Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3232203d3e20323731393835.roa
File:                     3137372e33372e33362e302f32322d3232203d3e20323731393835.roa (raw, json)
Hash identifier:          rWtHqAP+ITtbbHDTjg3gHJ97zxTheX45kLhxT2q/FHQ=
Subject key identifier:   67:4A:C1:E7:17:BE:71:E4:F4:C6:BB:54:B0:92:54:BA:A9:BA:C3:91
Certificate issuer:       /CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
Certificate serial:       55CACD3CFE533259E98CB419AE68C0CD88EF3C6F
Authority key identifier: BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3232203d3e20323731393835.roa
Signing time:             Tue 22 Jul 2025 21:26:16 +0000
ROA not before:           Tue 22 Jul 2025 21:21:16 +0000
ROA not after:            Tue 21 Jul 2026 21:26:16 +0000
asID:                     271985
IP address blocks:        177.37.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ca:cd:3c:fe:53:32:59:e9:8c:b4:19:ae:68:c0:cd:88:ef:3c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
        Validity
            Not Before: Jul 22 21:21:16 2025 GMT
            Not After : Jul 21 21:26:16 2026 GMT
        Subject: CN=674AC1E717BE71E4F4C6BB54B09254BAA9BAC391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:36:2b:f7:93:08:76:8d:bc:58:31:cc:ec:
                    49:ff:dd:f5:c4:5b:b8:41:83:7c:d3:b3:33:ee:d7:
                    3b:9a:fd:ac:ac:26:47:71:8c:72:d5:5e:ae:d6:d2:
                    3d:56:7e:2a:db:96:0d:a9:94:93:67:85:b6:d8:b9:
                    db:41:62:53:59:d5:87:f0:3b:fe:84:ff:89:d7:cb:
                    65:32:1d:75:c5:b0:a1:3a:6b:24:e0:e7:f0:54:63:
                    8e:39:ea:56:57:b1:38:25:b1:a1:65:f4:cc:98:67:
                    9d:3e:2a:f0:e0:b9:d3:6c:a7:43:f2:8d:fa:34:01:
                    e4:10:e2:95:34:8c:11:85:1f:a3:88:42:21:29:82:
                    80:07:27:1f:6c:19:92:89:68:a3:7f:23:45:98:cd:
                    e9:d8:9c:ec:15:20:84:46:ae:5d:65:aa:4a:6b:87:
                    09:26:ac:db:2c:ba:65:42:a2:69:da:de:c7:10:67:
                    b5:10:94:e0:9d:52:1e:5e:ea:1d:7e:a7:6e:10:c5:
                    d0:0b:64:cb:90:cc:a2:49:65:85:54:ba:69:8b:cf:
                    dd:39:19:2a:e7:02:d8:b7:7b:1d:d7:4a:08:e0:24:
                    04:23:77:00:f9:e7:8d:65:86:06:cd:6d:0d:d1:31:
                    c7:7b:a9:39:a7:44:12:a2:b5:27:8b:33:79:36:af:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:C1:E7:17:BE:71:E4:F4:C6:BB:54:B0:92:54:BA:A9:BA:C3:91
            X509v3 Authority Key Identifier:
                keyid:BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3232203d3e20323731393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:29:b7:eb:66:2a:6b:af:02:fd:05:ef:06:f7:d3:90:9c:
