Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa
File:                     3230302e37372e3133382e302f32332d3234203d3e203237363732.roa (raw, json)
Hash identifier:          udc/QoCJGB//kWN8fTEyOfktIhXfhtYw6jO75QRmFAE=
Subject key identifier:   7C:E3:CC:71:50:57:E3:09:A9:0E:57:F4:2F:3F:3E:64:EF:7A:15:B4
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       661AAE98AAA5E8B2D866A1C70FFE1F79CF717C95
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa
Signing time:             Tue 15 Jul 2025 17:25:30 +0000
ROA not before:           Tue 15 Jul 2025 17:20:30 +0000
ROA not after:            Tue 14 Jul 2026 17:25:30 +0000
asID:                     27672
IP address blocks:        200.77.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 07:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1a:ae:98:aa:a5:e8:b2:d8:66:a1:c7:0f:fe:1f:79:cf:71:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jul 15 17:20:30 2025 GMT
            Not After : Jul 14 17:25:30 2026 GMT
        Subject: CN=7CE3CC715057E309A90E57F42F3F3E64EF7A15B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:04:3f:2d:32:1d:33:30:d4:82:f0:e7:1b:
                    45:ca:68:7d:8d:69:33:f2:1e:f8:75:77:9b:27:bc:
                    de:7a:5b:da:c5:1b:3d:bf:99:78:8b:fe:a8:0c:72:
                    cc:65:07:4f:80:90:a0:c0:75:19:21:5c:ef:28:41:
                    19:c0:c1:6f:7d:31:e3:71:48:dd:97:26:d0:03:ee:
                    b2:25:a4:93:34:86:a5:9c:e3:3c:9a:22:ec:7f:f9:
                    f5:7c:57:66:d9:7f:37:ca:83:e8:12:08:c5:51:f0:
                    f9:b6:39:71:b5:9d:91:77:24:0e:4a:15:7c:03:f2:
                    ef:2e:b7:e2:62:67:52:14:ac:ba:19:43:9e:5d:a3:
                    e4:0e:cc:d2:d2:a3:11:fc:e7:0e:5c:03:5a:d0:74:
                    49:bf:48:b4:e8:d9:0f:9f:c6:1d:fb:b7:38:b6:d5:
                    9a:f9:f8:aa:2f:69:a6:65:e6:d3:9e:2e:d5:e2:38:
                    d1:b0:11:fd:8d:28:3a:03:f0:3c:0e:da:b0:32:e1:
                    b5:30:93:4a:95:c9:68:1f:12:97:76:39:0b:ee:2c:
                    dd:c9:6f:cf:74:c5:da:81:15:5e:4f:56:d8:31:1d:
                    75:1f:d2:25:2f:dd:a9:e8:a2:97:97:96:d6:83:6a:
                    3a:51:d4:0e:b2:04:05:1d:9f:e8:a0:81:48:f5:79:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E3:CC:71:50:57:E3:09:A9:0E:57:F4:2F:3F:3E:64:EF:7A:15:B4
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:68:11:e4:9f:09:8b:c9:7d:22:74:96:24:fe:76:75:01:f9:
         5b:d0:54:09:0c:cd:53:3c:57:e9:cb:73:08:c6:6a:08:66:93:
         ab:2c:4e:8c:e1:d1:c6:5f:89:3a:00:28:47:eb:a8:2f:ee:7c:
         5c:0a:fd:38:22:bd:f2:fd:89:1e:68:33:a8:e5:f7:34:a7:60:
         b3:2e:19:22:25:76:04:19:c3:2f:bb:fd:75:e6:a9:35:91:0a:
         a5:8e:f0:08:72:b3:79:64:42:be:0c:5d:e6:9f:b3:c5:e2:3a:
         73:8a:e2:81:0c:f2:8b:24:45:81:5b:fa:9f:5d:45:93:68:5c:
         5f:fc:0a:86:47:15:9f:0a:17:43:c6:eb:d4:52:36:25:2a:83:
         9d:f0:3a:be:f6:18:d1:cf:45:f8:33:b6:da:30:23:51:07:ee:
         1b:85:51:9f:a0:a9:6c:cc:fc:76:3d:3f:14:cf:71:3e:ae:f8:
         cf:e0:b8:52:e3:e3:a2:e4:66:fa:c9:6c:84:76:3e:b4:7f:f8:
         3d:ba:fb:53:10:63:ca:e8:6c:86:ed:79:18:6a:d4:6a:c3:28:
         5f:4a:53:a1:9f:e6:c1:44:ec:c8:03:4a:49:2b:b7:94:aa:17:
         ec:1c:7d:07:0d:7e:8f:41:79:92:8b:1c:c7:0c:36:b8:78:37:
         45:a6:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:19:40 2025 by rpki-client