Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa
File:                     3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          76mEK/xKJx90EyDTxOElycGEfFLLYY2tzhx8eqAUM3U=
Subject key identifier:   AD:90:88:87:5A:7A:15:03:F4:11:84:E5:52:35:32:95:40:F3:9A:95
Certificate issuer:       /CN=A309E2A48572D6A82E05CA806C7D2108377001D8
Certificate serial:       66C8EC60F43613927630BD525D1F911AE6E7B1BF
Authority key identifier: A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 22 Jul 2025 18:26:16 +0000
ROA not before:           Tue 22 Jul 2025 18:21:16 +0000
ROA not after:            Tue 21 Jul 2026 18:26:16 +0000
asID:                     27884
IP address blocks:        170.244.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c8:ec:60:f4:36:13:92:76:30:bd:52:5d:1f:91:1a:e6:e7:b1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A309E2A48572D6A82E05CA806C7D2108377001D8
        Validity
            Not Before: Jul 22 18:21:16 2025 GMT
            Not After : Jul 21 18:26:16 2026 GMT
        Subject: CN=AD9088875A7A1503F41184E55235329540F39A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:82:e9:fb:e3:ee:ca:59:59:d6:46:f4:ce:
                    1d:2f:5e:05:91:8b:eb:f0:55:46:02:ca:18:54:09:
                    22:1d:45:3b:93:75:a0:cd:f2:20:8d:84:b6:7f:a4:
                    0c:16:8e:8b:34:f0:0d:3a:06:8a:e3:80:5c:ba:a4:
                    c7:ed:48:db:95:03:9d:50:06:18:20:83:85:06:e9:
                    dc:0d:a2:7f:88:f2:dd:d5:b6:9d:f8:84:56:93:ad:
                    0d:26:48:c9:9f:fe:fb:0e:64:2c:fa:54:e2:25:6e:
                    e1:f4:fe:d0:b9:49:bb:06:4c:cf:01:fc:05:85:50:
                    6e:65:a7:94:6c:62:0b:00:9b:69:5e:ac:f0:21:bb:
                    bd:d6:ac:77:32:97:7a:88:34:1f:38:c3:b8:62:ed:
                    96:df:c8:96:71:3a:9b:36:b9:4e:33:df:e3:5a:c5:
                    cd:4d:e5:2c:5d:fa:9b:96:0f:2f:0c:e2:5b:6e:3c:
                    f3:72:ba:e8:8c:ba:d0:ef:13:ed:29:29:7c:58:7e:
                    f3:97:98:d6:af:ae:03:db:4a:f5:99:99:15:63:98:
                    7e:07:f4:a0:03:b3:0d:df:32:d5:14:61:9c:92:ae:
                    3d:25:78:91:b3:78:31:9c:dd:2c:cd:82:ff:38:c4:
                    ac:6e:7e:a2:cc:8e:a6:f0:15:70:96:82:5b:e4:0f:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:90:88:87:5A:7A:15:03:F4:11:84:E5:52:35:32:95:40:F3:9A:95
            X509v3 Authority Key Identifier:
                keyid:A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:86:01:54:77:8f:8c:55:ac:5f:d2:6f:48:74:f2:e2:c2:2d:
         cd:55:99:dc:81:6d:22:42:aa:1e:af:d9:94:a8:87:ff:41:49:
         ed:d7:01:e1:da:ed:d1:43:44:42:0e:4f:64:ec:7e:2d:9d:2c:
         f3:02:04:8a:73:e3:99:7d:e1:8f:31:7f:a2:f7:79:f2:50:83:
         72:49:88:74:c9:62:1c:30:ad:6e:84:9b:35:c5:3e:5f:40:30:
         d2:96:60:8d:dc:af:7d:27:ef:3b:79:1f:f2:e2:96:f5:bd:09:
         ae:34:12:f4:2c:72:41:12:14:b9:53:c9:58:92:9e:c6:4e:f3:
         58:7a:db:15:f4:d6:4a:c2:2e:fa:bd:ac:98:79:79:7e:31:f8:
         fd:ea:09:11:8a:ec:f1:19:9d:58:45:7f:b8:b2:09:e5:fd:b0:
         82:a5:52:15:70:5f:57:04:3f:44:62:75:2f:1c:8b:d7:b3:10:
         30:3d:55:b5:3f:c6:a8:ea:b9:18:15:aa:ab:44:83:bf:26:b1:
         77:b0:6f:eb:0c:38:05:82:eb:64:54:ec:22:d6:bf:66:3a:ae:
         be:e5:61:50:01:ac:84:5a:db:1f:35:5f:e8:3d:64:5f:e6:56:
         0a:09:81:5b:2a:f5:5d:c2:4f:be:1a:fd:f3:a6:fb:53:94:f9:
         63:3c:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:32:21 2025 by rpki-client