Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa
File:                     3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa (raw, json)
Hash identifier:          wSY1ZuXsdKI1x30oBzPureAf4J4nQ5kV4pNw+vzIU8A=
Subject key identifier:   B4:B1:EA:8F:C9:F8:84:F6:00:E9:C2:45:2A:DF:0E:AC:8C:CA:9B:EB
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       27ABDD2881AB50352BCBBD327FEB39C1E92FB9D4
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa
Signing time:             Wed 19 Aug 2026 06:25:59 +0000
ROA not before:           Wed 19 Aug 2026 06:20:59 +0000
ROA not after:            Wed 18 Aug 2027 06:25:59 +0000
asID:                     270069
IP address blocks:        177.73.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ab:dd:28:81:ab:50:35:2b:cb:bd:32:7f:eb:39:c1:e9:2f:b9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Aug 19 06:20:59 2026 GMT
            Not After : Aug 18 06:25:59 2027 GMT
        Subject: CN=B4B1EA8FC9F884F600E9C2452ADF0EAC8CCA9BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:b8:a7:f3:de:68:10:cc:a0:ad:9b:e2:3b:
                    d2:30:0f:0f:31:31:92:4a:ce:64:63:98:70:d9:a8:
                    db:91:30:dd:ec:9c:75:5c:80:7b:04:96:28:cd:ba:
                    d3:7a:14:0e:f8:06:2f:6b:da:49:61:3b:0a:34:cb:
                    87:90:8f:3b:99:6b:15:b3:b8:8a:45:f4:40:3c:d9:
                    51:4d:99:dd:52:20:f3:e6:7c:15:8e:14:50:79:43:
                    c4:c9:ef:5b:d3:65:aa:8f:2c:7f:5a:c1:d5:86:22:
                    fc:34:f5:97:16:c4:2c:d2:a4:25:cc:6b:ae:6c:14:
                    86:87:71:91:2f:24:dc:37:5b:cd:a9:3b:3f:62:fa:
                    f3:38:a3:76:eb:e1:ed:50:01:5d:64:1a:e4:95:82:
                    94:43:aa:97:d3:e7:3e:6a:26:45:d1:0e:68:a0:27:
                    6c:43:fb:0b:ce:aa:8c:47:4a:d1:26:e7:ca:ce:f9:
                    46:7f:aa:f3:49:0b:c8:70:ef:ea:3e:82:15:93:d1:
                    bb:ef:b9:58:79:ab:d6:49:b3:2e:36:ce:52:07:7c:
                    e0:68:25:28:07:fe:85:72:12:cc:2b:bb:23:44:27:
                    92:ea:a2:3c:94:90:aa:46:4e:e8:65:cc:59:c2:c6:
                    0d:36:2c:e5:49:c9:e8:4b:3c:4f:3b:30:7b:e9:03:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B1:EA:8F:C9:F8:84:F6:00:E9:C2:45:2A:DF:0E:AC:8C:CA:9B:EB
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:a7:32:17:cf:8e:7a:10:c6:97:5f:b7:bc:1f:e7:25:0c:
         52:1e:04:4f:9b:67:4c:cc:83:ef:08:9c:d9:bd:7f:fb:96:fe:
         c0:d9:3b:7d:f3:47:da:1c:53:b5:f2:75:5d:13:68:d5:40:84:
         39:bb:26:9e:44:f7:0d:bc:95:d9:ad:98:25:9e:52:fe:5d:c1:
         c0:99:be:6a:ab:eb:b2:2b:26:f3:9a:72:91:ca:01:de:38:9a:
         ee:9e:56:8c:1d:9b:9e:b3:bc:f7:88:ec:78:98:a5:9a:75:82:
         b0:97:77:1e:5b:03:ff:d7:83:73:de:6e:b8:82:26:7c:bb:16:
         32:54:d5:74:3c:53:00:e8:b4:24:e5:31:26:fe:ae:b6:e3:00:
         4a:ee:33:50:74:d8:c1:e9:0a:29:71:c9:80:94:11:1c:f0:a8:
         a9:86:29:1c:a2:ed:1e:0b:52:16:76:4a:85:d3:a2:61:a0:8c:
         5b:93:0f:88:05:92:93:2b:31:12:48:8c:00:d3:39:2f:e6:05:
         34:b4:24:5b:96:14:66:0a:bc:5b:25:f5:e0:0c:e0:94:bf:61:
         89:00:59:12:4b:a9:aa:66:44:21:64:0b:f0:4b:a0:06:0c:67:
         ec:fe:9c:f4:71:c1:3a:46:19:fc:dc:04:e7:da:fc:84:3f:f1:
         33:bc:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:30:35 2026 by rpki-client