Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32332d3233203d3e20323732393031.roa
File:                     3137372e37312e39382e302f32332d3233203d3e20323732393031.roa (raw, json)
Hash identifier:          YTZw0/H3ni3pek/wLb7eGz44NZkBO2zLiuXInY/IdmA=
Subject key identifier:   11:71:1A:37:98:6B:DF:43:DF:BC:CC:20:D9:31:12:47:8A:14:60:7F
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       0C4EA1582714083385C8CFA3DC86A8FABBACD0AE
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32332d3233203d3e20323732393031.roa
Signing time:             Fri 18 Sep 2026 14:36:07 +0000
ROA not before:           Fri 18 Sep 2026 14:31:07 +0000
ROA not after:            Fri 17 Sep 2027 14:36:07 +0000
asID:                     272901
IP address blocks:        177.71.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4e:a1:58:27:14:08:33:85:c8:cf:a3:dc:86:a8:fa:bb:ac:d0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Sep 18 14:31:07 2026 GMT
            Not After : Sep 17 14:36:07 2027 GMT
        Subject: CN=11711A37986BDF43DFBCCC20D93112478A14607F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:c9:99:dc:3e:c9:0e:23:4f:b6:cf:1f:be:
                    80:a9:24:93:f9:4c:6f:10:72:24:12:2a:70:a0:42:
                    e8:1a:e4:96:cd:af:18:0f:f5:4f:fe:06:79:24:ba:
                    c7:c5:10:dc:8e:ab:c8:b9:41:7a:d7:5c:07:1d:59:
                    ae:22:22:9a:58:b7:ef:a1:9a:ad:ab:10:20:21:e2:
                    ca:78:6e:55:8e:e9:cf:9c:3f:86:f2:f9:bc:8d:c4:
                    a2:ca:97:fc:80:c7:ac:81:0d:10:a0:bc:67:4a:3e:
                    9f:85:15:74:8b:e4:63:be:25:d9:83:5d:7c:30:c8:
                    ec:ca:75:3a:34:52:82:79:70:6a:36:80:28:10:e3:
                    16:b6:54:fb:70:d6:01:b0:df:67:98:c9:ec:1a:2f:
                    0a:a0:90:77:0d:0f:ed:9e:6e:5d:d9:b1:00:4d:87:
                    96:a2:09:9d:45:07:17:4e:57:35:cc:fa:fb:d7:64:
                    40:42:20:6c:43:13:7b:99:de:4b:a0:99:ea:3d:a0:
                    09:70:88:71:a3:84:2d:3e:56:00:27:33:66:b4:aa:
                    59:34:87:8a:cd:65:f3:3a:2c:15:7e:df:1e:74:00:
                    ae:25:87:a8:05:09:13:2d:48:ba:ee:c5:64:ab:89:
                    e6:ca:8d:59:bd:16:a3:c8:0c:03:1d:a5:fc:0a:58:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:71:1A:37:98:6B:DF:43:DF:BC:CC:20:D9:31:12:47:8A:14:60:7F
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32332d3233203d3e20323732393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:60:9f:b3:a1:d4:00:32:7b:15:3e:06:55:61:73:88:50:0c:
         5e:49:09:76:cc:8b:e3:7b:67:98:d4:96:23:f9:01:d3:67:1d:
         20:35:1a:c8:1f:8f:63:62:cd:b8:e8:69:54:5b:be:96:1c:b5:
         68:d3:24:0c:5d:33:18:ee:4f:79:09:ea:71:f3:bb:2f:37:45:
         c7:5a:f1:ee:bc:ad:d3:69:35:9a:42:49:9e:4c:52:c5:ae:3b:
         ea:96:a7:44:d1:b9:da:f1:a4:23:06:ea:a6:05:67:4b:fb:93:
         8f:71:36:fd:a5:12:cb:bf:95:26:c2:03:86:e0:9e:f6:21:87:
         e6:f4:95:ff:81:69:08:13:8e:79:95:bc:bd:7a:f8:60:a5:df:
         49:05:1e:05:00:f9:0e:99:df:1b:21:86:d1:6b:92:43:a9:ac:
         4f:83:49:ec:1d:6f:f1:b0:2b:77:da:05:2e:6c:aa:53:8e:91:
         27:2a:8d:e1:63:a1:46:19:f0:14:df:04:dc:4d:5b:f1:d6:5a:
         37:90:32:85:4c:2c:38:a2:d0:00:1c:82:b4:36:ae:f8:52:08:
         95:b7:63:92:2f:a4:d6:ea:15:19:64:20:da:98:68:71:3b:cf:
         ea:d9:51:7f:54:09:7b:d8:2b:63:39:22:4c:61:4e:c2:84:f7:
         79:40:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:05:58 2026 by rpki-client