Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32332d3233203d3e20323730303439.roa
File:                     36362e3233312e37322e302f32332d3233203d3e20323730303439.roa (raw, json)
Hash identifier:          1IrOG84C8+OAP6pPQ2LUBJmIXk8iiga6YpEHRb0+h/g=
Subject key identifier:   A3:6F:C4:36:E2:FB:05:CF:3D:27:E5:64:EC:2B:2C:E6:44:F1:69:5C
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       671AE54FDF2D52D5EC5A995F726268B15EED5488
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32332d3233203d3e20323730303439.roa
Signing time:             Thu 18 Sep 2025 04:20:00 +0000
ROA not before:           Thu 18 Sep 2025 04:15:00 +0000
ROA not after:            Thu 17 Sep 2026 04:20:00 +0000
asID:                     270049
IP address blocks:        66.231.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1a:e5:4f:df:2d:52:d5:ec:5a:99:5f:72:62:68:b1:5e:ed:54:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Sep 18 04:15:00 2025 GMT
            Not After : Sep 17 04:20:00 2026 GMT
        Subject: CN=A36FC436E2FB05CF3D27E564EC2B2CE644F1695C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:90:43:12:bb:0b:a4:ed:de:52:fb:3d:3b:
                    a4:dc:26:59:29:28:14:47:04:31:c4:a0:bf:c3:08:
                    5c:b9:14:62:92:02:b4:41:23:84:97:90:4b:b7:b4:
                    8a:fc:ac:50:d9:5d:db:79:a9:7f:71:19:06:60:c4:
                    7c:00:00:7c:be:9c:97:0a:73:f1:43:07:05:29:fa:
                    6b:3c:d4:e8:9d:84:04:60:55:e5:f3:f1:e2:7b:6b:
                    b8:a2:cd:bc:49:03:3e:9d:16:5e:ae:4f:60:09:0c:
                    36:d6:0c:11:5e:70:7a:9f:6b:ad:74:b7:5c:85:29:
                    d8:15:57:2e:ca:d1:78:34:ed:7c:50:e0:cc:ba:23:
                    52:0f:9a:f1:27:12:83:12:00:3e:f4:49:74:5f:d6:
                    0f:86:68:1f:1e:2d:d0:b4:df:ae:fe:83:fd:d4:31:
                    f0:ed:9f:62:c2:8b:f7:4c:06:c5:1b:67:9b:86:55:
                    6e:7f:5c:39:cf:30:4c:50:34:51:c1:ff:97:7f:ec:
                    2f:44:bd:d5:f6:49:1f:4e:1e:05:23:59:d8:33:25:
                    e1:a7:7e:c8:d8:69:1b:24:41:ad:92:36:2e:f6:ad:
                    f6:aa:7b:d8:f7:cf:dc:7c:3f:f0:7e:dc:b6:02:00:
                    c9:fe:d3:1a:18:d2:cd:fa:a9:2b:38:ea:d4:6b:c8:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6F:C4:36:E2:FB:05:CF:3D:27:E5:64:EC:2B:2C:E6:44:F1:69:5C
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32332d3233203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:27:bd:1a:a8:26:bf:ce:a6:e7:ac:3c:d2:a9:e2:cb:ec:
         c6:9a:4a:37:ca:29:7e:c7:c0:e2:d8:63:35:d4:39:b2:8c:f4:
         f9:71:9c:d9:da:60:77:82:53:63:79:ae:f6:ad:e7:e0:b2:fa:
         db:cf:2b:d1:8a:d8:6f:a7:1d:51:5a:44:8f:61:d0:7d:9a:5e:
         30:59:7e:91:9a:11:31:97:35:d9:44:14:7a:70:c7:c8:3b:43:
         62:a7:85:6b:4c:c4:bb:9e:72:8e:31:76:79:61:42:e4:d2:4b:
         7b:f5:b0:12:45:14:01:a4:78:93:19:90:f1:66:3e:1e:ba:1c:
         7e:c9:1a:da:cb:8e:21:5e:a9:19:d9:0c:f5:42:8c:2c:d6:64:
         0d:b8:a0:57:06:59:63:9b:d4:66:98:f8:01:40:07:2c:9a:2c:
         19:ce:1e:05:ad:96:4e:4a:93:ef:a6:86:84:34:62:bd:be:e1:
         95:bf:2d:4d:fe:65:d1:25:4c:dd:15:0f:ec:aa:0c:7f:b4:7a:
         24:d7:5a:f5:5d:36:45:b9:28:26:0e:43:d2:ae:10:8d:9c:11:
         41:2f:56:82:8c:ed:a6:39:eb:c3:a0:f7:a7:76:f2:da:0a:87:
         ea:56:a5:e8:43:3e:3e:79:25:cb:04:d8:b1:10:20:8c:20:11:
         4e:7f:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:31:53 2025 by rpki-client