Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa
File:                     AS270022.roa (raw, json)
Hash identifier:          mmsnQilrC4dSskFag5Oe53WFVyGQ9UzkUGkhlnkKCgg=
Subject key identifier:   01:9F:D5:C4:75:BA:D7:D7:BF:EA:5F:4B:1B:7E:1D:4D:27:17:13:97
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       20B603289151ABFD3C7CB45EC190E071F134457C
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa
Signing time:             Mon 01 Sep 2025 14:35:00 +0000
ROA not before:           Mon 01 Sep 2025 14:30:00 +0000
ROA not after:            Mon 31 Aug 2026 14:35:00 +0000
asID:                     270022
IP address blocks:        179.40.109.0/24 maxlen: 24
                          186.38.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b6:03:28:91:51:ab:fd:3c:7c:b4:5e:c1:90:e0:71:f1:34:45:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Sep  1 14:30:00 2025 GMT
            Not After : Aug 31 14:35:00 2026 GMT
        Subject: CN=019FD5C475BAD7D7BFEA5F4B1B7E1D4D27171397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:ce:74:15:10:83:d5:5b:dd:cd:d6:f1:69:
                    d0:f7:10:f9:27:16:f9:b6:fb:ff:22:1f:7b:47:fc:
                    78:23:21:02:d7:c6:7c:7a:5c:e3:98:c9:4f:06:95:
                    5c:dd:df:65:57:e5:b0:25:6b:a1:50:89:af:1a:58:
                    87:6c:4f:77:88:e2:84:ff:f5:ec:a0:c7:4a:fa:26:
                    99:17:fe:54:da:86:bc:59:9e:07:88:18:6e:12:60:
                    02:0f:fe:a8:d2:32:9f:ae:00:69:0b:b1:7d:c4:57:
                    ac:46:d4:12:e8:bf:0f:4a:fa:69:15:42:f5:3c:e4:
                    61:2e:c9:c6:8f:2e:37:a1:87:a7:2c:3a:03:a0:0f:
                    03:9c:b9:b5:ac:99:65:6a:c1:2a:57:bd:e1:57:36:
                    28:5d:38:23:71:80:52:b0:c7:42:c7:ee:79:9a:8c:
                    eb:c7:c8:ce:5c:41:31:bc:5a:c5:d8:be:0d:7c:47:
                    75:3a:ad:cc:b0:39:51:4e:43:0b:83:c1:92:7e:00:
                    c0:d1:e5:85:35:c7:05:2d:44:e2:34:e0:c2:30:9c:
                    fb:13:19:db:3a:5d:e6:8e:26:43:34:04:77:20:13:
                    0c:76:99:fd:d2:7c:6e:39:47:40:18:86:5d:12:88:
                    39:d1:58:68:42:90:df:c2:c9:6c:35:26:0a:25:ae:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:D5:C4:75:BA:D7:D7:BF:EA:5F:4B:1B:7E:1D:4D:27:17:13:97
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS270022.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.109.0/24
                  186.38.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d1:03:d2:1a:ef:57:0e:9f:52:ab:3f:f6:2c:bf:60:93:04:
         9d:2d:94:14:a1:1c:97:2c:18:a9:a9:08:56:8e:f6:62:8c:cc:
         31:45:13:35:d6:09:5b:dd:b3:14:20:0b:04:03:8b:c2:d9:39:
         44:aa:28:bf:7b:0c:81:cc:58:99:e8:30:92:4f:ec:e9:cd:c5:
         12:05:52:bd:ac:1f:0b:bc:b5:ac:9b:dd:ab:2c:dc:42:d3:7e:
         a0:af:9c:1d:f1:5f:1f:02:36:94:46:70:e8:63:2e:a9:9b:be:
         ac:e0:3f:84:0b:35:6f:37:b5:17:2b:fb:00:59:1c:6e:dc:7f:
         a0:2b:28:e6:71:95:0c:35:49:fe:ca:dc:a9:36:f3:dd:05:43:
         53:01:c7:6c:35:bd:ec:1b:b9:15:5b:ef:40:d6:66:48:c8:cc:
         4a:d8:d6:e7:14:6c:f1:c3:2b:a3:00:1c:9d:d1:4d:c4:69:97:
         a1:4f:91:60:38:84:d9:52:55:7e:af:49:7f:d3:47:65:b5:cf:
         8d:3e:2e:bb:7e:b3:33:07:72:e9:4b:28:a9:37:fe:9b:f0:6f:
         3e:65:bb:dc:f4:43:e4:a7:bb:7b:d3:8d:f3:74:31:d7:70:8c:
         4e:e4:f4:34:3e:35:b3:68:15:37:07:99:ee:97:96:01:19:82:
         01:b5:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 21:51:31 2025 by rpki-client