Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33382e302f32342d3234203d3e20323731393835.roa
File:                     3137372e33372e33382e302f32342d3234203d3e20323731393835.roa (raw, json)
Hash identifier:          JWDm6YsfKhLgO6ytj3xdVyMwIW+4lCBcWPtQMqN2Zpc=
Subject key identifier:   C0:9C:A9:7A:93:DB:43:6E:69:17:26:6C:A8:4D:67:80:15:52:61:B4
Certificate issuer:       /CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
Certificate serial:       0E3DBED5A86F9F16C18132963256882047E247AD
Authority key identifier: BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33382e302f32342d3234203d3e20323731393835.roa
Signing time:             Tue 22 Jul 2025 21:26:17 +0000
ROA not before:           Tue 22 Jul 2025 21:21:17 +0000
ROA not after:            Tue 21 Jul 2026 21:26:17 +0000
asID:                     271985
IP address blocks:        177.37.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3d:be:d5:a8:6f:9f:16:c1:81:32:96:32:56:88:20:47:e2:47:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
        Validity
            Not Before: Jul 22 21:21:17 2025 GMT
            Not After : Jul 21 21:26:17 2026 GMT
        Subject: CN=C09CA97A93DB436E6917266CA84D6780155261B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:49:8a:32:cd:d5:fb:a2:6a:ab:89:86:32:
                    21:19:dd:7e:42:22:4a:00:05:e7:33:c8:cc:95:9c:
                    ea:d9:75:89:b5:a1:1d:90:9c:eb:c2:f8:00:79:cc:
                    f3:ed:4a:f3:25:f3:6e:94:08:28:ba:d8:13:3b:af:
                    a3:89:c7:6d:63:a2:14:f9:89:ba:28:22:00:37:cc:
                    5e:49:21:0a:84:9a:ed:b9:82:2a:c3:f9:8e:6e:4b:
                    b6:fe:f4:75:6e:87:f4:3d:e2:72:0f:6e:d1:66:e4:
                    de:e5:f9:86:8e:1d:0a:8b:7c:f1:a4:3e:95:97:d4:
                    21:e1:54:ae:64:6b:a5:68:92:92:6f:6f:6e:61:d8:
                    30:da:0d:0b:ee:5f:c7:37:09:f8:10:0e:7a:86:7f:
                    76:5a:4e:49:70:38:03:8c:2d:a3:4c:3d:4c:54:b3:
                    40:15:d7:74:b8:9e:e7:41:d3:4b:22:77:30:25:4a:
                    cd:51:51:b5:4b:cb:85:c5:42:dd:18:55:ca:e1:50:
                    5d:78:92:19:91:4b:90:de:67:7b:09:de:aa:d2:19:
                    25:5e:28:e6:a4:8a:41:d4:2f:4c:6e:f2:97:15:85:
                    cf:71:17:47:b8:db:9b:30:43:2c:6e:5b:09:20:0a:
                    52:f1:91:d6:69:3e:a7:ad:10:05:6a:af:22:2e:d6:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9C:A9:7A:93:DB:43:6E:69:17:26:6C:A8:4D:67:80:15:52:61:B4
            X509v3 Authority Key Identifier:
                keyid:BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33382e302f32342d3234203d3e20323731393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:16:bb:6f:a5:44:74:6b:07:24:28:9c:d5:e1:42:ad:56:c2:
         20:6b:32:a4:a0:ac:a1:33:d2:7c:7b:ae:a4:a8:e0:ca:de:c4:
         6e:b4:68:99:d8:e4:91:64:84:0c:f7:96:dc:79:ef:16:83:01:
         5b:46:a1:bb:9d:c9:ba:10:e1:b4:ba:97:cc:52:4e:5b:bd:e6:
         31:25:93:55:c1:05:58:d7:f1:03:82:2d:a8:c3:9e:e3:5b:8b:
         b0:cf:87:cb:c2:3a:d9:36:fa:81:f0:7c:d5:2c:94:33:e5:34:
         50:16:c4:82:09:34:ba:dc:7e:3c:e3:83:f1:4a:94:3b:9d:1a:
         fb:69:15:90:a8:d7:c3:9e:e5:75:25:ed:52:52:fc:70:cd:ad:
         31:50:3c:70:a6:ed:80:98:a7:3f:45:aa:0d:79:37:6b:a3:1a:
         d4:a7:b3:1a:e2:7e:40:a0:bc:18:8d:39:5d:58:1a:01:14:67:
         88:42:07:28:32:c3:e8:d9:48:72:af:cb:34:8c:74:26:f6:c4:
         d4:8c:36:d4:8e:9d:ef:f1:c7:29:f3:9e:d7:aa:bc:49:ae:1b:
         ed:ad:a0:b0:86:82:4a:9d:60:68:77:75:95:95:6e:2c:05:b1:
         8b:4c:d3:03:53:88:67:e3:3f:ff:6e:ea:db:16:48:77:00:3e:
         1c:89:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:08:14 2025 by rpki-client