Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32332d3233203d3e203237393736.roa
File:                     3137392e36332e3231342e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          56zwcOHXGf0xlORxWMs5FomV6AZmXeEiIcpk7uWEw34=
Subject key identifier:   67:C0:26:3F:07:A7:7D:B9:74:36:A2:02:CA:DE:AE:88:4E:E1:C4:08
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       036930276F5753973E7F99BE173849F1AE3FB5A2
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:06 +0000
ROA not before:           Fri 31 Oct 2025 18:10:06 +0000
ROA not after:            Fri 30 Oct 2026 18:15:06 +0000
asID:                     27976
IP address blocks:        179.63.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:69:30:27:6f:57:53:97:3e:7f:99:be:17:38:49:f1:ae:3f:b5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:06 2025 GMT
            Not After : Oct 30 18:15:06 2026 GMT
        Subject: CN=67C0263F07A77DB97436A202CADEAE884EE1C408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:d6:1b:5e:58:99:7f:e0:e6:7e:3b:a4:62:
                    f7:b0:e0:98:fa:7d:b1:1f:bf:e5:8f:11:58:62:f4:
                    6a:81:ee:f7:d2:3a:39:67:b1:dd:6e:c4:e7:98:7e:
                    e7:17:13:5e:7f:ea:38:33:62:5d:af:88:1b:98:8c:
                    c9:fb:ae:04:77:f5:cb:fb:da:85:3a:f5:6d:94:dc:
                    f5:9b:aa:e9:91:f1:3d:1c:21:95:73:19:98:f8:10:
                    b7:0f:5f:03:f1:60:9e:8d:21:0e:aa:da:ee:9d:fa:
                    5d:5c:d9:83:3f:f5:9a:4a:e8:03:cd:48:19:48:50:
                    35:d7:aa:dc:68:74:b9:31:e0:62:9e:8b:f2:99:66:
                    7f:ac:79:dc:10:69:51:25:de:cd:41:fb:45:2c:7a:
                    68:46:b8:cd:3e:53:b2:6b:fc:c3:b6:db:d2:14:ff:
                    3e:61:29:6f:dc:b2:ce:46:af:76:aa:94:f4:fa:fd:
                    fd:72:9b:1c:06:b1:bb:81:56:b3:67:cb:52:f2:81:
                    91:7a:1c:d0:23:4e:4c:57:76:ab:1a:5a:90:c4:2a:
                    86:74:99:9c:8a:b2:05:b1:a7:c4:40:69:9e:ab:b9:
                    7c:c8:16:66:56:e3:20:9a:bb:1f:ee:55:3e:4d:c0:
                    00:ad:26:cd:4c:64:03:43:98:f6:1d:d6:ba:2e:9d:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C0:26:3F:07:A7:7D:B9:74:36:A2:02:CA:DE:AE:88:4E:E1:C4:08
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:1f:9b:11:54:ae:40:df:87:0b:d8:24:80:31:56:ff:4e:1d:
         5d:17:28:33:cf:9a:72:ea:68:3c:63:33:dc:88:f3:c8:e7:44:
         df:33:3c:0c:66:31:70:c9:27:ad:40:9f:05:65:d5:99:41:33:
         8a:32:b5:da:67:5d:19:76:35:fc:fb:21:11:17:35:9e:88:b2:
         7f:de:20:74:19:de:9a:52:47:25:25:37:ae:88:a8:1d:45:f0:
         29:5b:de:39:b3:07:36:b0:9c:a9:03:8e:b6:51:cb:18:2a:e8:
         44:b3:c9:43:02:99:19:84:b5:11:76:d6:46:c8:ca:05:1a:a7:
         19:f7:e0:87:c9:9a:76:6c:39:54:f0:e1:c8:c2:c0:ee:58:1e:
         4c:e8:03:28:7a:66:60:68:a5:4a:2d:46:78:5c:b8:e4:66:54:
         5f:44:a0:20:8a:bc:5a:91:26:f5:c4:8f:37:88:2d:cc:35:cd:
         7d:44:9c:1e:5e:59:0b:ae:70:dd:3e:cc:cf:b9:6f:33:0d:2b:
         6a:be:ca:f3:cb:dd:23:ac:3b:42:c9:a6:a1:36:c1:59:c0:ab:
         04:9b:6c:f1:99:0e:f1:77:91:a2:23:ec:c5:8b:73:d9:64:04:
         f0:86:12:76:ca:80:24:2a:5d:34:ef:42:ed:ad:a2:6f:50:9d:
         8e:16:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:43:16 2025 by rpki-client