Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231322e302f32322d3232203d3e203237393736.roa
File:                     3137392e36332e3231322e302f32322d3232203d3e203237393736.roa (raw, json)
Hash identifier:          pqmSvKRTNHxTWOLorb6ZZl79Qr5wMGm1bAyMcPmrbb4=
Subject key identifier:   1B:72:A6:97:81:46:46:7C:A0:81:B2:8B:4C:10:94:C0:18:32:E0:2F
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       52BE206F2C0AD545DCAA9745077C7869389F329C
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231322e302f32322d3232203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:08 +0000
ROA not before:           Fri 31 Oct 2025 18:10:08 +0000
ROA not after:            Fri 30 Oct 2026 18:15:08 +0000
asID:                     27976
IP address blocks:        179.63.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:be:20:6f:2c:0a:d5:45:dc:aa:97:45:07:7c:78:69:38:9f:32:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:08 2025 GMT
            Not After : Oct 30 18:15:08 2026 GMT
        Subject: CN=1B72A6978146467CA081B28B4C1094C01832E02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:0e:50:87:9f:03:26:7e:da:49:72:b5:df:
                    f8:2d:de:f7:da:5d:ca:e8:93:5c:b9:a1:16:96:68:
                    18:2c:87:ea:e4:ed:38:ff:68:1c:7c:f9:ff:15:5e:
                    83:c0:59:31:a1:5c:96:72:cf:55:86:e7:0f:99:19:
                    15:1f:e5:b7:d0:d3:e1:7d:d6:20:a8:7b:fc:a9:24:
                    e2:96:0d:fc:cf:50:12:cc:f2:54:84:f1:a8:26:58:
                    fa:53:93:d0:04:e5:1b:7f:1c:e8:c4:5b:9f:1f:15:
                    50:31:e1:df:6e:7d:c4:90:aa:af:04:b0:d9:2a:61:
                    c8:3c:05:7f:f3:51:c5:a0:57:dc:6c:53:6c:48:c6:
                    ee:f7:b8:04:53:ae:2e:ff:12:e4:7a:9d:aa:e9:50:
                    04:5f:06:f5:ec:bf:ab:52:71:47:ef:17:3f:d4:b3:
                    3c:75:87:7c:00:2d:a8:62:39:35:34:f6:f1:40:f4:
                    42:4d:6b:cf:aa:d8:9f:cd:af:c7:0f:fc:8d:6e:27:
                    38:a8:aa:9d:3c:89:89:67:8e:2c:d3:5c:7d:1e:28:
                    33:f5:59:55:1f:9b:8f:3a:8e:0c:00:8a:8a:1d:66:
                    fc:1c:fc:aa:84:a0:41:d9:72:ee:a1:6e:9d:6e:e8:
                    5d:75:59:64:bf:71:f8:05:d1:51:69:d2:5e:1d:19:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:A6:97:81:46:46:7C:A0:81:B2:8B:4C:10:94:C0:18:32:E0:2F
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231322e302f32322d3232203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:6f:3d:f5:8f:0b:9f:92:6c:39:7d:ea:c5:93:c5:e7:c9:
         5d:a5:5c:8b:ea:be:51:ef:de:ff:a7:ae:b2:45:d6:e4:19:07:
         19:e8:76:a6:f5:ad:77:4f:db:b2:21:16:e3:6f:26:3c:ed:2e:
         40:dd:2d:e5:a0:7e:c5:31:9a:b8:06:1b:f4:a5:4e:52:f8:9f:
         a8:8a:d9:37:c6:c1:1b:f9:58:e0:42:e7:36:ae:c3:6d:ba:11:
         af:bc:59:26:18:cc:24:ea:05:e2:b6:a9:85:43:f9:48:4e:3f:
         48:d0:90:04:3b:af:cd:15:f4:ae:19:01:b0:e2:0c:99:44:12:
         0d:58:d0:53:ad:57:4f:22:98:d3:63:0a:77:37:2c:42:61:bb:
         87:91:0e:56:77:fb:ca:9d:a0:4a:10:7a:3c:df:a3:ea:fe:07:
         d4:01:a4:62:6d:ea:6c:39:2a:dc:66:8d:9a:44:7d:d9:98:39:
         94:26:94:d5:cc:c4:01:06:97:a2:1f:7e:a6:40:96:5f:59:d8:
         ce:28:0a:01:7b:7e:4a:11:08:77:43:4f:b2:e6:9b:6c:0d:f7:
         2e:94:df:97:c1:8a:27:48:09:85:af:49:d3:bd:0a:57:18:84:
         7a:64:be:93:57:73:ab:00:60:b0:96:35:8b:cb:17:8d:ab:b0:
         a5:ae:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:40:24 2025 by rpki-client