         5b:9d:6d:24:39:6d:ab:ed:31:ad:f0:52:98:10:68:f3:12:79:
         38:40:b6:0f:00:77:02:ae:a9:fb:a0:2b:fb:ff:ff:02:fe:2f:
         c2:c6:ee:8c:ac:f3:16:c3:e1:93:98:35:6a:0e:21:63:a2:a7:
         af:48:d9:d2:61:05:54:81:d6:0e:b8:1e:56:f8:d3:68:82:36:
         e2:2e:db:6f:c2:5f:22:ef:79:ac:0c:29:13:f5:d2:2c:c6:c9:
         4e:34:96:3a:cd:a4:87:c0:97:04:7e:c7:b5:fe:94:7a:bc:8a:
         11:f8:b1:5d:08:30:22:2a:80:c8:9d:c4:ff:d6:2f:d2:6c:19:
         ba:89:29:37:e5:1e:9e:ab:55:c2:e8:d6:aa:dc:84:27:19:ec:
         1b:51:aa:2b:05:a8:19:c3:e9:3b:fa:53:ec:ad:ca:8e:ed:74:
         2d:01:13:7a:a3:4e:02:f6:0a:b9:00:c8:4a:2c:08:a0:4d:e4:
         dc:f1:8f:69:16:a4:9c:ea:11:88:12:9d:50:44:71:f6:4f:b3:
         6c:dc:da:6e:3e:c8:07:85:f2:f4:a1:b0:10:38:81:1a:c9:df:
         9f:7b:4c:b8:bb:d2:f9:ab:06:b7:b1:85:8e:40:f3:45:f2:6c:
         a1:c4:07:a4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVcrNPP5TMlnpjLQZrmjAzYjvPG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwN0IyQzhBNzFDMkY2QjBDMTQ1QkNCQUNCNzU3OERC
N0JDMDM3OTAeFw0yNTA3MjIyMTIxMTZaFw0yNjA3MjEyMTI2MTZaMDMxMTAvBgNV
BAMTKDY3NEFDMUU3MTdCRTcxRTRGNEM2QkI1NEIwOTI1NEJBQTlCQUMzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzjYr95MIdo28WDHM7En/3fXE
W7hBg3zTszPu1zua/aysJkdxjHLVXq7W0j1Wfirblg2plJNnhbbYudtBYlNZ1Yfw
O/6E/4nXy2UyHXXFsKE6ayTg5/BUY4456lZXsTglsaFl9MyYZ50+KvDgudNsp0Py
jfo0AeQQ4pU0jBGFH6OIQiEpgoAHJx9sGZKJaKN/I0WYzenYnOwVIIRGrl1lqkpr
hwkmrNssumVComna3scQZ7UQlOCdUh5e6h1+p24QxdALZMuQzKJJZYVUummLz905
GSrnAti3ex3XSgjgJAQjdwD5541lhgbNbQ3RMcd7qTmnRBKitSeLM3k2rzdbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZ0rB5xe+ceT0xrtUsJJUuqm6w5EwHwYDVR0j
BBgwFoAUvAeyyKccL2sMFFvLrLdXjbe8A3kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Mzc0MUYwNUI5Q0QwMUNGRjMxNDdBQ0YyQzZGQTI5RUM1
NDM0MEVEOTkyMTQ1NTAwQjg3QzdBQUVGQTI0NkM4LzAvQkMwN0IyQzhBNzFDMkY2
QjBDMTQ1QkNCQUNCNzU3OERCN0JDMDM3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzA3QjJDOEE3MUMyRjZCMEMx
NDVCQ0JBQ0I3NTc4REI3QkMwMzc5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM3NDFGMDVCOUNEMDFDRkYzMTQ3QUNGMkM2RkEyOUVDNTQzNDBFRDk5
MjE0NTUwMEI4N0M3QUFFRkEyNDZDOC8wLzMxMzczNzJlMzMzNzJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMTM5MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArElJDAN
BgkqhkiG9w0BAQsFAAOCAQEAXYIpt+tmKmuvAv0F7wb305CcW51tJDltq+0xrfBS
mBBo8xJ5OEC2DwB3Aq6p+6Ar+///Av4vwsbujKzzFsPhk5g1ag4hY6Knr0jZ0mEF
VIHWDrgeVvjTaII24i7bb8JfIu95rAwpE/XSLMbJTjSWOs2kh8CXBH7Htf6UeryK
EfixXQgwIiqAyJ3E/9Yv0mwZuokpN+UenqtVwujWqtyEJxnsG1GqKwWoGcPpO/pT
7K3Kju10LQETeqNOAvYKuQDISiwIoE3k3PGPaRaknOoRiBKdUERx9k+zbNzabj7I
B4Xy9KGwEDiBGsnfn3tMuLvS+asGt7GFjkDzRfJsocQHpA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:07:43 2025 by rpki-client