Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3137372e36372e31362e302f32322d3234203d3e203237393130.roa
File:                     3137372e36372e31362e302f32322d3234203d3e203237393130.roa (raw, json)
Hash identifier:          lRgEaDUL5ltdrcKy3iopWrkDdvb433g9ECPGt4wnW/k=
Subject key identifier:   57:A2:55:8A:54:99:7A:E1:CE:1F:17:4D:46:70:BA:06:D6:DE:07:B6
Certificate issuer:       /CN=4BA24B565BA24009748E46515F9138A6540E41B4
Certificate serial:       0CFD9A2C7CD076DF010BDE0372CD7593C9AC1DD7
Authority key identifier: 4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3137372e36372e31362e302f32322d3234203d3e203237393130.roa
Signing time:             Fri 11 Jul 2025 21:35:00 +0000
ROA not before:           Fri 11 Jul 2025 21:30:00 +0000
ROA not after:            Fri 10 Jul 2026 21:35:00 +0000
asID:                     27910
IP address blocks:        177.67.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:9a:2c:7c:d0:76:df:01:0b:de:03:72:cd:75:93:c9:ac:1d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA24B565BA24009748E46515F9138A6540E41B4
        Validity
            Not Before: Jul 11 21:30:00 2025 GMT
            Not After : Jul 10 21:35:00 2026 GMT
        Subject: CN=57A2558A54997AE1CE1F174D4670BA06D6DE07B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:d2:00:d0:e8:5f:a8:bb:1a:0f:aa:b3:b5:
                    b4:bc:ae:77:25:70:61:62:83:01:e7:22:a6:0c:c9:
                    53:98:17:05:aa:2b:de:5e:8a:7d:6f:d8:de:10:8b:
                    af:ae:79:52:51:4c:8f:e8:12:a2:d3:d7:15:63:83:
                    08:d4:d1:dd:46:cb:4c:4e:b7:c5:01:c1:a4:90:bf:
                    b6:d2:c8:e4:47:02:cf:be:f9:0c:a8:e7:d3:aa:44:
                    c9:f3:1f:d7:81:80:a1:15:3b:f7:36:3f:73:05:1c:
                    61:f6:a6:06:6e:31:23:2d:60:61:14:87:92:d5:74:
                    14:3f:7f:b4:60:8f:92:50:35:09:c5:38:a0:33:06:
                    21:0b:b0:fd:e0:23:4c:46:dd:5f:9e:c3:ad:17:14:
                    71:82:40:5a:3f:44:67:5d:aa:26:7b:94:12:91:fe:
                    e3:31:4f:ce:96:4e:ea:41:a2:59:a4:16:62:28:64:
                    15:0c:7c:48:d7:a5:98:c8:b0:28:fa:49:4b:65:3e:
                    41:5c:93:6f:0c:f1:4e:29:47:39:d0:2b:94:43:a5:
                    58:af:9e:e1:4e:c7:7d:33:1c:ab:d8:90:6d:2a:39:
                    04:f1:8b:33:58:1f:42:aa:0e:d5:76:49:d7:05:29:
                    a9:b3:ee:dd:90:bb:82:c2:9b:c7:06:10:19:19:68:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:55:8A:54:99:7A:E1:CE:1F:17:4D:46:70:BA:06:D6:DE:07:B6
            X509v3 Authority Key Identifier:
                keyid:4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3137372e36372e31362e302f32322d3234203d3e203237393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:f1:3d:d4:9f:67:8c:99:e7:b0:17:6a:ea:fc:5d:85:b2:c7:
         99:c1:cc:7b:92:4b:34:28:37:80:6f:e9:0d:96:00:84:81:b2:
         0c:d8:e4:87:8c:9c:a1:c1:fa:5d:e8:d3:9c:c6:48:59:a4:cd:
         3f:47:88:27:10:cc:4a:49:d1:a7:63:60:ad:40:b7:e0:ca:71:
         81:a6:e7:e8:ad:5a:0b:67:92:e7:be:97:06:be:fe:a5:cb:77:
         e6:94:88:31:d7:b9:47:71:59:64:0a:bf:d8:1d:21:0c:65:7c:
         97:4b:cf:9c:40:b2:ea:bf:ec:17:f1:f4:70:1b:c9:71:1b:f5:
         77:75:9e:40:e8:d3:d2:47:4f:af:58:ff:ef:33:7a:c8:10:25:
         19:bd:14:93:b8:bc:16:78:2b:23:bf:fb:c5:17:7a:29:38:cf:
         d8:74:28:e2:30:2c:33:c9:c8:8f:a2:bc:67:ba:17:5e:4f:ca:
         27:f2:f2:24:55:57:0d:50:f8:46:11:b6:74:f5:88:35:41:95:
         4e:7a:93:d9:d2:71:29:a3:02:b7:59:96:6c:02:b5:80:82:2f:
         7f:45:b3:d1:83:7b:fe:9a:a6:19:92:10:30:8b:1d:5e:36:08:
         e4:2c:04:b2:fe:13:39:ff:50:1d:17:23:39:b5:59:42:e3:29:
         35:75:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:17:02 2025 by rpki-client