Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa
File:                     3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          gBTVl62rSEvGgUfPY042k+6xAOFPcPurs87Wi8TrYjI=
Subject key identifier:   C7:94:B1:3D:35:7E:F6:9C:96:D2:0C:76:6A:F1:59:71:41:69:3B:37
Certificate issuer:       /CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
Certificate serial:       7FEF689EB7FCE3BCCAD950440B921D24466FF079
Authority key identifier: AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa
Signing time:             Thu 25 Sep 2025 19:00:00 +0000
ROA not before:           Thu 25 Sep 2025 18:55:00 +0000
ROA not after:            Thu 24 Sep 2026 19:00:00 +0000
asID:                     22011
IP address blocks:        170.169.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ef:68:9e:b7:fc:e3:bc:ca:d9:50:44:0b:92:1d:24:46:6f:f0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
        Validity
            Not Before: Sep 25 18:55:00 2025 GMT
            Not After : Sep 24 19:00:00 2026 GMT
        Subject: CN=C794B13D357EF69C96D20C766AF1597141693B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:86:22:67:a1:3b:81:1f:01:3e:56:25:1d:
                    21:f8:68:f1:9c:39:a6:ed:f6:4d:d5:b0:17:6c:85:
                    07:08:04:d5:a7:6a:09:8c:bd:e2:4d:34:14:cd:4b:
                    b7:85:f0:72:4c:7b:ea:ce:50:15:09:b3:90:7a:de:
                    4a:bb:69:28:33:0e:e1:6e:65:df:6d:98:cd:6f:d8:
                    94:3f:81:d3:33:be:11:df:17:e1:00:5c:ca:38:76:
                    f2:41:e2:4e:bc:eb:8c:95:6f:6d:dc:d1:f7:20:dc:
                    10:46:7c:d4:c2:ff:45:76:42:c3:eb:6a:92:84:9e:
                    e4:4d:41:41:e4:a5:7b:67:3c:12:9e:ef:07:ab:4c:
                    03:be:64:97:71:d2:d0:73:1f:3d:10:24:9b:c6:0f:
                    97:98:c5:f3:c7:6c:19:41:3d:15:62:e9:fa:5f:7e:
                    2a:64:1a:d2:1d:54:c9:59:6d:17:52:68:6d:be:a6:
                    7d:bd:e2:59:4c:ec:21:6b:92:f3:9c:1f:e9:a4:94:
                    90:f5:db:ba:5b:a2:39:27:06:3d:00:30:47:bf:ed:
                    92:59:f5:85:b4:85:f1:2c:ea:8b:18:83:1a:84:98:
                    5e:1b:ec:d0:64:20:49:09:2d:80:78:11:bc:08:cd:
                    54:80:14:08:69:95:c8:27:5b:84:58:57:af:d6:68:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:B1:3D:35:7E:F6:9C:96:D2:0C:76:6A:F1:59:71:41:69:3B:37
            X509v3 Authority Key Identifier:
                keyid:AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.169.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:bf:37:e7:18:2b:16:dd:47:15:08:f0:09:ac:3e:0a:86:6f:
         15:84:56:e4:78:fc:17:60:3c:3e:fd:6f:f9:72:02:5b:55:b9:
         7d:a7:9a:25:ea:5e:5d:44:98:e1:6f:23:df:c0:41:8c:f9:dc:
         db:f9:76:dc:77:e3:bf:7e:ad:06:03:6b:25:ac:be:c9:f5:92:
         1c:0d:e8:67:8f:26:cc:95:4d:52:2b:55:ba:38:b3:05:80:08:
         9e:6b:68:bc:95:4a:fd:cd:ea:2e:53:1f:28:b3:d6:d9:b0:95:
         4c:3c:ff:f7:08:6a:2d:cc:d4:56:56:17:a4:1e:b3:f7:9e:d9:
         89:9e:f6:fe:c1:e8:a3:59:76:7b:e1:6c:77:05:40:7b:90:40:
         bb:ea:89:3f:95:1c:68:49:64:13:aa:0b:9b:87:b6:53:e6:ef:
         24:80:63:38:74:46:ce:6b:23:56:48:27:0d:66:9d:a9:14:1c:
         0b:b8:28:60:c6:01:76:29:5e:90:10:59:8a:75:35:52:49:cf:
         34:44:4e:e4:c2:f9:09:7c:58:d6:ba:62:5c:27:8c:fb:ad:75:
         23:34:91:a4:d6:e9:ff:65:a2:61:7f:6e:e6:78:cb:cd:60:c6:
         0e:06:87:ff:47:e9:de:95:ff:e7:2e:19:72:8e:8d:98:55:70:
         6b:ee:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:17 2025 by rpki-client