Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32332d3233203d3e203237393736.roa
File:                     3137392e36332e3230382e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          LGMrzm5F0d9QGY/Nc5GTTYFN9qbESC8zMhu6SFAGew4=
Subject key identifier:   2C:A6:B0:FB:A5:CD:05:68:F3:4A:70:5A:CF:CF:7A:F8:5F:6F:36:87
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       12A92562F6A7CE8FD8449291AE1BB3C753B152A8
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:00 +0000
ROA not before:           Fri 31 Oct 2025 18:10:00 +0000
ROA not after:            Fri 30 Oct 2026 18:15:00 +0000
asID:                     27976
IP address blocks:        179.63.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a9:25:62:f6:a7:ce:8f:d8:44:92:91:ae:1b:b3:c7:53:b1:52:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:00 2025 GMT
            Not After : Oct 30 18:15:00 2026 GMT
        Subject: CN=2CA6B0FBA5CD0568F34A705ACFCF7AF85F6F3687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:c9:94:46:ad:16:0f:02:a9:41:78:6b:48:
                    72:4e:d1:2a:2b:6a:73:8d:c5:2d:b3:db:7d:4b:14:
                    8f:05:47:09:8d:ac:bf:b5:ad:42:84:9c:cf:d6:27:
                    88:0d:ee:11:25:19:3d:a5:c0:ec:6f:ff:7d:31:1c:
                    45:53:81:9e:94:88:e2:e0:5a:b6:4d:0f:a7:64:a2:
                    66:60:e1:e9:53:02:1e:45:66:11:e7:f5:17:6d:5c:
                    b2:69:98:3a:82:b0:a2:2f:b5:22:27:3d:28:a5:d4:
                    24:a3:4d:6a:fd:98:f2:16:7b:5c:73:9a:3a:95:91:
                    4c:d7:36:64:3c:09:61:e1:29:53:a2:43:ef:ea:24:
                    db:09:95:1b:28:0e:1b:a0:0d:b0:b0:45:48:ea:3a:
                    2b:db:ad:0d:20:33:e2:95:94:0a:2e:fd:9f:d8:cf:
                    9c:7d:df:2a:a9:36:ff:32:47:7f:48:83:74:b9:39:
                    bd:e8:25:0a:c8:7e:be:81:8c:96:4c:be:e9:31:8d:
                    e0:f2:64:58:e2:42:06:da:8e:fd:a6:5f:85:12:6f:
                    eb:bb:c3:52:80:86:2d:9a:b8:52:fc:b5:51:22:19:
                    85:26:ed:95:4d:10:db:9b:f5:42:3f:69:a8:dd:23:
                    e8:fa:fa:f9:03:10:3b:b4:e2:3d:2b:38:af:4c:0f:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A6:B0:FB:A5:CD:05:68:F3:4A:70:5A:CF:CF:7A:F8:5F:6F:36:87
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:39:17:fa:1d:c2:3c:f1:74:6c:a4:00:db:8e:49:08:18:2e:
         83:44:df:00:eb:43:1f:b1:b9:13:92:eb:57:a9:1b:4a:66:a1:
         0f:39:1e:d9:00:c9:f3:67:5e:8d:08:0b:37:dd:82:cf:fc:54:
         ca:b2:a8:2b:3a:c4:2b:5e:0d:98:b5:0f:9a:06:7a:31:67:49:
         d7:bc:7e:aa:72:10:c3:63:f7:df:b5:ed:95:95:68:e8:ea:70:
         f5:fb:43:6a:b5:dc:cc:79:50:86:8c:d9:9e:d2:b2:5f:89:00:
         0e:c3:20:bc:f9:e3:34:ba:ff:b7:8d:80:36:b0:67:9a:d5:17:
         39:c3:2a:81:89:51:d6:6b:89:4f:a8:fe:bc:a2:33:7b:b2:28:
         91:27:50:e4:4f:2a:63:1b:e7:45:37:59:c0:da:9e:86:5a:82:
         e3:a7:fe:9f:7c:84:f6:79:df:72:d4:a6:8f:da:33:16:8c:2d:
         97:ab:34:4a:44:6c:86:1a:fa:34:b9:8f:78:45:13:f6:1e:9f:
         5d:c9:82:bb:61:31:54:06:71:92:af:98:a6:a2:ff:3b:27:3a:
         9c:6f:83:02:bd:d2:d8:7e:e0:83:42:59:83:e2:ec:82:22:01:
         62:e7:ad:1d:8d:92:a7:68:98:f9:bd:72:8a:78:dc:23:9f:e1:
         7f:48:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:42:23 2025 by rpki-client