Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3231342e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          6fIAIkPd4jZ86+IUvzNF9YwSYKEXo6WRbI1rzjbLfac=
Subject key identifier:   78:91:83:B4:1F:B3:78:B7:51:AC:4B:7C:CE:3C:A9:62:B3:75:E5:91
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       6DF4169070FC72CA6940A9908FD76E3043960C0C
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:02 +0000
ROA not before:           Fri 31 Oct 2025 18:10:02 +0000
ROA not after:            Fri 30 Oct 2026 18:15:02 +0000
asID:                     27976
IP address blocks:        179.63.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f4:16:90:70:fc:72:ca:69:40:a9:90:8f:d7:6e:30:43:96:0c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:02 2025 GMT
            Not After : Oct 30 18:15:02 2026 GMT
        Subject: CN=789183B41FB378B751AC4B7CCE3CA962B375E591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:d8:4b:ea:cf:1a:e3:e7:13:a1:a9:39:f9:
                    a4:c9:0d:5a:45:3a:e7:72:fa:4d:83:8a:0f:8a:93:
                    3a:db:3a:ef:02:df:70:1c:93:fb:01:c0:75:02:b6:
                    4f:7e:35:ac:86:29:04:6b:38:57:d7:d2:85:95:b8:
                    0c:0a:1a:ae:e5:01:1b:e1:e3:00:ab:fb:e8:c2:5f:
                    03:38:2a:0a:06:b2:dc:fc:62:86:c3:0d:af:77:d8:
                    67:c4:d7:42:d6:a9:b5:97:f1:db:07:07:37:c7:f8:
                    5f:50:4e:ac:62:c1:bc:7f:0d:4b:fd:1b:52:70:13:
                    99:57:00:65:f1:b3:55:d1:f5:bb:39:3f:37:90:84:
                    50:68:46:c6:19:4d:fe:40:91:ef:8d:a8:f2:1a:08:
                    e7:3f:4f:44:85:14:b4:33:2a:3d:5a:57:8b:32:fd:
                    9a:50:1c:c9:ea:22:08:5b:f8:c4:e8:00:a2:1f:ef:
                    4e:ea:aa:60:98:bc:ea:b7:e3:15:a1:77:ff:cd:a4:
                    c9:b3:50:4a:2f:0b:87:3c:ec:33:b8:06:97:1b:33:
                    c6:d2:99:17:87:e7:31:5c:c7:c4:63:88:81:ad:02:
                    f7:82:bb:4e:eb:c3:2a:8e:50:f4:a9:bf:f5:31:29:
                    74:ea:73:5a:a1:4f:76:a5:88:4c:69:00:73:a5:50:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:91:83:B4:1F:B3:78:B7:51:AC:4B:7C:CE:3C:A9:62:B3:75:E5:91
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231342e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:82:05:ea:ff:a5:f2:c9:76:03:b8:a4:f8:ab:ec:3d:af:
         08:8d:b4:ad:ff:df:7c:6f:f8:84:81:38:4b:f8:9b:8d:d2:9e:
         13:77:94:00:9f:f9:73:9e:0b:82:69:95:17:56:f7:1a:20:84:
         c1:de:0b:65:07:cc:86:ae:2a:b4:40:a0:5f:ec:60:ee:02:52:
         e0:fa:7f:94:c9:f3:97:96:ff:34:89:c8:cb:4f:8f:d2:91:41:
         4b:46:58:ba:63:8f:e7:2e:1d:23:7b:ab:f8:e0:6a:a2:95:db:
         bb:5d:f1:54:7c:96:f9:01:2a:33:ae:d6:b6:d8:68:a9:d7:98:
         d7:79:dd:bd:2e:01:d2:f4:2f:c4:49:da:aa:2c:56:7d:f8:28:
         71:ec:5b:6d:23:8c:e7:9f:b0:52:82:51:ce:3b:0f:f8:78:e7:
         20:79:e2:06:96:3f:c0:10:ec:ad:21:d6:1b:b4:8b:41:6b:5f:
         2d:d6:1f:b1:1e:6c:d0:14:27:1e:bb:81:fd:df:c4:fb:da:22:
         2f:4f:b1:51:a5:56:ec:a4:5b:87:63:1f:e9:01:74:06:63:ee:
         6a:ef:e8:e3:7a:6f:11:6b:d0:c2:d0:8d:a7:3c:eb:95:3e:f2:
         08:9e:aa:6d:39:f0:ef:80:f6:e2:9c:93:a2:70:65:b1:9e:09:
         a0:95:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:44:06 2025 by rpki-client