Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa
File:                     3138372e3136342e302e302f31372d3234203d3e203138373334.roa (raw, json)
Hash identifier:          mkcvUCRVuE3IYG1a00zc3+Pf2O/CbpWaRaAHmKgHzxc=
Subject key identifier:   04:0E:B0:AF:02:7A:FE:78:03:1E:A3:EF:1A:83:1D:52:54:25:CA:44
Certificate issuer:       /CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
Certificate serial:       262E9AF6B8F09E5B2107F3835D301D4C68E99053
Authority key identifier: 9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa
Signing time:             Mon 27 Oct 2025 18:51:08 +0000
ROA not before:           Mon 27 Oct 2025 18:46:08 +0000
ROA not after:            Mon 26 Oct 2026 18:51:08 +0000
asID:                     18734
IP address blocks:        187.164.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2e:9a:f6:b8:f0:9e:5b:21:07:f3:83:5d:30:1d:4c:68:e9:90:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
        Validity
            Not Before: Oct 27 18:46:08 2025 GMT
            Not After : Oct 26 18:51:08 2026 GMT
        Subject: CN=040EB0AF027AFE78031EA3EF1A831D525425CA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:1f:42:a9:c2:9f:52:55:39:1b:26:d1:e2:
                    1b:5b:d5:a8:6f:7a:12:62:97:34:ca:e7:1d:ca:f7:
                    7c:83:56:fe:14:4f:ab:75:02:52:51:ce:0e:92:c7:
                    f7:a0:8b:36:cd:eb:22:f3:8d:1c:07:b8:2b:55:a4:
                    4e:99:7e:cb:20:40:1f:46:f6:87:0e:bd:96:8f:c9:
                    75:f9:d9:7d:f9:31:ff:f2:1f:4b:b3:4d:26:9e:af:
                    d1:f4:27:57:c8:ca:89:ee:61:16:91:be:2b:32:e4:
                    c2:c9:44:21:9c:d6:09:3a:60:30:35:4f:fb:6a:dd:
                    81:28:29:fa:86:89:fd:3d:f2:7e:63:62:f5:e3:ab:
                    d6:77:76:80:70:09:90:93:5a:62:14:aa:79:25:2d:
                    cb:0f:de:a8:fc:d1:60:20:30:c5:46:20:11:03:e1:
                    96:16:60:d9:fa:c7:e6:c5:59:7f:b8:74:d6:bd:2c:
                    ab:f5:4e:49:b0:5f:a6:0e:1d:28:91:c2:10:0c:bd:
                    45:7e:2a:d3:bc:43:53:cd:b7:18:61:3a:40:b5:87:
                    a6:10:d7:28:47:1b:4d:65:54:60:27:f8:c4:1d:52:
                    fb:52:1a:65:08:91:1c:9a:fe:0e:f2:d8:5b:84:a3:
                    cd:4d:19:0a:89:cf:99:21:f2:dc:6f:98:30:b4:b7:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0E:B0:AF:02:7A:FE:78:03:1E:A3:EF:1A:83:1D:52:54:25:CA:44
            X509v3 Authority Key Identifier:
                keyid:9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.164.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:3c:bd:54:80:02:39:af:f9:c9:3b:fc:bf:0f:c9:a3:12:
         2b:15:b6:c0:3c:c2:c9:aa:7d:01:5e:e5:f5:48:07:b0:f4:d2:
         f3:70:f2:1f:85:dd:d8:45:68:54:5b:df:93:47:d5:17:53:70:
         14:c8:18:38:87:9e:3b:df:4d:d6:b9:f8:9e:47:e1:42:44:c7:
         1c:1a:f5:79:7e:bc:0e:6b:13:c5:29:e2:92:21:33:d7:9e:ba:
         65:f0:f3:aa:56:9c:46:04:e2:20:1e:80:e6:6c:02:c1:2a:7d:
         24:93:a0:86:c1:9b:38:c7:69:f3:97:54:85:b8:cb:cd:6f:6d:
         0a:a4:2f:fe:e6:69:59:4d:b9:da:29:8b:0c:d8:9d:c2:b9:a4:
         74:25:9c:a1:a9:68:9a:a3:72:15:6d:56:1b:19:45:0e:09:51:
         b5:42:d6:73:55:b3:12:26:ef:fa:8b:6e:70:3a:7a:f9:c7:ec:
         0d:14:42:15:c3:bb:e2:43:65:92:bc:3b:0d:84:d8:d2:25:1e:
         90:65:5d:c8:92:ff:22:2a:1a:ae:1c:2b:82:42:dc:5e:a4:59:
         04:23:5e:08:90:03:20:79:86:aa:84:0e:6b:79:e3:77:31:76:
         71:44:3d:57:76:95:45:2c:23:50:e6:9c:f0:74:fa:af:29:03:
         7f:07:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:50:50 2025 by rpki-client