Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37332e302f32342d3234203d3e20323730303439.roa
File:                     36362e3233312e37332e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          L2Fde77yFDpEy0u+nYUfXXVBBB8XvuJba+wQ+2Gw4kw=
Subject key identifier:   9E:68:F2:62:DC:CF:B0:96:70:FD:AC:8A:D5:0D:6B:AF:88:BF:95:A1
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       20D2A9FABDC78F317D8C6A8BD56BFDED7EB3ADBA
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37332e302f32342d3234203d3e20323730303439.roa
Signing time:             Wed 24 Sep 2025 19:50:00 +0000
ROA not before:           Wed 24 Sep 2025 19:45:00 +0000
ROA not after:            Wed 23 Sep 2026 19:50:00 +0000
asID:                     270049
IP address blocks:        66.231.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:a9:fa:bd:c7:8f:31:7d:8c:6a:8b:d5:6b:fd:ed:7e:b3:ad:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Sep 24 19:45:00 2025 GMT
            Not After : Sep 23 19:50:00 2026 GMT
        Subject: CN=9E68F262DCCFB09670FDAC8AD50D6BAF88BF95A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:60:85:18:c6:ee:f0:64:da:13:24:40:91:
                    31:e8:03:0b:03:83:5b:c4:2b:67:30:c0:b0:d8:94:
                    e1:7e:64:a4:7d:44:b7:30:37:8a:78:99:4c:81:c6:
                    42:97:ee:7e:77:4b:1e:a1:4d:3a:6c:61:2b:7c:2e:
                    54:28:56:bc:a4:15:d6:2e:af:e9:62:bd:6b:53:a5:
                    22:77:b5:39:ad:33:36:b5:8a:dd:af:b7:25:85:93:
                    ae:df:f8:e5:13:38:6b:fc:b0:8b:53:da:98:e9:c0:
                    92:a0:db:82:d1:4d:1b:31:2f:45:bd:52:31:83:df:
                    c1:29:83:39:8b:4c:e7:9e:75:ca:a0:90:b8:d5:20:
                    06:24:ea:4d:aa:ec:31:80:f7:62:36:ec:18:c7:0a:
                    04:b4:24:5b:fd:a1:df:6a:8c:6e:10:12:3b:e4:fd:
                    15:42:3f:a4:35:5f:92:e1:5c:87:28:af:aa:36:01:
                    80:ef:76:58:ab:3e:a9:24:e7:c1:da:f3:00:a3:79:
                    67:ae:70:53:a0:f5:82:fd:da:2b:47:3d:2c:c0:9b:
                    55:5c:9f:fe:15:13:86:98:cc:6d:5e:13:8f:5d:3a:
                    6a:0d:c3:d3:7a:6b:14:50:ba:bb:d5:23:6a:3c:bf:
                    a0:f6:5f:4c:c4:4b:40:f5:da:f3:b4:cf:80:78:9d:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:F2:62:DC:CF:B0:96:70:FD:AC:8A:D5:0D:6B:AF:88:BF:95:A1
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37332e302f32342d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:92:f3:64:84:ec:5d:c9:2a:18:b6:65:c3:bb:29:7a:bc:0a:
         77:42:7a:03:8e:fa:ab:ce:18:ef:3d:8d:14:fc:e9:9a:9e:9c:
         25:c5:5c:16:4e:0a:cf:31:d4:44:91:4e:c8:b4:49:7b:5a:d4:
         19:af:2b:bc:4e:43:fb:c4:c3:73:02:d9:81:63:91:ea:6c:38:
         0d:47:33:7e:d9:84:27:ea:7b:48:65:67:a0:52:d6:02:1d:f7:
         5d:2d:24:fc:bc:c9:5d:d6:13:f3:cf:4b:72:19:0d:a4:15:67:
         d2:e1:b5:08:25:f8:67:c0:f7:fb:66:a7:77:a5:9c:cf:53:be:
         98:1f:7b:36:e1:52:aa:6e:5b:5a:e9:ad:d2:25:e0:71:97:f8:
         b7:ed:af:95:24:09:a2:fd:cd:8d:7f:72:bd:0a:f8:d6:c7:69:
         27:99:73:21:b5:4e:a9:3e:20:3b:12:50:83:94:8f:c0:c6:2c:
         f1:a9:e2:a7:18:cd:08:d2:2a:13:cc:6c:56:59:25:58:1a:cd:
         1e:ca:98:05:3a:a9:1b:90:ac:be:16:1d:86:cd:f0:4a:bb:7c:
         49:35:46:ac:40:83:c2:47:b0:a9:53:fc:a2:8e:f5:f3:81:39:
         46:de:51:6f:1f:86:79:98:a8:00:97:ac:e8:5a:b2:82:a0:66:
         c0:8b:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:31:53 2025 by rpki-client