Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32332d3233203d3e20323732393031.roa
File:                     3137372e37312e39382e302f32332d3233203d3e20323732393031.roa (raw, json)
Hash identifier:          7BCH4fDO5pr6kU3QWX4nrVDptqF4y4LiIlj0gnKyQ8k=
Subject key identifier:   42:51:BD:59:4A:88:A2:3B:A2:A5:04:4B:C1:09:65:47:B2:57:62:1B
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       7228501A8C2042AE48ABBBA979A72E575A5F50A6
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32332d3233203d3e20323732393031.roa
Signing time:             Fri 17 Oct 2025 13:50:33 +0000
ROA not before:           Fri 17 Oct 2025 13:45:33 +0000
ROA not after:            Fri 16 Oct 2026 13:50:33 +0000
asID:                     272901
IP address blocks:        177.71.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:28:50:1a:8c:20:42:ae:48:ab:bb:a9:79:a7:2e:57:5a:5f:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Oct 17 13:45:33 2025 GMT
            Not After : Oct 16 13:50:33 2026 GMT
        Subject: CN=4251BD594A88A23BA2A5044BC1096547B257621B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:94:40:5c:7c:48:ab:ef:10:97:6d:d0:7b:
                    95:16:a3:18:e2:74:7a:86:d4:83:62:95:3a:16:ca:
                    8f:99:51:ae:16:93:3a:a1:f6:52:2a:7c:ef:1e:b3:
                    81:d0:16:87:bf:a3:34:e2:0e:78:29:0b:b8:dd:b1:
                    32:04:f1:81:d3:25:80:7d:b8:9f:9b:5c:24:84:25:
                    a0:cd:2f:17:e0:49:aa:1f:ff:01:1b:8e:63:70:63:
                    0b:08:ec:81:2a:5a:7a:1f:3c:d7:61:28:88:e4:88:
                    a8:7b:f4:5c:52:4c:06:0d:38:07:54:5e:46:a3:b5:
                    46:77:d3:cc:55:46:c7:a0:2c:25:28:60:e4:6a:fe:
                    0c:0a:6f:f7:04:e4:e5:76:11:29:0c:35:31:34:c4:
                    30:d8:53:f1:b8:c7:09:f1:eb:33:7d:ef:d9:2e:9c:
                    31:aa:7e:af:5a:99:40:cc:a1:52:fd:99:82:ad:73:
                    66:60:83:6c:5e:d6:f4:96:cc:b4:f2:34:ab:28:c6:
                    bb:eb:2a:6c:7d:23:1b:b3:fc:c4:ea:59:e0:46:f3:
                    a1:7d:90:3d:05:64:53:a5:d9:a7:04:f0:d6:f0:88:
                    eb:0d:32:4c:c8:52:18:fe:65:16:b8:e7:fb:1d:eb:
                    40:db:9b:92:19:b6:ad:3b:d9:54:33:37:fe:70:ab:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:BD:59:4A:88:A2:3B:A2:A5:04:4B:C1:09:65:47:B2:57:62:1B
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32332d3233203d3e20323732393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:23:2d:13:10:dd:dd:b8:f8:df:8c:86:98:fd:f9:df:71:12:
         1a:a0:a1:03:8f:d7:03:ae:db:2f:52:d2:ff:a8:ee:25:49:7e:
         7f:f3:4e:9b:37:96:59:15:12:b5:54:5d:8b:01:b0:2f:69:ab:
         cc:fe:27:33:2b:16:73:2f:73:15:75:b4:f4:57:fd:7a:10:b1:
         a7:35:63:0a:a2:9c:c4:2e:7d:57:00:fe:7e:3d:b8:ea:3b:02:
         a6:81:ec:7e:7d:03:47:51:3b:26:b6:41:85:20:63:41:18:fd:
         49:3f:f5:dd:a3:c8:0a:ae:1f:78:51:51:0a:79:e6:af:6b:0a:
         f8:59:17:c6:6a:97:01:b1:58:a1:10:7f:4a:ab:04:f8:d3:b9:
         b2:05:fc:62:fd:25:69:71:1c:7b:54:5c:73:54:c0:6a:40:8f:
         e1:46:4f:da:6e:aa:af:d4:69:46:10:77:50:bd:14:c3:95:af:
         49:57:9a:db:82:50:1a:96:0f:ed:4d:ca:1b:73:72:50:9d:f1:
         de:f0:cb:70:1f:62:ef:c5:1d:c2:77:6e:1c:c7:7c:c5:c4:39:
         0e:32:44:7d:57:58:11:28:4f:db:39:a6:3c:e8:c5:08:85:68:
         eb:78:ea:a7:d7:ca:ba:5c:b0:f3:df:32:c2:fc:1d:c3:5f:85:
         55:c8:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:01 2025 by rpki-client