Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39392e302f32342d3234203d3e20323732393031.roa
File:                     3137372e37312e39392e302f32342d3234203d3e20323732393031.roa (raw, json)
Hash identifier:          jV0BAInZfKHOSC6rUtPCgT6z4a7CzG0kdVmiftmloF4=
Subject key identifier:   73:CA:89:4D:F5:69:00:B7:AD:21:49:A9:84:5D:FB:AB:E5:8F:EB:A1
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       15AC3544B072AA37B297168EF9D65BEE8157F339
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39392e302f32342d3234203d3e20323732393031.roa
Signing time:             Fri 18 Sep 2026 14:36:06 +0000
ROA not before:           Fri 18 Sep 2026 14:31:06 +0000
ROA not after:            Fri 17 Sep 2027 14:36:06 +0000
asID:                     272901
IP address blocks:        177.71.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ac:35:44:b0:72:aa:37:b2:97:16:8e:f9:d6:5b:ee:81:57:f3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Sep 18 14:31:06 2026 GMT
            Not After : Sep 17 14:36:06 2027 GMT
        Subject: CN=73CA894DF56900B7AD2149A9845DFBABE58FEBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:f1:13:fd:c1:66:54:e3:b6:10:cd:84:21:
                    05:48:98:b3:d8:f7:02:bd:a9:75:35:66:5d:34:6f:
                    b8:34:8c:11:0a:19:8c:1c:63:4b:16:12:d8:24:49:
                    cc:cb:d3:57:47:00:f9:35:68:18:83:38:44:9e:f2:
                    4a:b0:61:4a:90:c3:24:84:b5:e7:4b:2c:2d:de:fa:
                    6c:24:e8:12:65:66:5d:d3:71:9f:a2:6a:7b:90:7a:
                    fb:df:11:21:b9:54:3e:f6:8c:3a:3d:aa:51:04:18:
                    2b:8e:a9:95:0e:ee:3e:dc:42:bb:b4:a6:65:c6:31:
                    b3:0e:4b:8d:8e:68:74:91:ad:71:f1:95:08:56:fc:
                    00:b6:e8:ce:fe:9c:cc:40:95:c1:13:37:38:64:a7:
                    b2:23:d9:69:6b:40:7c:cc:4c:3b:3b:6d:7f:9f:77:
                    9b:8b:d1:d2:9f:54:79:42:83:d4:f3:ee:6b:03:e5:
                    b7:6c:af:da:53:7c:08:e3:0d:e3:99:53:04:83:f4:
                    92:b5:11:f5:e5:ef:29:56:74:f8:4b:2f:4b:70:f3:
                    e0:b4:af:1e:37:d8:52:3d:48:fe:9f:ca:6e:62:7f:
                    9f:b2:27:aa:a0:74:3d:fd:fc:d8:60:a4:9b:67:50:
                    fc:2c:86:45:95:db:2e:84:58:91:e3:ce:e3:aa:c9:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CA:89:4D:F5:69:00:B7:AD:21:49:A9:84:5D:FB:AB:E5:8F:EB:A1
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39392e302f32342d3234203d3e20323732393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:d7:ed:b1:42:68:e3:67:cb:96:5d:2c:d5:23:c6:da:cc:
         9e:18:11:6b:b4:c0:64:b8:a5:4f:b6:8a:c5:27:cc:0a:e5:ae:
