Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e20323039323432.roa
File:                     3136342e37372e32382e302f32332d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          UJSQyBGy3s/Hcc09zTLvPD0G2TfqB1UTwfZ2UfifCW4=
Subject key identifier:   A8:47:78:5A:B2:3E:D4:FA:8E:AC:EF:8E:0C:58:97:D9:1F:C7:D3:F2
Certificate issuer:       /CN=2652C1433114197317FCA49E051F361760D69E0E
Certificate serial:       6E7D3E0BA5F419A674CC8724A2BCB09EFE4EBBAD
Authority key identifier: 26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e20323039323432.roa
Signing time:             Mon 04 Aug 2025 21:34:37 +0000
ROA not before:           Mon 04 Aug 2025 21:29:37 +0000
ROA not after:            Mon 03 Aug 2026 21:34:37 +0000
asID:                     209242
IP address blocks:        164.77.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 14:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7d:3e:0b:a5:f4:19:a6:74:cc:87:24:a2:bc:b0:9e:fe:4e:bb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2652C1433114197317FCA49E051F361760D69E0E
        Validity
            Not Before: Aug  4 21:29:37 2025 GMT
            Not After : Aug  3 21:34:37 2026 GMT
        Subject: CN=A847785AB23ED4FA8EACEF8E0C5897D91FC7D3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:0a:3a:39:92:35:1d:6c:34:95:38:d2:82:
                    68:0a:48:eb:80:7d:ae:c5:8b:1e:cc:7a:9d:42:e4:
                    65:61:f5:3e:be:df:3b:d6:f9:6e:c9:66:02:82:a2:
                    0f:fc:89:9d:c7:0d:88:97:bd:cc:68:bc:0a:40:92:
                    00:fb:b5:e8:c6:d2:32:d8:17:63:e3:a4:27:57:50:
                    cf:b4:a6:e7:e2:c9:59:c0:3e:83:94:1c:a6:93:47:
                    34:db:51:32:ff:0d:45:66:61:70:8f:09:86:c5:7e:
                    d6:81:11:48:4d:b6:62:ce:50:c9:de:e2:4a:57:31:
                    e0:ca:d7:64:2b:aa:5e:0a:6f:65:a8:e9:60:7b:e2:
                    04:30:b1:23:5b:bc:59:68:96:24:67:4f:e3:7f:33:
                    e3:8d:f6:86:36:41:c0:41:8d:27:a4:5d:14:42:9e:
                    94:6c:3d:90:15:99:62:39:1a:d6:9d:d8:88:65:48:
                    17:73:97:ef:0d:8a:17:44:58:3c:35:f0:c6:ec:f6:
                    90:1b:ca:12:0c:a5:78:91:0a:82:83:02:ff:f6:40:
                    b6:ef:a7:b6:90:3d:6e:d0:f0:43:61:0e:ec:5e:d3:
                    c5:84:46:71:bd:b6:98:b1:93:ed:1b:dd:03:00:33:
                    16:04:e9:46:7e:fc:9d:09:63:f4:98:46:53:e2:5d:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:78:5A:B2:3E:D4:FA:8E:AC:EF:8E:0C:58:97:D9:1F:C7:D3:F2
            X509v3 Authority Key Identifier:
                keyid:26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:88:e2:1f:f0:69:43:6b:6c:66:eb:63:ed:65:ef:e4:77:
         d5:d4:d7:01:6f:61:f2:af:0c:18:ac:df:26:8a:e7:06:1e:7f:
         21:c3:98:8d:3c:d2:c9:95:ca:75:6d:c9:d0:e5:b4:12:87:d4:
         48:51:79:05:31:3f:b7:45:75:7f:1c:37:e5:93:f4:fd:5b:db:
         83:e2:4e:55:f6:94:08:47:40:3d:b5:95:f7:25:69:f5:aa:6d:
         a0:38:15:61:23:19:6e:81:05:53:d1:0f:a9:1c:d6:b7:d5:0c:
         a9:1a:4c:29:38:ab:0a:19:e8:e3:6d:ed:dc:c2:08:72:09:eb:
         7b:a5:8f:2d:b7:c3:95:0f:e7:0c:db:1e:41:7c:f0:b8:d5:8f:
         9c:15:d3:7f:34:71:3e:f3:29:be:f6:84:c8:e4:77:e2:b1:76:
         ac:8f:6d:4d:60:a6:d9:a7:00:e1:9e:ef:2c:27:86:f4:45:39:
         83:1e:b4:89:60:8e:1f:ee:68:05:c1:8c:5a:07:e4:63:a5:91:
         32:d4:66:4f:f9:c2:59:27:ae:37:8a:18:49:8e:81:6d:4f:fa:
         5f:76:ec:f7:31:12:08:c1:92:e1:c3:c6:5c:37:89:3b:a1:53:
         90:92:d4:06:60:08:55:0e:93:72:57:2b:cf:f9:61:c5:6c:3e:
         55:3c:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:45:47 2025 by rpki-client