Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33392e302f32342d3234203d3e20323731393835.roa
File:                     3137372e33372e33392e302f32342d3234203d3e20323731393835.roa (raw, json)
Hash identifier:          1AK0jc6xqSAUjeofpo08+7m+RqmQtI+ej6swDwoVwwM=
Subject key identifier:   2C:28:4B:82:E7:50:4A:A5:74:8E:D5:6A:8B:70:80:BE:F2:E7:FB:50
Certificate issuer:       /CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
Certificate serial:       587FE2BE1F15C910E2346EE19A7443834A614293
Authority key identifier: BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33392e302f32342d3234203d3e20323731393835.roa
Signing time:             Tue 23 Jun 2026 21:49:14 +0000
ROA not before:           Tue 23 Jun 2026 21:44:14 +0000
ROA not after:            Tue 22 Jun 2027 21:49:14 +0000
asID:                     271985
IP address blocks:        177.37.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 10:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:e2:be:1f:15:c9:10:e2:34:6e:e1:9a:74:43:83:4a:61:42:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
        Validity
            Not Before: Jun 23 21:44:14 2026 GMT
            Not After : Jun 22 21:49:14 2027 GMT
        Subject: CN=2C284B82E7504AA5748ED56A8B7080BEF2E7FB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:63:c7:75:7f:06:a5:17:9d:d5:fa:8d:07:
                    2c:78:1d:b0:89:a4:7f:18:b5:63:3a:05:f8:65:10:
                    38:6f:75:e8:35:d1:77:8a:2e:b5:c4:16:0f:b3:9f:
                    39:2b:e8:7a:f2:c5:f7:18:0e:57:3a:5a:3a:d8:6a:
                    ca:b4:05:91:ee:83:46:1e:4b:b8:c4:2b:9b:71:95:
                    e4:54:69:92:b9:4c:2c:52:53:70:4a:48:73:c5:3d:
                    91:02:c1:8e:f6:93:33:87:52:76:4e:c5:5c:ae:8b:
                    3b:75:43:6b:04:cc:f7:b3:eb:05:e4:60:23:19:cb:
                    68:94:15:4f:3b:4a:e1:59:19:cc:80:b8:fc:83:8e:
                    51:1a:6b:fc:5b:2b:af:08:e3:f4:12:08:cf:86:70:
                    44:63:ce:66:ae:dc:ac:5b:85:b5:46:7e:ce:2e:9a:
                    cd:32:5b:bd:10:d8:b3:af:e1:02:13:81:6f:c1:89:
                    db:67:9e:1e:1d:9a:20:e4:3f:88:13:eb:bd:fa:e6:
                    64:b6:6d:32:47:57:47:18:7b:8e:1f:46:5c:11:a3:
                    1a:c4:f3:5d:bb:3b:5e:a0:db:6e:a0:65:2a:87:05:
                    27:a9:d9:dc:3f:c8:ac:c9:f9:09:c7:67:25:8a:b6:
                    01:f6:72:51:f3:ce:d4:6d:0e:66:b7:d4:96:ab:3a:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:28:4B:82:E7:50:4A:A5:74:8E:D5:6A:8B:70:80:BE:F2:E7:FB:50
            X509v3 Authority Key Identifier:
                keyid:BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33392e302f32342d3234203d3e20323731393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:b0:49:22:d7:26:54:83:2f:53:ac:2d:af:9b:ce:8c:17:
