Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/3137372e3133362e38342e302f32322d3234203d3e20323731373834.roa
File:                     3137372e3133362e38342e302f32322d3234203d3e20323731373834.roa (raw, json)
Hash identifier:          /r6PKyOP8DEpzH/lMOleIqloSEQcYWGyInkHmK1nwfE=
Subject key identifier:   DE:37:B7:66:E8:83:67:06:35:6B:6F:D0:89:2F:75:91:91:5C:1D:0F
Certificate issuer:       /CN=B43E01D488885BFC75C9118EA9837A33A19423D0
Certificate serial:       3AFC50411C3AE8E27131AD8CB00DB1E0DF5BC2EF
Authority key identifier: B4:3E:01:D4:88:88:5B:FC:75:C9:11:8E:A9:83:7A:33:A1:94:23:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/3137372e3133362e38342e302f32322d3234203d3e20323731373834.roa
Signing time:             Fri 20 Feb 2026 19:31:29 +0000
ROA not before:           Fri 20 Feb 2026 19:26:29 +0000
ROA not after:            Fri 19 Feb 2027 19:31:29 +0000
asID:                     271784
IP address blocks:        177.136.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 22:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:50:41:1c:3a:e8:e2:71:31:ad:8c:b0:0d:b1:e0:df:5b:c2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43E01D488885BFC75C9118EA9837A33A19423D0
        Validity
            Not Before: Feb 20 19:26:29 2026 GMT
            Not After : Feb 19 19:31:29 2027 GMT
        Subject: CN=DE37B766E8836706356B6FD0892F7591915C1D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:bc:34:00:d9:45:6b:00:6b:47:f8:a7:53:
                    9e:ed:df:fe:06:42:ce:7c:b0:b5:36:56:ef:fe:8d:
                    32:b4:8e:3a:ee:37:fa:1b:b6:77:5f:83:8a:9e:19:
                    1c:d7:70:8c:8f:0b:98:c9:9d:71:6f:1d:f2:14:21:
                    4a:62:69:87:65:3e:5c:7a:dd:2b:c3:0f:3d:36:11:
                    f5:75:ba:7a:a8:41:b4:cb:03:8e:0b:fb:8c:17:e5:
                    10:64:f6:99:ad:72:30:ef:9a:42:8a:eb:87:12:9d:
                    22:7e:a3:ab:0b:fe:24:3d:38:11:6c:c0:6f:4c:56:
                    2c:5e:f0:a8:6c:97:95:cc:c6:87:b9:d7:81:08:4c:
                    0d:86:95:6f:9f:ac:5c:f1:c1:21:46:66:61:9b:95:
                    95:28:94:c8:53:ff:ce:b0:e4:51:8f:9d:65:55:a9:
                    86:42:5e:b9:d8:09:96:58:bd:8e:7a:e1:11:b6:b3:
                    6c:e9:93:2c:00:4d:17:75:dc:43:43:47:17:ea:ec:
                    0a:da:db:75:6a:90:62:86:ed:70:90:06:52:33:4e:
                    d0:16:7f:e6:db:27:ea:de:a4:43:22:c0:d8:a0:ac:
                    24:fc:40:e7:ab:0e:e4:94:32:c8:2b:8a:be:ae:30:
                    ef:e4:97:dd:0e:6e:be:1b:85:d1:25:41:ca:17:90:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:37:B7:66:E8:83:67:06:35:6B:6F:D0:89:2F:75:91:91:5C:1D:0F
            X509v3 Authority Key Identifier:
                keyid:B4:3E:01:D4:88:88:5B:FC:75:C9:11:8E:A9:83:7A:33:A1:94:23:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/B43E01D488885BFC75C9118EA9837A33A19423D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B43E01D488885BFC75C9118EA9837A33A19423D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E7EB4E1EABC078007A8A62356D07A0B25EFBA2F1D13B5CA6B514E67FBA4431/0/3137372e3133362e38342e302f32322d3234203d3e20323731373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:26:d2:f4:85:86:b1:a6:57:7a:42:67:30:73:53:e9:3e:f0:
         dc:a0:d7:50:a5:98:02:80:c2:dc:83:bf:16:7e:33:be:3d:ca:
         2a:3d:34:fb:c4:2f:6e:fd:1c:2c:a1:7a:c0:34:e6:7c:4c:1f:
         f2:bd:97:ca:df:83:5e:d5:78:92:05:8d:a5:f8:02:a3:ff:9a:
         85:8e:f1:23:30:79:d9:f0:da:e6:86:e2:11:51:07:74:20:6d:
         be:a6:dd:08:08:61:d3:ff:21:e2:fb:ff:68:c2:2b:82:d1:91:
         fb:3f:2a:f5:46:a3:98:a6:36:46:2c:50:ea:a3:74:d8:31:28:
         c4:89:c9:aa:d5:8d:48:93:ef:7e:b4:a8:d7:a8:fa:16:d5:4a:
         3d:a2:12:95:2d:4f:ad:0f:17:68:34:41:35:f4:56:7a:84:18:
         19:0f:13:05:91:c5:08:3b:23:d2:8d:3e:df:b8:5f:38:18:01:
         dd:6d:b0:7a:0b:e2:05:a1:b0:1a:82:10:2b:e6:e4:d3:c6:db:
         65:c9:b4:3a:0d:29:e3:e2:d5:bb:7b:eb:7c:99:61:94:df:49:
         8d:7f:0a:71:e8:9e:77:a8:39:9e:19:69:42:1a:f7:af:3d:68:
         56:09:71:ab:91:93:f1:73:1f:57:81:cf:20:c2:18:d7:59:ae:
         74:bc:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:30:47 2026 by rpki-client