Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3234203d3e203137323837.roa
File:                     3139302e3137302e36342e302f31382d3234203d3e203137323837.roa (raw, json)
Hash identifier:          /a2ZinJKml6u8JuoJ9ftriY+v/FhzEAkj5ZvV/ysjBc=
Subject key identifier:   7A:69:F7:72:98:71:0F:2C:8E:10:6A:25:DC:58:A5:0B:A4:AA:16:E6
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       69DC2DD9F893EBBC912F6F3B09A6FD8E09B68D3A
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3234203d3e203137323837.roa
Signing time:             Fri 25 Jul 2025 23:34:10 +0000
ROA not before:           Fri 25 Jul 2025 23:29:10 +0000
ROA not after:            Fri 24 Jul 2026 23:34:10 +0000
asID:                     17287
IP address blocks:        190.170.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 00:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dc:2d:d9:f8:93:eb:bc:91:2f:6f:3b:09:a6:fd:8e:09:b6:8d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Jul 25 23:29:10 2025 GMT
            Not After : Jul 24 23:34:10 2026 GMT
        Subject: CN=7A69F77298710F2C8E106A25DC58A50BA4AA16E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:be:dd:e4:f8:98:fa:de:73:d6:07:49:d7:71:
                    6a:70:46:98:74:f6:13:65:2e:c6:95:9c:9b:9a:11:
                    2f:ca:6f:6a:e0:ca:02:79:5c:bf:39:3a:f4:55:d9:
                    a9:25:13:98:a5:0e:83:5d:28:26:bc:99:85:d9:5e:
                    4a:ea:29:ab:9e:35:ef:6b:3a:82:91:8c:d9:94:6f:
                    a4:1a:01:6c:c6:f5:83:6a:3c:57:ce:48:46:ae:63:
                    fd:08:c8:4c:92:f2:e7:fb:f3:e5:59:2c:16:be:87:
                    a7:85:7a:76:6d:a1:2e:b1:4b:28:21:f1:9d:e1:d8:
                    6c:70:1e:e2:34:26:6e:5b:04:f4:a5:2c:f7:56:7c:
                    91:bb:61:35:99:68:7a:46:14:11:d8:5a:85:4a:b4:
                    c4:4a:30:89:f5:c8:5d:a8:13:a6:66:ea:40:71:e3:
                    58:a7:da:13:fd:26:d1:00:6d:88:b4:7f:5c:d4:e0:
                    b4:5c:07:08:c5:de:2c:9a:0a:bd:ec:20:cd:88:ca:
                    75:04:21:f7:05:57:c0:c4:09:d1:5d:01:c9:d2:7d:
                    a9:bd:4e:1e:78:95:b1:9e:77:c3:0f:ef:4d:ed:6c:
                    fc:82:96:8b:70:fd:91:a7:7a:60:a7:ea:ab:ad:65:
                    8f:50:b9:a9:83:20:69:ab:95:81:53:42:fb:9e:cf:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:69:F7:72:98:71:0F:2C:8E:10:6A:25:DC:58:A5:0B:A4:AA:16:E6
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3234203d3e203137323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         63:40:de:cd:c8:83:5f:0c:c9:9a:25:23:85:43:4d:58:0c:73:
         2d:55:b6:d6:96:69:71:34:ef:07:5b:c8:ba:a2:8f:4c:2b:2e:
         c4:4d:26:c6:fb:97:01:ca:09:76:d0:a0:a0:7d:8e:80:ec:a5:
         40:b7:a6:ce:d3:cf:0e:88:5b:16:ce:03:5a:07:6d:38:66:fb:
         c4:a5:e4:ca:9c:4e:62:b4:de:82:26:30:e9:d1:6f:15:0c:26:
         8a:fd:82:e4:13:57:02:28:e1:ac:97:69:bd:23:28:4a:2a:e6:
         48:fb:17:3a:32:f7:86:8f:c7:d5:bf:5d:6f:43:45:59:8b:a5:
         e4:5d:43:0d:d9:db:70:2e:51:a9:9c:7d:ac:01:6c:67:9f:da:
         5f:90:83:86:e8:f7:c9:51:94:b8:b7:f4:07:42:b8:1a:bd:d7:
         9e:03:07:8e:a8:34:03:c9:54:2f:5a:75:df:65:8c:b3:e4:ff:
         ec:ac:ee:83:52:38:83:4c:f4:b5:3b:16:07:39:cd:bc:c0:e6:
         70:a6:f6:8d:9f:e8:f5:c7:c9:d1:7a:5c:3a:4c:72:5c:22:a8:
         a1:79:fe:13:d6:cc:16:56:88:ac:b1:23:78:f1:a7:d4:d0:5e:
         de:84:02:67:2c:81:28:30:89:80:75:51:bc:9e:f5:c0:54:68:
         c6:79:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:21:36 2025 by rpki-client