Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa
File:                     37342e3132332e34382e302f32322d3234203d3e20323639393436.roa (raw, json)
Hash identifier:          RpXise1u8MTy5PPmdaYelqCyeXjhPTSCWADOr2S97jk=
Subject key identifier:   6C:88:E5:1A:68:69:1B:89:D2:F7:82:80:9F:AE:4F:DB:8E:13:1C:69
Certificate issuer:       /CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Certificate serial:       212A1C8FD43BBA317F433AF21F45F3377CA6ABD5
Authority key identifier: 01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa
Signing time:             Tue 02 Sep 2025 19:42:46 +0000
ROA not before:           Tue 02 Sep 2025 19:37:46 +0000
ROA not after:            Tue 01 Sep 2026 19:42:46 +0000
asID:                     269946
IP address blocks:        74.123.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 11:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2a:1c:8f:d4:3b:ba:31:7f:43:3a:f2:1f:45:f3:37:7c:a6:ab:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
        Validity
            Not Before: Sep  2 19:37:46 2025 GMT
            Not After : Sep  1 19:42:46 2026 GMT
        Subject: CN=6C88E51A68691B89D2F782809FAE4FDB8E131C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:73:f8:f3:b5:d0:d1:51:04:6f:2f:bb:a1:
                    40:c6:ac:b1:1c:32:2f:a6:6b:a5:fa:fe:e4:0a:83:
                    42:56:77:ce:66:41:f1:a4:6b:fc:08:48:62:d7:8c:
                    8e:a6:48:a7:d4:4d:75:7b:f1:cc:69:d9:52:8d:94:
                    f4:43:0d:3a:14:7b:45:23:1f:e2:28:46:45:4b:67:
                    33:69:ef:ac:be:10:ba:93:db:c1:8c:f2:27:23:0a:
                    e7:f5:3a:64:df:5f:e2:13:a3:44:02:09:42:20:78:
                    36:fe:85:ac:7c:d3:ae:34:1d:2e:03:ad:a6:07:22:
                    b3:09:dd:e9:f7:9b:51:dd:22:8b:da:63:75:f6:b1:
                    cf:1e:8f:58:8e:91:8a:23:76:5d:90:aa:da:52:ce:
                    ab:84:f3:19:9d:0d:af:33:1d:bc:ec:04:95:62:f8:
                    ae:34:d6:82:fb:18:fe:30:96:71:ff:6f:cc:32:fe:
                    28:a5:76:26:d4:0f:bc:ae:b6:78:c9:69:dc:c9:db:
                    fa:b4:4c:36:c2:e8:32:f1:18:55:a0:4b:64:c3:1e:
                    1d:41:36:ca:38:a1:e6:da:ad:b4:cd:63:ef:65:64:
                    5d:59:df:6b:7e:d0:5b:14:c7:6b:8f:e1:b0:a5:8c:
                    99:d8:5b:9b:5e:9c:c1:7c:dd:d9:33:25:37:14:ac:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:E5:1A:68:69:1B:89:D2:F7:82:80:9F:AE:4F:DB:8E:13:1C:69
            X509v3 Authority Key Identifier:
                keyid:01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:5b:67:c7:92:65:98:0d:20:60:d7:9c:54:a9:5e:90:d9:
         1a:ce:10:39:ec:07:a8:db:6b:68:cc:c4:5f:0f:45:82:6f:94:
         6a:c0:e1:c1:c1:71:b0:e0:24:88:1a:25:7f:20:f6:c0:b6:39:
         fd:a7:dc:67:dc:5c:0f:1a:52:14:a7:8c:01:05:4f:56:8e:1c:
         b2:ea:fc:25:6b:ca:89:52:59:57:bf:a7:60:d0:f1:c4:11:d3:
         42:f0:a9:c5:2b:a8:93:57:4a:42:db:cf:09:33:93:51:85:25:
         40:c2:32:72:ae:32:db:67:1e:81:21:9f:e1:09:aa:34:79:9c:
         cf:09:fb:09:79:d4:30:9e:4d:dc:91:1c:9d:50:b4:24:7d:01:
         6c:96:f3:d7:b1:1c:e7:fb:11:a8:26:01:58:99:7d:65:60:8c:
         2d:b4:75:fc:13:07:2c:3f:c4:1a:6c:ac:fc:0f:3e:48:c5:d5:
         92:db:f7:1f:18:84:a2:38:56:50:0c:98:ac:7b:ac:3b:72:bd:
         56:3b:5f:82:61:a2:f6:b0:ad:35:0a:9c:65:c7:af:b8:12:e0:
         09:89:3f:a5:88:90:2f:85:07:ed:34:c4:1d:ef:05:0f:d7:1e:
         ff:de:dc:1d:18:35:28:e4:c6:ca:01:fc:ac:e9:03:4e:47:13:
         0a:f6:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 06:24:06 2025 by rpki-client