2e:a8:8e:ac:2a:ef:34:48:e7:40:73:50:
                    76:1a:80:a8:b9:24:bf:4b:ab:6f:7f:ef:9a:79:9a:
                    49:fd:b3:40:70:0e:02:3f:c5:12:0b:44:ec:fd:4d:
                    7c:6e:04:2d:f6:40:83:6f:0f:3e:b5:af:41:99:7c:
                    f0:9a:10:23:fa:57:d6:e0:56:cc:41:e1:b1:42:4b:
                    16:11:82:fe:73:f2:38:87:27:c5:9f:4e:3a:3b:b4:
                    d6:3d:c4:f1:95:d5:e1:df:16:75:da:72:8f:3b:80:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4B:7C:23:16:66:C4:0D:8A:48:9D:6B:3B:86:5D:DA:E1:0E:39:B0
            X509v3 Authority Key Identifier:
                keyid:DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34392e302f32342d3234203d3e20323731383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:c6:dc:0c:07:50:af:51:a0:c5:bc:37:05:39:83:0b:2b:
         1b:70:89:96:e2:41:79:f0:b0:dc:75:8b:e4:23:ac:d8:6b:fa:
         6d:b0:2a:b5:8b:27:a2:5d:f4:0f:e5:61:8a:ea:67:49:4b:08:
         3a:43:64:dc:a1:3c:a2:08:ef:51:1a:30:a7:72:32:eb:ad:0e:
         64:f7:af:6a:f8:11:ab:7f:26:90:13:5a:a2:a0:96:d0:1b:7c:
         05:55:0a:da:60:ea:c4:ad:48:6f:b0:28:3a:8a:da:71:c4:6c:
         c6:92:94:cd:36:96:66:13:8b:ec:62:13:78:e7:71:1a:40:f3:
         b3:ab:ec:62:59:8f:a0:4c:0f:74:8c:fa:1c:c3:51:a4:24:65:
         97:bf:54:d5:66:f4:d6:f8:ad:c1:84:cf:57:5e:9f:3e:03:f9:
         34:d5:95:e2:ac:96:d6:75:1b:1c:6d:00:bb:90:eb:9b:c3:ee:
         86:3f:df:32:70:02:79:44:da:27:b8:54:fc:02:87:cc:df:1e:
         7e:63:7a:a1:a2:9f:c2:f5:e3:d1:4f:ec:82:e8:27:ea:5d:78:
         98:18:e3:dc:a2:7d:b9:1e:3e:7a:52:cb:a0:97:9f:96:6d:93:
         3d:e3:bb:bb:aa:9f:06:87:33:e2:f9:4d:fd:d2:c9:bb:aa:bd:
         e3:82:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:20:20 2025 by rpki-client