Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231352e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3231352e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          bMKK1TPMFvseiIvuGaOs18t4NBSYlz9d/C02zdkmtw8=
Subject key identifier:   EC:A6:63:C6:49:45:CD:67:98:91:68:F3:D2:B1:3E:E2:99:99:72:42
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       53630D4F807712475E6D9AD66DDCBA5E03723BAD
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231352e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:11 +0000
ROA not before:           Fri 31 Oct 2025 18:10:11 +0000
ROA not after:            Fri 30 Oct 2026 18:15:11 +0000
asID:                     27976
IP address blocks:        179.63.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:0d:4f:80:77:12:47:5e:6d:9a:d6:6d:dc:ba:5e:03:72:3b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:11 2025 GMT
            Not After : Oct 30 18:15:11 2026 GMT
        Subject: CN=ECA663C64945CD67989168F3D2B13EE299997242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:bf:0c:2d:cf:c9:cb:0d:42:08:b5:9f:6a:
                    dc:54:ec:e4:3a:14:4d:25:36:1e:f1:dc:6d:d0:4a:
                    9d:6f:9c:f4:17:fb:6b:7d:57:72:21:62:67:33:9b:
                    c0:b0:47:93:52:c3:c2:a2:51:b2:fe:6b:18:24:03:
                    c4:bb:4d:64:7e:88:fb:ca:82:b6:13:61:b8:b7:38:
                    4d:e1:50:e2:cd:59:31:dd:63:43:f5:8d:b8:f3:8a:
                    f2:e2:21:5c:0f:ab:d0:c7:69:29:22:48:cd:8b:90:
                    92:cc:69:ea:b4:39:d9:9c:1b:40:e2:6d:fc:ca:04:
                    35:b7:8b:17:9c:ee:7b:45:17:4f:5e:da:64:e8:5e:
                    b5:1e:c4:99:81:e9:38:40:21:8e:7f:4a:d4:82:ec:
                    94:c8:62:2a:bd:a1:21:0a:35:eb:1c:7b:41:d4:f2:
                    39:12:68:e0:45:38:3c:0f:4c:a6:74:ab:54:1f:19:
                    f5:94:bb:46:24:9f:ac:82:a4:9b:3f:05:ec:21:1c:
                    6b:9d:15:7c:58:b4:b3:ea:81:0f:8e:8f:39:d2:93:
                    ca:44:3b:3e:c2:c6:bb:e8:54:51:d5:65:74:83:cb:
                    a5:c2:ba:e0:3c:ca:d6:cd:6a:8c:c0:12:15:7e:4f:
                    91:ef:1c:92:eb:9d:f6:28:c9:21:ba:00:c6:b7:82:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:63:C6:49:45:CD:67:98:91:68:F3:D2:B1:3E:E2:99:99:72:42
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231352e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:8d:11:06:1d:1c:93:1b:13:f3:6f:91:15:ab:ab:48:7b:e0:
         c1:89:c9:50:c3:d2:19:70:99:a4:17:5c:d2:95:82:a3:90:c1:
         92:67:45:12:f8:2e:40:4d:41:98:69:ee:1d:7c:89:17:cf:3e:
         ce:7f:4f:0a:5a:c9:f7:20:01:cf:ee:43:d2:5a:ca:59:01:26:
         ee:27:6c:08:9d:21:12:bb:db:5a:75:69:b8:35:f2:d3:4b:c9:
         5b:17:41:8c:d6:c2:3b:41:a7:69:93:bf:d0:32:47:5f:bc:5c:
         25:fb:91:58:2a:b3:0e:2a:a2:14:8c:a9:e3:d9:ac:dc:c6:72:
         71:e6:2b:30:90:12:e8:3c:e9:13:89:4c:6f:dd:10:5c:4c:88:
         de:1e:73:aa:2b:ad:8e:a1:f4:71:ee:4d:4d:e0:59:6d:d5:6d:
         e8:26:3f:a9:70:27:0d:a5:c8:19:0e:9f:12:1b:35:f8:61:78:
         a7:97:8b:34:0f:94:3e:ad:d9:a0:dc:19:c9:d2:16:19:08:4b:
         3e:37:ab:3b:5e:6f:32:73:a9:ca:f8:f6:29:76:18:45:77:8b:
         44:09:7e:1e:5b:ef:ae:34:a5:2f:86:3a:1f:c9:e1:0f:7d:05:
         78:b5:92:0a:92:c7:4e:4a:cf:61:9c:8d:87:9a:a3:37:3a:5a:
         91:9c:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:42:24 2025 by rpki-client