Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39362e302f32332d3233203d3e20323732393031.roa
File:                     3137372e37312e39362e302f32332d3233203d3e20323732393031.roa (raw, json)
Hash identifier:          Kr/k5BQoR5kKM2ewwBZ6ned5v6tooLzofcd+6Z5SIQg=
Subject key identifier:   96:9D:42:A4:96:6F:26:0B:A5:47:39:18:5D:7E:98:E1:27:9D:7C:1C
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       6F7E699ACC4D6C37C857E5B606CDB01336C780DD
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39362e302f32332d3233203d3e20323732393031.roa
Signing time:             Fri 17 Oct 2025 13:50:32 +0000
ROA not before:           Fri 17 Oct 2025 13:45:32 +0000
ROA not after:            Fri 16 Oct 2026 13:50:32 +0000
asID:                     272901
IP address blocks:        177.71.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7e:69:9a:cc:4d:6c:37:c8:57:e5:b6:06:cd:b0:13:36:c7:80:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Oct 17 13:45:32 2025 GMT
            Not After : Oct 16 13:50:32 2026 GMT
        Subject: CN=969D42A4966F260BA54739185D7E98E1279D7C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:8b:bd:92:a9:08:5c:a9:01:2a:f9:51:36:
                    9f:8b:1e:38:49:1f:59:cc:b5:08:f1:2f:ea:ab:e9:
                    8c:55:ed:97:2b:ba:12:12:e2:fa:09:86:0a:26:00:
                    4e:bf:0c:e3:bc:7e:50:bd:79:88:df:7e:3e:33:96:
                    02:c4:52:5d:44:2d:c5:05:7d:fd:5f:bb:5b:11:bb:
                    84:48:67:42:dd:41:c3:9e:e0:00:f3:a3:72:00:18:
                    51:e8:46:74:97:fe:32:25:db:46:c9:bc:d3:2d:ee:
                    57:35:f5:63:0e:38:9d:f4:de:8f:89:37:91:d6:e2:
                    40:15:6e:d8:67:a0:ef:2f:d1:c1:de:47:be:97:83:
                    af:51:68:ba:a3:e3:b5:66:29:2e:84:14:02:64:8b:
                    fb:41:fe:42:b7:d4:34:fc:21:fb:7c:c7:a9:1d:e3:
                    9a:c8:08:a4:47:60:0c:e8:2f:5e:11:01:b1:cf:0f:
                    12:0e:f5:be:c3:0f:e7:a9:9f:ca:e1:6d:a2:d9:6f:
                    29:51:93:24:59:9f:b4:e2:31:48:60:85:fc:9a:cf:
                    81:60:f6:bf:ac:95:90:b0:8e:c4:d7:82:6c:59:0a:
                    34:db:0b:f1:af:ef:aa:55:d2:44:3e:bc:0d:f9:2e:
                    f0:d1:a3:d1:41:a6:88:0c:e7:35:74:8e:d5:e3:2b:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9D:42:A4:96:6F:26:0B:A5:47:39:18:5D:7E:98:E1:27:9D:7C:1C
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39362e302f32332d3233203d3e20323732393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:71:c6:ec:51:81:c1:02:18:81:7b:30:6a:30:1e:b7:03:5d:
         1e:5b:58:29:a6:5f:41:80:eb:4c:6f:a1:57:ca:3b:9e:45:c2:
         21:84:49:ee:6e:f9:c2:35:40:ca:34:04:d1:5f:f6:ab:3b:b5:
         dc:e5:1f:03:7d:c1:1a:ff:4f:a5:69:d8:1a:d4:be:e8:01:f5:
         f5:10:88:04:1c:63:46:58:1a:1c:ef:eb:f9:54:b7:b3:49:69:
         a3:76:33:12:83:c0:52:b7:1a:71:c9:37:8d:62:06:56:39:f1:
         ff:25:9c:45:c0:c4:c4:70:14:42:c0:56:63:e0:02:af:3e:32:
         81:53:d5:97:41:92:73:0a:d8:09:be:e3:58:2a:0b:ba:52:cd:
         fc:8a:36:53:0b:2e:fd:64:0d:87:99:44:12:3c:59:55:ba:91:
         1e:e0:60:b5:b3:f6:81:9f:6e:2e:a3:5e:e5:91:75:3d:fe:76:
         34:c6:c5:56:74:b6:20:67:a5:55:b4:f3:fc:b6:3e:22:f1:4d:
         14:14:09:95:95:fb:8e:c2:67:c1:08:d4:80:74:34:ed:ef:44:
         2d:05:53:63:e8:8c:b5:28:dd:d2:12:2d:c8:f3:97:76:1e:b8:
         17:49:d0:11:32:63:fe:fa:8f:c1:40:f1:39:9a:1c:26:52:dc:
         96:69:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:37:32 2025 by rpki-client