Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39372e302f32342d3234203d3e20323732393031.roa
File:                     3137372e37312e39372e302f32342d3234203d3e20323732393031.roa (raw, json)
Hash identifier:          k+vNMF3TLgOQynEchR/mj5Ke2kjyFMuflJgG+NuLQvI=
Subject key identifier:   B2:87:15:B4:8C:F0:D0:10:4E:1B:98:CA:10:84:AD:CA:6C:7E:5C:EE
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       083800A0BDC95E6129A2D65F6ADB887C4A789F2E
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39372e302f32342d3234203d3e20323732393031.roa
Signing time:             Fri 18 Sep 2026 14:36:07 +0000
ROA not before:           Fri 18 Sep 2026 14:31:07 +0000
ROA not after:            Fri 17 Sep 2027 14:36:07 +0000
asID:                     272901
IP address blocks:        177.71.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:38:00:a0:bd:c9:5e:61:29:a2:d6:5f:6a:db:88:7c:4a:78:9f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Sep 18 14:31:07 2026 GMT
            Not After : Sep 17 14:36:07 2027 GMT
        Subject: CN=B28715B48CF0D0104E1B98CA1084ADCA6C7E5CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:3a:70:5e:5c:7b:2b:dd:c4:e9:4c:09:89:
                    88:de:e3:b7:47:c4:52:6a:b5:d3:de:63:91:1b:cf:
                    67:18:68:b5:10:a4:ab:db:b9:0b:0d:da:73:85:8c:
                    4b:96:5b:d7:c4:18:70:8e:66:d0:bd:87:ee:19:65:
                    94:9a:fa:ef:b5:55:13:9e:83:52:55:b5:ea:e9:8f:
                    de:b4:b2:50:64:30:eb:53:7f:d4:a6:fd:5b:52:df:
                    5e:0c:50:33:80:b5:f5:5e:96:ac:c4:35:a0:c3:a5:
                    87:9f:0d:b0:66:a1:28:c6:f5:76:f6:ce:4f:d2:92:
                    f7:d1:88:bb:d5:fd:b6:5a:29:c7:e6:c9:bd:6f:6a:
                    dd:20:0f:9e:92:65:d3:dd:c7:cd:0f:0a:c3:c1:57:
                    52:16:65:1d:46:ac:c6:56:ad:06:a2:8f:bf:25:c5:
                    81:21:b0:46:05:67:ea:9b:14:c6:e6:cb:eb:a2:24:
                    c7:d7:14:08:e1:2f:56:db:f7:b2:b1:2d:d4:95:e0:
                    60:e5:a1:3d:32:88:7d:5c:c4:1a:4b:cb:c9:92:82:
                    5d:6b:3e:a8:e8:94:97:9e:80:4e:04:3d:44:1a:ec:
                    c9:9d:3f:15:9f:5e:84:0b:e8:78:13:ef:4e:00:8c:
                    75:78:e3:1a:18:a0:8c:6f:d4:bd:05:ec:55:f6:84:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:15:B4:8C:F0:D0:10:4E:1B:98:CA:10:84:AD:CA:6C:7E:5C:EE
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39372e302f32342d3234203d3e20323732393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:e8:8f:e2:04:75:2d:5d:f0:d1:64:bb:e9:2e:81:1d:eb:
         1e:62:8d:e9:2a:65:b6:95:a9:e6:48:00:fd:5c:64:0b:fd:a6:
         b2:48:44:f7:0f:b1:8a:7c:5f:7e:5b:5c:dc:0f:7e:06:2b:90:
         69:43:ea:21:51:46:b0:80:b4:42:8a:02:f1:17:59:38:0f:82:
         d8:9f:ca:61:ea:5a:76:e3:3c:52:eb:fb:24:ab:74:09:7c:33:
         d5:cd:dc:37:b0:34:a7:04:9a:1a:b1:fe:40:c5:01:04:2e:1a:
         ab:fe:e0:91:f1:48:6a:82:04:ad:1e:09:e6:5f:c6:ae:10:9c:
         34:8e:74:48:4f:62:b4:82:17:4a:bd:c2:25:f1:2f:1f:d4:dc:
         eb:0d:22:35:e6:a0:a0:05:46:c1:ca:da:49:5a:07:02:fb:fb:
         dd:0a:23:b5:3c:49:fa:0a:13:8a:c5:66:b9:31:ff:86:07:df:
         72:c2:9e:7a:69:96:4f:a3:27:cb:56:a2:d8:69:10:44:1b:e9:
         32:a1:d7:4b:d2:c1:85:ca:b4:a7:5b:3c:cc:c5:9a:bc:53:61:
         03:68:a7:e8:c6:ba:7d:42:15:19:a7:4f:b8:d3:6b:79:76:e5:
         75:11:08:04:d7:18:43:3a:df:44:25:cb:bf:82:57:db:b7:db:
         68:24:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:31:25 2026 by rpki-client