Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33372e302f32342d3234203d3e20323731393835.roa
File:                     3137372e33372e33372e302f32342d3234203d3e20323731393835.roa (raw, json)
Hash identifier:          +uO0B2rvGLwGcmRqVtmchSrxriQGr94j7ggEboGmt6g=
Subject key identifier:   4E:08:53:F4:B9:4A:CB:28:95:EF:9F:22:E7:76:C3:1E:43:B5:EC:E0
Certificate issuer:       /CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
Certificate serial:       0109A2F1216712DBBC7F117CAC55453D33A522B5
Authority key identifier: BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33372e302f32342d3234203d3e20323731393835.roa
Signing time:             Tue 23 Jun 2026 21:49:15 +0000
ROA not before:           Tue 23 Jun 2026 21:44:15 +0000
ROA not after:            Tue 22 Jun 2027 21:49:15 +0000
asID:                     271985
IP address blocks:        177.37.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 10:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:09:a2:f1:21:67:12:db:bc:7f:11:7c:ac:55:45:3d:33:a5:22:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
        Validity
            Not Before: Jun 23 21:44:15 2026 GMT
            Not After : Jun 22 21:49:15 2027 GMT
        Subject: CN=4E0853F4B94ACB2895EF9F22E776C31E43B5ECE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:03:6e:87:a2:fc:97:ee:86:00:59:7f:b2:
                    68:df:b0:60:54:5d:78:c9:6d:87:e7:18:e5:55:51:
                    81:20:4e:cc:8c:94:64:0f:58:a7:4a:42:a6:df:f8:
                    2c:3e:c3:f2:19:dc:ce:fb:34:07:02:8c:90:34:d2:
                    3e:fd:62:a9:37:16:0b:39:f1:ac:5c:77:2d:9d:ce:
                    4a:cf:80:c9:97:f0:09:f7:32:a3:f6:69:33:df:7e:
                    ec:c9:af:c7:8c:43:5e:51:ee:f1:0c:6b:cb:7e:75:
                    64:f3:1f:9e:6e:9f:f6:a3:75:fd:3b:04:f2:66:03:
                    6b:16:a8:93:7f:51:00:53:12:56:07:cd:e8:1e:ac:
                    a2:7c:bf:fd:1a:d8:95:06:6b:b3:6c:d5:ad:ae:f9:
                    94:99:72:00:57:f1:de:67:c0:ae:37:90:33:5e:30:
                    ee:62:ad:97:d9:b3:2e:a2:04:7d:a3:b2:7c:92:d0:
                    42:c8:d8:80:40:16:be:68:97:fd:fd:8c:20:94:ad:
                    d9:cc:f0:68:97:37:9f:63:1b:57:41:af:a6:4f:1d:
                    6d:35:fe:4e:0e:27:08:dd:31:7f:66:ea:6f:1f:db:
                    b7:a4:c6:0e:cc:96:0e:5a:0f:d9:01:a8:78:a0:e3:
                    20:c5:76:e5:d8:34:32:05:db:b3:eb:d0:02:77:17:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:08:53:F4:B9:4A:CB:28:95:EF:9F:22:E7:76:C3:1E:43:B5:EC:E0
            X509v3 Authority Key Identifier:
                keyid:BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33372e302f32342d3234203d3e20323731393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:67:40:e0:8c:78:ce:4a:6a:05:73:82:22:76:db:f7:9e:57:
