Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3137372e382e37382e302f32342d3234203d3e20323632313931.roa
File:                     3137372e382e37382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          VjDXfnORIEbeu48x7dECwBCFxmDBeOj5MoVhJ/BFhx0=
Subject key identifier:   A7:60:02:38:82:81:32:50:2F:97:00:99:C9:DE:6E:D5:82:AC:45:30
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       0146845C66385A087C447FA496ECA76B3EC26FAA
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3137372e382e37382e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 09 Sep 2025 17:44:04 +0000
ROA not before:           Tue 09 Sep 2025 17:39:04 +0000
ROA not after:            Tue 08 Sep 2026 17:44:04 +0000
asID:                     262191
IP address blocks:        177.8.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 15:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:46:84:5c:66:38:5a:08:7c:44:7f:a4:96:ec:a7:6b:3e:c2:6f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Sep  9 17:39:04 2025 GMT
            Not After : Sep  8 17:44:04 2026 GMT
        Subject: CN=A7600238828132502F970099C9DE6ED582AC4530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:14:d5:d5:76:58:f4:2c:76:d1:2c:88:01:
                    ef:b8:8e:9c:a7:c4:60:76:a6:bc:e1:4b:5a:9a:b9:
                    85:ce:51:90:8c:8d:e9:de:4b:e3:36:8a:d2:1a:52:
                    cd:a1:f3:b2:9a:54:f6:26:d2:77:f6:50:ac:34:6b:
                    9c:c0:1a:b9:6d:f5:8e:e9:26:06:a9:ba:89:d7:3c:
                    bf:94:e7:46:68:cb:e8:26:44:08:81:eb:90:76:e9:
                    5a:08:84:60:06:6c:bb:ac:62:6e:b5:aa:86:59:9f:
                    6f:aa:e1:0e:82:80:51:af:b2:97:be:1e:be:b2:66:
                    f3:97:f5:97:6b:90:41:c8:95:31:55:81:74:bd:77:
                    f5:1a:01:d6:88:3e:7f:11:9a:bc:e0:04:5a:2d:81:
                    53:91:72:cd:b4:8f:87:c3:c0:b9:74:9d:46:f4:32:
                    7d:e2:8a:87:5b:d1:ae:59:d5:8b:ce:20:00:42:e6:
                    43:cc:f0:e6:d2:7c:f6:b5:ed:f2:ad:3f:b9:44:02:
                    d5:c2:0a:ea:32:c7:f5:3f:ab:59:2e:52:91:32:b5:
                    95:c9:c4:5b:a5:32:d7:a1:b0:c7:71:c6:c5:fc:01:
                    1c:88:ec:2d:8b:ba:cc:29:a0:54:e7:3c:cb:f8:c1:
                    fa:77:c8:f3:ed:4c:e7:ef:9e:6a:40:3e:59:99:fe:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:60:02:38:82:81:32:50:2F:97:00:99:C9:DE:6E:D5:82:AC:45:30
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3137372e382e37382e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:22:a9:02:03:1d:fc:ec:51:ec:cb:08:55:c1:c5:7c:30:82:
         98:60:0f:2d:24:07:93:9c:41:b8:b0:a8:34:96:a6:dc:64:f6:
         b1:94:df:41:d7:ef:40:55:d4:98:22:8e:82:12:a3:f1:b8:71:
         c7:b4:50:6c:23:f4:f7:39:ef:b8:3e:52:d8:a9:53:ff:06:79:
         6e:d6:05:5f:a2:64:08:4a:5e:fb:08:92:76:ea:d8:f7:a9:ba:
         e4:05:03:3b:b8:9c:fa:aa:68:95:50:bc:94:f5:9b:f9:b7:cb:
         0b:58:ef:62:24:c4:0b:af:f4:73:12:53:9e:cf:23:90:96:d8:
         4c:76:36:c2:92:55:1e:83:47:d5:34:c8:6d:ca:02:7d:4a:68:
         33:40:aa:6c:47:07:7f:a7:cd:19:b2:3b:7b:c2:1c:c3:73:c4:
         73:a9:e6:2e:77:7f:56:00:c9:51:80:ac:d5:90:1c:df:ee:50:
         ef:e5:40:34:8e:12:a0:70:df:60:7f:22:1e:87:ba:54:86:22:
         b3:51:92:10:77:f1:b5:76:52:a2:a6:5c:d8:72:9c:10:43:d5:
         6a:c0:9c:08:0b:61:b7:4b:d3:e1:12:22:01:36:54:c0:c2:f4:
         d1:cb:73:49:46:86:f6:7b:b3:f7:03:a7:67:d0:91:56:e4:3b:
         fd:ae:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:10:41 2025 by rpki-client