Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa
File:                     3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa (raw, json)
Hash identifier:          C+qRYmGdU1BY8KtXIOFoxb99AhTgSB+3vS1id4pNNtc=
Subject key identifier:   28:F8:EF:07:16:D6:39:80:CD:C4:38:C0:B4:C5:D6:F1:72:73:68:5D
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       02EB32202B5B1A934AF8B2EA2BA6F5904D426462
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa
Signing time:             Wed 03 Sep 2025 04:42:49 +0000
ROA not before:           Wed 03 Sep 2025 04:37:49 +0000
ROA not after:            Wed 02 Sep 2026 04:42:49 +0000
asID:                     266777
IP address blocks:        160.20.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:eb:32:20:2b:5b:1a:93:4a:f8:b2:ea:2b:a6:f5:90:4d:42:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Sep  3 04:37:49 2025 GMT
            Not After : Sep  2 04:42:49 2026 GMT
        Subject: CN=28F8EF0716D63980CDC438C0B4C5D6F17273685D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:51:22:40:07:c6:66:72:c4:85:3b:75:1d:
                    1d:8a:7c:11:78:2d:f1:c5:e2:a6:9e:b0:70:5b:c0:
                    1e:6d:1b:02:8e:7a:d3:fa:9b:f5:59:a7:fd:90:2a:
                    30:3a:21:df:81:61:26:6c:82:6c:31:b8:2f:f5:a1:
                    e4:de:88:be:82:74:2b:31:96:ed:b3:ec:35:1a:85:
                    39:6c:ec:27:03:2f:56:47:26:34:c8:ad:66:8f:24:
                    fc:87:f6:d8:34:5a:af:5e:e6:ee:dd:b0:2d:a9:1d:
                    f8:76:d0:22:f4:ab:4f:77:11:68:5f:a9:cc:e3:80:
                    3f:6d:ca:9c:92:94:fb:af:81:a9:b9:47:a8:b0:38:
                    4c:60:8e:61:65:db:10:dc:fd:f1:9b:f0:07:e6:f4:
                    32:e5:23:3d:54:ae:3c:c3:24:94:89:73:a5:2f:a8:
                    6d:73:73:4d:6c:df:cf:69:fc:63:16:e9:60:bb:98:
                    41:d0:07:5f:47:a9:43:c3:94:12:d2:e1:59:8b:d9:
                    d3:c4:55:ff:4d:64:53:07:81:99:79:e2:77:ae:9d:
                    3b:4a:e4:76:a0:53:36:72:42:6a:3e:57:90:a4:35:
                    8c:c6:f5:84:13:c2:75:5c:24:90:23:5c:78:2c:97:
                    d1:ae:d8:d6:e2:24:04:80:aa:04:6d:03:4f:4c:a6:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F8:EF:07:16:D6:39:80:CD:C4:38:C0:B4:C5:D6:F1:72:73:68:5D
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:77:c6:82:08:42:1f:eb:fd:18:44:28:72:48:05:a6:fa:a1:
         bd:2a:1c:70:4a:2f:ee:20:cc:86:ab:bd:66:aa:be:d9:e2:a2:
         03:49:d0:4e:7a:bb:c3:34:00:07:f9:ff:05:e6:45:5e:7b:75:
         92:35:5d:b2:fe:26:72:43:0a:b9:14:14:a2:a5:0e:ba:8f:c8:
         43:d8:6d:0c:d7:cd:4c:cc:33:49:9e:47:7c:09:48:fe:96:5b:
         88:ff:fc:15:ff:6f:e0:59:10:79:b6:88:c2:d6:92:ec:53:bb:
         0a:5f:fe:e4:33:47:c6:62:26:4d:89:5f:ef:62:2f:a4:ae:4d:
         12:8e:33:af:dc:73:36:f7:21:81:94:40:cb:81:68:d6:18:72:
         a5:6e:6b:17:ca:54:8d:97:3f:c9:f7:0d:82:38:e3:a1:d7:d3:
         0a:bd:eb:7c:dc:f4:4f:d6:e2:fc:7c:b6:fb:5d:a7:27:28:bd:
         88:fb:0a:a9:b4:e9:75:2a:86:72:18:1f:fa:04:56:49:94:29:
         ef:96:5a:5e:fb:2f:f4:1f:f0:fa:77:31:51:fd:23:56:cb:db:
         a6:a5:33:15:b9:2f:e9:00:a9:e8:9a:7c:05:79:f9:db:71:9f:
         48:df:6b:7e:89:55:ff:5f:8a:6c:cd:7f:5e:43:1d:23:dd:3c:
         8b:2b:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:08:22 2025 by rpki-client