Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e20313938393439.roa
File:                     3137302e3136392e3130382e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          XAOckjx8tXiZk1nWAHF56pzURL/mtP8QplAoYzqFm3c=
Subject key identifier:   43:07:17:0A:19:2D:76:F4:38:80:F1:3B:11:41:86:70:E6:18:1E:16
Certificate issuer:       /CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
Certificate serial:       7CAD17074B08848993362689C5829C9B50DE04F1
Authority key identifier: AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e20313938393439.roa
Signing time:             Wed 08 Oct 2025 19:45:00 +0000
ROA not before:           Wed 08 Oct 2025 19:40:00 +0000
ROA not after:            Wed 07 Oct 2026 19:45:00 +0000
asID:                     198949
IP address blocks:        170.169.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 12:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ad:17:07:4b:08:84:89:93:36:26:89:c5:82:9c:9b:50:de:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
        Validity
            Not Before: Oct  8 19:40:00 2025 GMT
            Not After : Oct  7 19:45:00 2026 GMT
        Subject: CN=4307170A192D76F43880F13B11418670E6181E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:3a:13:1f:78:45:5f:db:75:70:89:7d:c0:
                    52:ac:6d:42:2b:cb:42:9f:89:89:d0:b6:9e:6d:74:
                    85:db:2f:b4:2d:fb:78:78:7a:bc:cd:fa:4e:6e:87:
                    b3:01:da:f8:fe:91:9e:16:15:af:07:fd:6f:e7:d8:
                    cc:fc:a5:41:16:3f:74:71:09:4a:27:8f:a2:58:03:
                    dc:d7:31:64:cc:11:df:25:c8:38:23:ee:12:c9:71:
                    a3:c4:11:1c:cc:b2:98:95:9e:b8:2a:57:85:7d:bf:
                    60:b5:3f:a6:8e:91:3d:cb:0c:fa:81:34:b0:43:ec:
                    9b:0a:ff:30:77:d0:36:c5:0e:f8:e9:7e:95:2f:f0:
                    38:5f:64:6b:14:78:fb:d7:d8:18:c2:d0:a1:0c:5a:
                    83:2b:de:3c:cd:85:68:f3:a4:74:53:1e:74:aa:e7:
                    e9:5c:d1:3e:47:d4:04:c0:25:48:5c:5c:f4:a7:fb:
                    4d:0a:9f:48:96:4d:69:bc:4e:1d:82:1d:f0:26:14:
                    ee:93:df:87:7b:6a:48:f1:79:bf:79:c5:81:62:4b:
                    06:c3:86:17:ad:5f:b3:6e:3e:39:05:1a:30:f1:cd:
                    eb:3d:ca:07:1d:82:05:63:fd:01:e6:9a:71:7a:ae:
                    66:82:5a:92:dd:56:71:98:3e:02:82:89:68:a0:b2:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:07:17:0A:19:2D:76:F4:38:80:F1:3B:11:41:86:70:E6:18:1E:16
            X509v3 Authority Key Identifier:
                keyid:AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.169.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:71:e0:25:ee:7a:5f:12:cf:6b:8d:d6:95:51:61:68:60:6d:
         97:04:c1:08:a1:94:56:77:c5:a3:dd:15:5e:2b:60:3d:eb:e4:
         6a:ab:b7:3e:1d:57:41:2d:25:49:b8:5d:53:45:11:ae:54:23:
         04:1d:b8:8d:27:df:56:c4:0c:ab:52:c9:ef:ca:13:a9:31:9b:
         69:68:ac:87:13:e4:c2:60:e8:d9:3e:e0:45:b1:96:da:f6:f9:
         31:c9:bd:a9:83:9f:ac:de:4c:0b:7c:e5:77:e7:41:6a:9a:e0:
         43:98:47:dd:c5:a7:58:54:a1:6d:e6:52:6f:50:39:dd:81:eb:
         06:cc:f0:8e:b6:7b:71:88:fa:24:e4:18:86:e4:21:60:8d:14:
         0d:46:dd:b3:35:30:0f:83:67:49:27:aa:78:7e:7d:c9:ac:42:
         8b:61:09:9c:93:f5:10:9a:17:08:ec:71:73:6b:5e:96:f3:01:
         6b:50:31:2b:9d:ea:a8:68:78:e5:8c:b1:97:c8:89:6f:20:4d:
         e5:c8:c4:88:67:dc:24:92:8d:2a:56:9b:cc:0c:a9:3b:01:ac:
         ec:47:bb:6c:b4:3b:3f:ec:77:3a:28:1e:eb:42:e5:5d:a7:da:
         07:17:28:91:ee:72:29:a6:72:e7:54:ea:2f:dc:7e:49:e7:77:
         df:18:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:33 2025 by rpki-client