         98:68:2e:9b:33:95:f0:94:b3:97:9d:c9:07:89:89:04:29:85:
         23:1f:18:5c:8f:2d:45:44:e4:11:54:57:fb:c0:05:b8:cd:5d:
         2b:60:eb:f0:7d:96:62:6a:21:5b:00:6b:47:94:d2:29:7b:d5:
         2a:15:55:44:38:6e:63:05:97:4e:91:2c:fc:22:97:31:b6:4f:
         83:f6:a1:1c:99:4a:31:0f:4a:c0:0a:0a:44:26:e0:a7:ed:86:
         4c:23:0a:cf:f3:96:a6:f2:70:27:e6:e7:fd:f5:ff:9d:88:7e:
         24:e1:31:24:eb:4d:05:e9:1f:15:90:5b:19:87:94:6d:d8:18:
         b8:ef:9b:f2:ef:e3:49:e0:93:0d:f5:ed:46:fd:1b:0d:57:71:
         12:b3:82:19:76:00:ec:b2:b2:94:c1:c2:ac:49:f8:dc:30:75:
         73:09:b5:1e:25:01:40:34:b5:f7:7f:f6:b5:09:d5:36:3f:08:
         09:ce:de:cf:f4:01:6b:ab:f1:b5:b0:42:35:c5:52:31:3b:4e:
         c5:39:bf:25:8c:e6:fc:e5:dc:d0:c8:66:91:f6:21:03:e3:29:
         ed:2c:a1:fc:05:bd:cc:6d:d2:40:c0:6c:94:5c:67:dd:91:e8:
         c8:fe:4d:89
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWH/ivh8VyRDiNG7hmnRDg0phQpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwN0IyQzhBNzFDMkY2QjBDMTQ1QkNCQUNCNzU3OERC
N0JDMDM3OTAeFw0yNjA2MjMyMTQ0MTRaFw0yNzA2MjIyMTQ5MTRaMDMxMTAvBgNV
BAMTKDJDMjg0QjgyRTc1MDRBQTU3NDhFRDU2QThCNzA4MEJFRjJFN0ZCNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAWPHdX8GpRed1fqNByx4HbCJ
pH8YtWM6BfhlEDhvdeg10XeKLrXEFg+znzkr6HryxfcYDlc6WjrYasq0BZHug0Ye
S7jEK5txleRUaZK5TCxSU3BKSHPFPZECwY72kzOHUnZOxVyuizt1Q2sEzPez6wXk
YCMZy2iUFU87SuFZGcyAuPyDjlEaa/xbK68I4/QSCM+GcERjzmau3KxbhbVGfs4u
ms0yW70Q2LOv4QITgW/Bidtnnh4dmiDkP4gT67365mS2bTJHV0cYe44fRlwRoxrE
8127O16g226gZSqHBSep2dw/yKzJ+QnHZyWKtgH2clHzztRtDma31JarOrAnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULChLgudQSqV0jtVqi3CAvvLn+1AwHwYDVR0j
BBgwFoAUvAeyyKccL2sMFFvLrLdXjbe8A3kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Mzc0MUYwNUI5Q0QwMUNGRjMxNDdBQ0YyQzZGQTI5RUM1
NDM0MEVEOTkyMTQ1NTAwQjg3QzdBQUVGQTI0NkM4LzAvQkMwN0IyQzhBNzFDMkY2
QjBDMTQ1QkNCQUNCNzU3OERCN0JDMDM3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzA3QjJDOEE3MUMyRjZCMEMx
NDVCQ0JBQ0I3NTc4REI3QkMwMzc5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM3NDFGMDVCOUNEMDFDRkYzMTQ3QUNGMkM2RkEyOUVDNTQzNDBFRDk5
MjE0NTUwMEI4N0M3QUFFRkEyNDZDOC8wLzMxMzczNzJlMzMzNzJlMzMzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM5MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALElJzAN
BgkqhkiG9w0BAQsFAAOCAQEAH8SwSSLXJlSDL1OsLa+bzowXmGgumzOV8JSzl53J
B4mJBCmFIx8YXI8tRUTkEVRX+8AFuM1dK2Dr8H2WYmohWwBrR5TSKXvVKhVVRDhu
YwWXTpEs/CKXMbZPg/ahHJlKMQ9KwAoKRCbgp+2GTCMKz/OWpvJwJ+bn/fX/nYh+
JOExJOtNBekfFZBbGYeUbdgYuO+b8u/jSeCTDfXtRv0bDVdxErOCGXYA7LKylMHC
rEn43DB1cwm1HiUBQDS193/2tQnVNj8ICc7ez/QBa6vxtbBCNcVSMTtOxTm/JYzm
/OXc0MhmkfYhA+Mp7Syh/AW9zG3SQMBslFxn3ZHoyP5NiQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:16:54 2026 by rpki-client