Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230332e302f32342d3235203d3e20323730303836.roa
File:                     3137372e3132382e3230332e302f32342d3235203d3e20323730303836.roa (raw, json)
Hash identifier:          jRM6Od+ckIbGDRyAZUWaYsNsodk9gJBfxNkHTOwVTg0=
Subject key identifier:   4B:91:2B:BA:D4:1D:05:53:96:1F:71:BE:8B:FC:DD:91:20:26:B8:1A
Certificate issuer:       /CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
Certificate serial:       7951145FA0B4F156B081988FEE078FB6B0DE5A58
Authority key identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230332e302f32342d3235203d3e20323730303836.roa
Signing time:             Sun 24 Aug 2025 17:20:00 +0000
ROA not before:           Sun 24 Aug 2025 17:15:00 +0000
ROA not after:            Sun 23 Aug 2026 17:20:00 +0000
asID:                     270086
IP address blocks:        177.128.203.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 23:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:51:14:5f:a0:b4:f1:56:b0:81:98:8f:ee:07:8f:b6:b0:de:5a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
        Validity
            Not Before: Aug 24 17:15:00 2025 GMT
            Not After : Aug 23 17:20:00 2026 GMT
        Subject: CN=4B912BBAD41D0553961F71BE8BFCDD912026B81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:d2:14:a3:4a:c1:24:9b:fd:22:c7:a5:6e:
                    ca:f8:fe:4b:ae:33:09:1d:87:f4:4b:e2:fb:08:c4:
                    74:50:d6:ed:1d:68:12:45:82:da:c0:a4:b6:e2:68:
                    88:c6:df:ac:46:ca:5d:1e:be:fd:92:45:44:22:75:
                    d2:b1:98:bf:d6:6e:dc:d7:43:6f:f9:ef:f7:34:b6:
                    11:01:ec:14:0d:bf:da:d7:5e:59:a1:26:39:29:5b:
                    ed:ed:fd:de:fe:1a:b8:30:f1:59:9d:21:e9:6e:2e:
                    dc:b9:bc:bc:d6:52:e8:25:19:8d:2d:07:04:41:07:
                    17:e1:a5:7a:8a:92:85:6f:4f:ce:ec:1e:76:b9:55:
                    c7:55:b0:38:a9:c3:39:0b:87:be:ee:d9:c5:3f:72:
                    6f:71:03:3d:2a:88:a7:6a:1f:24:de:c0:46:a1:e7:
                    31:26:0c:7a:1f:9a:5c:41:44:ef:45:82:e2:48:0b:
                    6c:33:48:42:80:e6:22:ea:ab:06:d8:1f:91:e0:91:
                    89:54:0b:c8:7c:5c:76:c5:42:0a:fb:4b:9f:49:1f:
                    ef:5d:cd:18:6b:92:ec:99:ba:6c:4f:d5:6d:f1:2b:
                    25:67:7a:62:be:89:de:a3:45:6a:8f:cf:53:c7:23:
                    4d:1e:1c:75:b6:16:27:41:52:e1:03:52:a9:fa:7f:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:2B:BA:D4:1D:05:53:96:1F:71:BE:8B:FC:DD:91:20:26:B8:1A
            X509v3 Authority Key Identifier:
                keyid:10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230332e302f32342d3235203d3e20323730303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:23:52:de:e0:7a:72:b3:b7:c0:f4:a5:d6:9d:f0:c2:e2:04:
         cd:0f:35:f9:84:8d:b4:4d:c8:f0:e1:12:bd:4a:96:3d:9d:bd:
         ea:7a:93:4e:c8:9a:da:36:c4:63:96:42:6b:ca:8a:ba:71:c0:
         a3:cb:fe:17:ac:d0:05:c4:a1:94:d1:d3:75:14:05:16:1a:02:
         d0:59:b5:51:69:fa:1f:e7:cc:50:71:09:a3:df:79:06:82:6e:
         d8:86:50:bf:7a:b3:94:4c:09:fa:10:73:87:c0:30:e7:d9:6b:
         0a:03:83:de:1d:ac:ce:fe:cf:03:df:7a:65:2f:26:ec:ff:b5:
         e4:de:d4:3a:3b:d9:67:01:b5:25:8c:44:f7:2c:e4:52:28:6e:
         a1:c9:7e:aa:d8:36:8c:b8:75:86:dd:25:42:d9:35:9d:81:33:
         fd:33:2a:93:f3:d0:0b:33:fb:ad:c3:5a:13:37:1c:c9:1d:3b:
         9d:f7:34:f1:b6:0a:ab:91:8e:bb:6e:85:9e:d6:9a:03:16:69:
         bf:4f:78:d2:f3:0d:3f:e4:15:64:6c:44:e6:cc:a7:34:35:66:
         6f:e8:e2:fe:7a:20:76:4e:00:bd:98:c6:89:8b:ea:54:92:1e:
         c7:60:24:7e:a7:cb:cc:6c:bf:d6:54:60:0f:6e:a5:40:25:31:
         bb:c3:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 02:16:51 2025 by rpki-client