         0a:1a:e5:c8:7f:77:84:2e:ac:a6:8a:3b:47:2d:09:d1:2d:25:
         b0:48:14:54:f0:f3:ce:fe:5b:98:55:15:af:58:97:c0:e9:56:
         07:4e:40:f6:18:23:b4:b0:a7:ab:d6:a1:d2:25:81:d8:8c:70:
         14:5c:9e:43:69:3f:3c:d3:a4:6f:06:6d:37:28:c1:af:d3:8a:
         49:8f:bd:e6:1a:ca:25:08:7c:72:5d:5f:22:26:5f:59:14:60:
         e4:fe:fa:e3:d8:a7:fd:45:1e:38:8d:fe:1c:16:ea:24:c5:2b:
         0c:b3:a3:3d:f6:97:13:60:dd:ee:0f:03:b4:04:b8:d5:e2:a1:
         de:a0:e6:21:fd:d0:31:97:8b:91:54:0d:b4:b4:20:6d:83:8b:
         b9:45:1f:5e:e4:77:6a:59:75:85:fd:7e:a5:84:79:6a:b3:18:
         16:e1:16:da:d7:9c:fe:f8:9f:a5:32:43:4e:af:13:b4:c2:82:
         bb:7c:9e:60:59:ae:ea:b9:bd:05:d0:e0:9e:dd:02:2e:8e:ab:
         e4:51:e8:e7:c2:de:34:ef:c8:62:5b:f3:37:4c:b1:96:f6:57:
         5c:98:7e:77:fe:b2:71:0e:4f:7f:26:74:1d:1b:b3:6b:e1:2f:
         ac:b8:9d:32
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAQmi8SFnEtu8fxF8rFVFPTOlIrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwN0IyQzhBNzFDMkY2QjBDMTQ1QkNCQUNCNzU3OERC
N0JDMDM3OTAeFw0yNjA2MjMyMTQ0MTVaFw0yNzA2MjIyMTQ5MTVaMDMxMTAvBgNV
BAMTKDRFMDg1M0Y0Qjk0QUNCMjg5NUVGOUYyMkU3NzZDMzFFNDNCNUVDRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQgNuh6L8l+6GAFl/smjfsGBU
XXjJbYfnGOVVUYEgTsyMlGQPWKdKQqbf+Cw+w/IZ3M77NAcCjJA00j79Yqk3Fgs5
8axcdy2dzkrPgMmX8An3MqP2aTPffuzJr8eMQ15R7vEMa8t+dWTzH55un/ajdf07
BPJmA2sWqJN/UQBTElYHzegerKJ8v/0a2JUGa7Ns1a2u+ZSZcgBX8d5nwK43kDNe
MO5irZfZsy6iBH2jsnyS0ELI2IBAFr5ol/39jCCUrdnM8GiXN59jG1dBr6ZPHW01
/k4OJwjdMX9m6m8f27ekxg7Mlg5aD9kBqHig4yDFduXYNDIF27Pr0AJ3F0QdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTghT9LlKyyiV758i53bDHkO17OAwHwYDVR0j
BBgwFoAUvAeyyKccL2sMFFvLrLdXjbe8A3kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Mzc0MUYwNUI5Q0QwMUNGRjMxNDdBQ0YyQzZGQTI5RUM1
NDM0MEVEOTkyMTQ1NTAwQjg3QzdBQUVGQTI0NkM4LzAvQkMwN0IyQzhBNzFDMkY2
QjBDMTQ1QkNCQUNCNzU3OERCN0JDMDM3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzA3QjJDOEE3MUMyRjZCMEMx
NDVCQ0JBQ0I3NTc4REI3QkMwMzc5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM3NDFGMDVCOUNEMDFDRkYzMTQ3QUNGMkM2RkEyOUVDNTQzNDBFRDk5
MjE0NTUwMEI4N0M3QUFFRkEyNDZDOC8wLzMxMzczNzJlMzMzNzJlMzMzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM5MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALElJTAN
BgkqhkiG9w0BAQsFAAOCAQEAN2dA4Ix4zkpqBXOCInbb955XChrlyH93hC6spoo7
Ry0J0S0lsEgUVPDzzv5bmFUVr1iXwOlWB05A9hgjtLCnq9ah0iWB2IxwFFyeQ2k/
PNOkbwZtNyjBr9OKSY+95hrKJQh8cl1fIiZfWRRg5P7649in/UUeOI3+HBbqJMUr
DLOjPfaXE2Dd7g8DtAS41eKh3qDmIf3QMZeLkVQNtLQgbYOLuUUfXuR3all1hf1+
pYR5arMYFuEW2tec/vifpTJDTq8TtMKCu3yeYFmu6rm9BdDgnt0CLo6r5FHo58Le
NO/IYlvzN0yxlvZXXJh+d/6ycQ5PfyZ0HRuza+EvrLidMg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:16:54 2026 by rpki-client