Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32332d3233203d3e20323730303439.roa
File:                     36362e3233312e37342e302f32332d3233203d3e20323730303439.roa (raw, json)
Hash identifier:          lkVS0vNJS0e99YEYYlIyfvSBgC5qLjvtdyaQTgDQk5o=
Subject key identifier:   67:F9:D6:AF:E0:48:86:68:AA:EC:09:1B:98:B3:76:DE:4F:6A:24:C3
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       1EA27316EF8E514FC304CDF09997628737ED4BB3
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32332d3233203d3e20323730303439.roa
Signing time:             Wed 24 Sep 2025 19:50:00 +0000
ROA not before:           Wed 24 Sep 2025 19:45:00 +0000
ROA not after:            Wed 23 Sep 2026 19:50:00 +0000
asID:                     270049
IP address blocks:        66.231.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a2:73:16:ef:8e:51:4f:c3:04:cd:f0:99:97:62:87:37:ed:4b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Sep 24 19:45:00 2025 GMT
            Not After : Sep 23 19:50:00 2026 GMT
        Subject: CN=67F9D6AFE0488668AAEC091B98B376DE4F6A24C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:12:21:23:26:a7:50:13:84:f2:fa:32:79:
                    ef:a2:04:be:4a:69:99:21:10:53:92:3e:21:d2:05:
                    4e:64:8b:82:c1:09:aa:d9:01:eb:5e:f5:fd:36:b3:
                    2f:92:6e:3d:b3:0a:14:cc:e2:76:62:46:c4:40:95:
                    9b:d9:35:35:0c:cc:2c:5a:61:5d:c2:c9:33:fb:fc:
                    df:91:b7:5a:c2:fb:11:e9:81:0b:88:ac:de:b2:37:
                    d9:40:20:3b:35:c3:d0:57:45:c9:45:27:2c:21:2a:
                    c9:da:fd:a0:ea:7f:2d:9c:9d:40:79:b6:54:6a:e7:
                    35:58:2f:bf:06:f4:b0:46:cb:62:08:35:1d:8b:eb:
                    08:06:91:40:61:94:f0:53:df:d7:97:94:a6:7c:65:
                    9a:21:08:eb:a3:3f:e0:78:ae:25:6d:2d:62:0f:da:
                    70:29:94:c2:07:4f:17:0f:88:5c:23:6f:c6:ff:ea:
                    84:da:ed:ff:ef:2b:9f:a1:41:a3:b4:6e:c8:80:f4:
                    91:b6:37:35:fe:94:c0:6f:f1:62:11:0f:9e:76:61:
                    d3:17:a4:8a:28:0f:13:28:c9:b7:d3:b9:1e:59:e7:
                    e3:88:99:1f:0e:a1:fe:fb:b0:9f:b2:3a:f3:4c:61:
                    87:e0:57:55:7f:40:c5:16:1b:74:f2:57:f9:1a:07:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:D6:AF:E0:48:86:68:AA:EC:09:1B:98:B3:76:DE:4F:6A:24:C3
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32332d3233203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:d6:52:07:ce:93:f9:a8:b1:de:91:a8:9a:7c:37:1b:e3:0f:
         15:09:91:7e:5b:ec:c3:af:67:37:36:d4:65:bc:31:48:8e:00:
         3e:1b:57:7e:d0:58:22:c2:f6:4f:aa:e1:ab:de:bd:dc:c6:5f:
         64:ec:f7:11:44:3f:b2:09:05:c6:82:22:d4:a0:10:58:38:21:
         72:86:56:fe:ca:96:e2:c5:6b:01:96:be:ba:d2:29:ae:0d:c9:
         db:7a:7b:c4:77:32:ca:ed:40:3b:2b:ec:a3:ad:13:c8:1f:7d:
         e2:1a:33:52:90:40:8c:b5:62:0e:82:62:c4:9b:5e:82:b6:2f:
         ef:8c:ec:65:01:7d:68:43:40:9c:56:de:81:d8:1a:f4:20:9a:
         6e:71:6c:5f:62:ff:07:2c:59:b5:d5:cc:d8:2d:05:e3:40:22:
         f5:71:ae:7c:0c:96:67:6c:e7:6a:ad:2c:c2:1d:71:46:7b:0c:
         05:f7:3b:0f:c2:4a:d1:94:bb:e1:5e:18:2c:c7:c6:f6:8a:8b:
         7e:00:2d:e9:55:4e:41:73:d7:f3:82:5b:d1:23:11:9d:cc:ae:
         a3:44:d8:b9:dc:1e:71:e1:2e:e2:a3:46:57:c0:20:c0:9d:a7:
         fd:76:cb:32:80:0a:24:44:37:79:a7:6b:e0:b3:0f:d4:66:70:
         f5:f1:d3:46
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHqJzFu+OUU/DBM3wmZdihzftS7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNTA5MjQxOTQ1MDBaFw0yNjA5MjMxOTUwMDBaMDMxMTAvBgNV
BAMTKDY3RjlENkFGRTA0ODg2NjhBQUVDMDkxQjk4QjM3NkRFNEY2QTI0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEhIhIyanUBOE8voyee+iBL5K
aZkhEFOSPiHSBU5ki4LBCarZAete9f02sy+Sbj2zChTM4nZiRsRAlZvZNTUMzCxa
YV3CyTP7/N+Rt1rC+xHpgQuIrN6yN9lAIDs1w9BXRclFJywhKsna/aDqfy2cnUB5
tlRq5zVYL78G9LBGy2IINR2L6wgGkUBhlPBT39eXlKZ8ZZohCOujP+B4riVtLWIP
2nAplMIHTxcPiFwjb8b/6oTa7f/vK5+hQaO0bsiA9JG2NzX+lMBv8WIRD552YdMX
pIooDxMoybfTuR5Z5+OImR8Oof77sJ+yOvNMYYfgV1V/QMUWG3TyV/kaBxbJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZ/nWr+BIhmiq7AkbmLN23k9qJMMwHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzczNDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMDMwMzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAULnSjAN
BgkqhkiG9w0BAQsFAAOCAQEAudZSB86T+aix3pGomnw3G+MPFQmRflvsw69nNzbU
ZbwxSI4APhtXftBYIsL2T6rhq9693MZfZOz3EUQ/sgkFxoIi1KAQWDghcoZW/sqW
4sVrAZa+utIprg3J23p7xHcyyu1AOyvso60TyB994hozUpBAjLViDoJixJtegrYv
74zsZQF9aENAnFbegdga9CCabnFsX2L/ByxZtdXM2C0F40Ai9XGufAyWZ2znaq0s
wh1xRnsMBfc7D8JK0ZS74V4YLMfG9oqLfgAt6VVOQXPX84Jb0SMRncyuo0TYudwe
ceEu4qNGV8AgwJ2n/XbLMoAKJEQ3eadr4LMP1GZw9fHTRg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:06 2025 by rpki-client