         03:89:ba:d5:72:62:c6:1c:6f:a7:65:d4:f1:fd:8f:9a:25:eb:
         2b:ae:6a:9e:ed:be:be:a7:45:57:16:8a:9f:07:bf:e2:89:4d:
         e7:f5:0a:9b:f9:11:ac:39:74:15:83:18:af:09:30:e4:8c:e2:
         e6:66:1f:bc:62:69:56:40:7a:61:c2:52:21:b9:f7:64:23:0f:
         59:10:7a:ca:70:4c:31:f9:5a:d7:d5:fe:58:ef:68:b1:c8:ac:
         03:c2:f8:9f:f4:76:74:13:5f:68:a3:a3:be:56:9e:50:bb:2f:
         a9:16:fc:c6:47:f3:ec:ac:89:2a:64:8c:1d:9c:42:5a:3c:66:
         f6:bd:3e:b7:d8:2c:e5:28:09:86:33:7b:c8:08:b6:e7:8f:aa:
         45:a3:ee:99:40:21:f5:8f:35:b5:b0:a5:6b:64:d8:14:48:e4:
         2d:02:66:f7:52:a9:7e:ce:fd:f9:80:62:f3:31:82:56:76:42:
         b9:e3:0d:c0:9d:6f:fa:b5:ba:09:21:33:63:a9:54:dd:15:c4:
         f1:47:ec:24:e0:af:78:fb:8e:ac:8d:ec:d7:b4:7f:c2:eb:f3:
         65:d3:05:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFaw1RLByqjeylxaO+dZb7oFX8zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUyMTgyOEQxQzE4REExNTg5RTBDODE5NEM3MDA2MjU2
NjUyNzdCMjAeFw0yNjA5MTgxNDMxMDZaFw0yNzA5MTcxNDM2MDZaMDMxMTAvBgNV
BAMTKDczQ0E4OTRERjU2OTAwQjdBRDIxNDlBOTg0NURGQkFCRTU4RkVCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxU/ET/cFmVOO2EM2EIQVImLPY
9wK9qXU1Zl00b7g0jBEKGYwcY0sWEtgkSczL01dHAPk1aBiDOESe8kqwYUqQwySE
tedLLC3e+mwk6BJlZl3TcZ+ianuQevvfESG5VD72jDo9qlEEGCuOqZUO7j7cQru0
pmXGMbMOS42OaHSRrXHxlQhW/AC26M7+nMxAlcETNzhkp7Ij2WlrQHzMTDs7bX+f
d5uL0dKfVHlCg9Tz7msD5bdsr9pTfAjjDeOZUwSD9JK1EfXl7ylWdPhLL0tw8+C0
rx432FI9SP6fym5if5+yJ6qgdD39/NhgpJtnUPwshkWV2y6EWJHjzuOqyekRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUc8qJTfVpALetIUmphF37q+WP66EwHwYDVR0j
BBgwFoAURSGCjRwY2hWJ4MgZTHAGJWZSd7IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjQzMzEwMzk0RDI0QkRBMjBEOEM3NEE2Q0FGOEZCMTBD
NEM5MjdEQTI1MTVDMzAyRDgyNkZCMDA4Q0ZGRkEyLzAvNDUyMTgyOEQxQzE4REEx
NTg5RTBDODE5NEM3MDA2MjU2NjUyNzdCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NTIxODI4RDFDMThEQTE1ODlF
MEM4MTk0QzcwMDYyNTY2NTI3N0IyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY0MzMxMDM5NEQyNEJEQTIwRDhDNzRBNkNBRjhGQjEwQzRDOTI3REEy
NTE1QzMwMkQ4MjZGQjAwOENGRkZBMi8wLzMxMzczNzJlMzczMTJlMzkzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALFHYzAN
BgkqhkiG9w0BAQsFAAOCAQEAbzDX7bFCaONny5ZdLNUjxtrMnhgRa7TAZLilT7aK
xSfMCuWuA4m61XJixhxvp2XU8f2PmiXrK65qnu2+vqdFVxaKnwe/4olN5/UKm/kR
rDl0FYMYrwkw5Izi5mYfvGJpVkB6YcJSIbn3ZCMPWRB6ynBMMfla19X+WO9oscis
A8L4n/R2dBNfaKOjvlaeULsvqRb8xkfz7KyJKmSMHZxCWjxm9r0+t9gs5SgJhjN7
yAi254+qRaPumUAh9Y81tbCla2TYFEjkLQJm91Kpfs79+YBi8zGCVnZCueMNwJ1v
+rW6CSEzY6lU3RXE8UfsJOCvePuOrI3s17R/wuvzZdMFkQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:16:47 2026 by rpki-client