Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e20313938393439.roa
File:                     3137302e3136392e3130392e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          ZZPMBxkK15nCpq2bHd4t7IrWa5+XE861bff63c0F9j8=
Subject key identifier:   42:81:EE:FF:AA:07:68:A9:F4:E9:5B:E2:3B:82:A0:07:97:72:FF:A0
Certificate issuer:       /CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
Certificate serial:       6B3F667B866AC2768A485923DED4D3A5EA577414
Authority key identifier: AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e20313938393439.roa
Signing time:             Wed 08 Oct 2025 19:45:00 +0000
ROA not before:           Wed 08 Oct 2025 19:40:00 +0000
ROA not after:            Wed 07 Oct 2026 19:45:00 +0000
asID:                     198949
IP address blocks:        170.169.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 12:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3f:66:7b:86:6a:c2:76:8a:48:59:23:de:d4:d3:a5:ea:57:74:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
        Validity
            Not Before: Oct  8 19:40:00 2025 GMT
            Not After : Oct  7 19:45:00 2026 GMT
        Subject: CN=4281EEFFAA0768A9F4E95BE23B82A0079772FFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:46:0e:08:af:0f:dc:ce:e9:d1:f5:32:d7:
                    f4:4d:ac:bf:6b:a8:10:3d:09:3d:4f:a8:35:13:bd:
                    ca:f2:85:2e:de:92:22:95:8e:49:ba:2f:ab:89:18:
                    48:48:75:c8:d7:89:4b:6a:c2:d5:52:06:c0:8f:76:
                    40:7b:0f:b9:a0:dd:61:f9:e9:d8:37:78:29:bb:05:
                    18:24:f6:e4:21:b2:4c:9a:85:1b:d0:b2:0b:5f:22:
                    a1:5e:49:fe:e3:a1:5a:0e:6a:71:22:0a:8e:6b:42:
                    f3:e3:96:b2:4d:16:43:02:8e:24:c0:6f:76:34:43:
                    3a:07:a5:fe:49:d3:56:e6:19:c2:11:bf:9b:5c:b9:
                    83:bc:5e:ac:e7:71:0e:73:e6:c0:14:bc:d2:8f:2c:
                    2c:c5:b2:a0:ae:c3:69:d2:f5:d6:43:e4:f2:5c:fc:
                    7e:52:94:09:2f:9b:4c:c3:68:2c:7c:26:63:07:1c:
                    cc:2f:7f:90:45:f8:1d:95:13:0b:b2:32:a5:ab:89:
                    3f:e0:cd:47:e3:56:5f:07:29:8a:ca:0c:77:b5:f7:
                    68:81:2e:da:f2:a3:f8:54:b5:ad:3e:08:d9:c6:4f:
                    72:fd:48:56:e6:62:af:a5:ad:fd:9d:a2:88:fe:25:
                    ac:a7:c6:cc:28:67:3a:2b:c6:c0:54:29:56:f6:c1:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:81:EE:FF:AA:07:68:A9:F4:E9:5B:E2:3B:82:A0:07:97:72:FF:A0
            X509v3 Authority Key Identifier:
                keyid:AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130392e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.169.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:62:d2:97:cc:e3:a2:b4:f2:23:af:65:5b:46:f8:42:ea:
         60:01:c8:05:11:da:37:fe:a7:70:58:a6:9f:62:2f:21:c3:7c:
         ab:8d:95:e1:5d:c5:66:af:69:c6:85:67:e6:52:00:ef:73:20:
         f5:4a:e9:7d:96:e4:12:56:53:ba:c6:c7:83:34:03:e6:b5:f9:
         57:7a:32:9a:b0:05:ec:84:68:97:24:41:3e:33:55:8f:33:1e:
         0e:ab:7e:7f:71:69:09:2c:8d:df:65:46:37:04:27:67:b9:90:
         0d:6e:20:7e:12:de:35:92:42:b6:d6:83:8f:26:70:02:36:e1:
         4e:57:c4:a4:92:89:14:e7:3c:0d:7b:82:dd:09:fa:81:05:dd:
         fe:d0:e2:a7:60:0a:f1:c3:34:3f:92:40:d9:a5:4e:a2:bc:fa:
         fa:a1:86:b7:31:fa:cf:72:2d:a4:e4:7a:ac:1f:8b:5a:83:ac:
         d8:6a:66:78:8d:e2:5e:8b:e0:c1:63:8a:88:be:e7:95:17:b5:
         81:9b:75:c5:fc:c5:89:7b:26:fd:df:fa:de:5b:90:71:7b:7b:
         5d:a5:15:99:83:07:19:09:a3:7a:27:e5:72:0e:7a:4a:6d:13:
         d7:70:74:31:cd:38:d8:c2:88:47:5a:e7:cd:c5:63:4d:e9:37:
         c2:54:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:34 2025 by rpki-client