Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa
File:                     3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa (raw, json)
Hash identifier:          BDHMVPU35dgMMv3kTHiNheU6z8O2L/RBsZ8vQcEDeKI=
Subject key identifier:   2C:A5:BB:53:44:44:09:94:EB:FD:2E:0A:25:45:83:65:05:8E:F0:03
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       6F90BB2B1690EDBC5A9EDA579C790DCCE55BBFA3
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa
Signing time:             Wed 17 Sep 2025 05:47:02 +0000
ROA not before:           Wed 17 Sep 2025 05:42:02 +0000
ROA not after:            Wed 16 Sep 2026 05:47:02 +0000
asID:                     270069
IP address blocks:        177.67.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 17:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:90:bb:2b:16:90:ed:bc:5a:9e:da:57:9c:79:0d:cc:e5:5b:bf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Sep 17 05:42:02 2025 GMT
            Not After : Sep 16 05:47:02 2026 GMT
        Subject: CN=2CA5BB5344440994EBFD2E0A25458365058EF003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:19:95:f7:cf:2b:b0:99:fc:fe:f1:61:e2:
                    ea:7f:3c:0d:ee:70:3b:89:28:78:24:25:5d:02:f8:
                    19:b8:b1:2a:e0:fa:b0:33:2e:cf:11:2f:52:85:4a:
                    81:3e:c2:0e:38:a9:e6:ea:3d:32:01:16:b2:49:a9:
                    2d:f5:36:1e:a5:f2:84:dd:45:b2:5f:ed:41:28:62:
                    1c:90:a7:c0:7f:ef:91:c9:56:81:5a:10:7b:d0:1a:
                    73:7f:cf:2a:ba:4b:b1:e8:74:51:ae:07:0c:3b:89:
                    1c:26:2f:6c:02:ed:95:76:e9:11:47:99:7c:04:97:
                    fc:b4:d4:c2:ba:4c:f5:e0:22:b7:d4:e4:97:1f:2a:
                    19:d5:5a:de:f9:db:ac:76:04:f5:21:68:7e:57:73:
                    ee:5a:35:ff:90:a0:0d:49:9a:59:a2:8d:cf:61:7d:
                    67:7e:8c:6e:51:4d:78:9a:a2:a8:2a:9f:11:20:4f:
                    6a:79:e0:cc:4e:c3:da:08:19:8a:ff:dd:73:bc:19:
                    31:f0:73:c8:44:18:ee:d4:eb:79:23:2f:86:fb:fc:
                    20:f0:5d:29:9d:a5:10:e1:52:27:b4:f8:7e:89:14:
                    b4:6e:00:23:99:6b:fb:6a:a6:6a:b1:ac:9d:f8:28:
                    50:fc:95:f2:8b:1f:05:ee:dc:49:16:3c:77:e9:7c:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A5:BB:53:44:44:09:94:EB:FD:2E:0A:25:45:83:65:05:8E:F0:03
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:db:fd:2f:d6:96:b6:35:0c:c3:52:7c:70:84:e4:c0:50:
         bf:1c:d1:72:15:af:5f:ba:02:57:4a:d6:03:71:46:35:73:15:
         2e:03:c4:bc:a5:28:51:49:a3:af:02:ea:65:52:77:b1:f3:79:
         4f:82:aa:ff:45:7b:ab:5a:26:19:ac:9e:9e:47:db:ae:ed:0f:
         a6:48:db:91:d3:59:32:ae:fc:98:eb:86:97:00:89:6f:9a:1b:
         65:46:6f:6f:19:66:f6:27:94:00:bd:35:e0:96:ee:2d:7b:3a:
         98:62:d2:14:b3:a5:84:af:bf:6f:84:87:61:b7:f9:6d:f6:44:
         ee:9b:a6:9d:3e:55:16:d0:df:11:e7:cd:2f:14:2b:59:aa:04:
         80:27:03:98:2c:01:34:64:8b:cd:07:6e:8d:ee:0b:9d:f4:e6:
         ea:61:91:c7:34:2b:29:a0:78:e9:25:a7:52:d8:86:38:dc:8e:
         a8:51:99:a1:8e:74:d6:83:6d:34:56:4f:62:cb:de:1c:a0:01:
         64:b8:0e:3b:33:ae:c1:a7:ff:fb:26:96:fc:99:25:0f:1d:80:
         39:c4:86:24:07:24:ef:75:80:32:e3:7a:e5:e7:ef:77:0b:91:
         a0:45:72:25:84:e0:72:f1:7d:56:e9:0a:2c:6d:20:4d:df:dd:
         5f:21:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:30:14 2025 by rpki-client