Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa
File:                     3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa (raw, json)
Hash identifier:          ihG7+liiX9eUYRjDFFSUYHfjljlo8OL/YWDWufS2uaI=
Subject key identifier:   25:4A:28:3E:D9:ED:B7:0E:97:A7:2F:71:EB:61:31:DF:D9:E4:76:BB
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       966BFDE3C4943CD49E52795C366BC849B075
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa
Signing time:             Wed 17 Sep 2025 05:47:01 +0000
ROA not before:           Wed 17 Sep 2025 05:42:01 +0000
ROA not after:            Wed 16 Sep 2026 05:47:01 +0000
asID:                     270069
IP address blocks:        177.73.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 17:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            96:6b:fd:e3:c4:94:3c:d4:9e:52:79:5c:36:6b:c8:49:b0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Sep 17 05:42:01 2025 GMT
            Not After : Sep 16 05:47:01 2026 GMT
        Subject: CN=254A283ED9EDB70E97A72F71EB6131DFD9E476BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:85:39:8b:72:75:fc:23:41:e3:60:82:8a:
                    9b:a6:4f:61:da:4c:0b:c5:3e:fd:6a:ef:1b:23:0b:
                    02:4c:81:da:ca:3e:fe:73:15:48:b4:98:a3:0c:5d:
                    9d:7a:40:3a:14:b8:12:fc:1c:c3:3a:ae:b7:7a:14:
                    91:e9:2f:28:8a:29:c3:bf:d2:81:c2:42:34:46:70:
                    1e:25:70:db:77:55:97:7e:dc:0d:c6:99:8d:e7:11:
                    57:75:87:0e:b8:52:c1:f2:ed:b8:1b:f8:67:26:51:
                    ea:d4:6c:6e:8a:b3:65:4d:cb:76:46:73:b6:76:7a:
                    3b:fe:f8:d9:97:6c:7e:b6:ce:43:e2:e4:34:85:7c:
                    06:86:6a:4a:6d:1b:eb:39:43:e1:2a:29:bb:94:97:
                    48:75:dc:90:6a:fb:16:84:23:a6:40:52:b3:e6:3c:
                    cb:86:10:9e:f3:9b:bc:39:f0:90:70:f0:ef:10:e7:
                    7f:d0:e9:00:70:5c:67:b7:72:5a:ff:8d:7c:39:75:
                    83:53:c8:11:e6:61:10:60:55:f8:22:fa:e5:23:e8:
                    54:f2:ba:02:59:70:0b:94:f6:0e:aa:37:b9:0e:59:
                    b1:50:79:e4:16:29:c1:a9:dd:60:c4:cd:dc:27:27:
                    2f:b8:79:5a:0f:e6:62:f1:2e:22:e3:f5:72:49:ea:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4A:28:3E:D9:ED:B7:0E:97:A7:2F:71:EB:61:31:DF:D9:E4:76:BB
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:a5:11:d4:c3:93:ac:4d:c9:dc:9c:47:45:4d:4a:8d:0a:
         5b:b7:92:fd:a6:5b:6a:b1:62:6f:f0:8f:9f:75:b8:e7:d1:56:
         a9:d2:60:05:2b:b5:92:a9:d0:b3:29:72:07:2f:ea:d9:eb:ec:
         49:bf:2c:60:28:70:2c:30:3b:fe:be:3c:fd:74:18:a0:1d:45:
         8a:b0:da:91:05:f5:37:db:da:b6:54:83:8e:ba:4e:47:55:a2:
         88:9f:c5:df:cc:61:10:34:bd:b7:01:4e:75:53:38:97:72:40:
         bb:c2:03:d7:e5:7e:79:90:51:df:15:72:c5:4a:0e:06:f3:89:
         11:e6:50:ca:14:79:6c:6d:b5:99:6b:2b:9a:e6:e8:a9:f5:62:
         df:e1:6a:98:23:83:68:59:ce:c1:d4:e0:09:07:7e:6c:4f:55:
         9d:71:6f:33:92:61:9d:6a:1b:86:97:e4:e7:50:b3:91:26:c1:
         ab:1b:71:e2:11:db:a9:5a:6e:dc:dc:bd:f9:c1:9f:f5:bd:ac:
         71:a3:ab:b6:ef:36:79:82:e7:24:a4:3c:5c:55:27:e7:80:ab:
         72:83:62:7e:c6:e3:16:31:da:2c:aa:c2:57:27:5e:a5:56:4f:
         d1:b2:9f:d9:f7:c8:01:7d:8b:50:8e:7c:6a:01:f7:6f:df:5f:
         a2:49:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:30:24 2025 by rpki-client