Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e322e302f32332d3234203d3e20323734303539.roa
File:                     3137302e3235342e322e302f32332d3234203d3e20323734303539.roa (raw, json)
Hash identifier:          qUb/yWjXfgl9aLRFz1Oj45WF1kRlpKNJdDCUvAIh/2I=
Subject key identifier:   F1:42:D9:EC:47:AF:0F:92:5A:7F:CA:38:F0:57:52:5D:66:28:03:92
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       1477E847518106353203205DE8CAA0D09EEE17FA
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e322e302f32332d3234203d3e20323734303539.roa
Signing time:             Wed 29 Oct 2025 20:20:00 +0000
ROA not before:           Wed 29 Oct 2025 20:15:00 +0000
ROA not after:            Wed 28 Oct 2026 20:20:00 +0000
asID:                     274059
IP address blocks:        170.254.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:e8:47:51:81:06:35:32:03:20:5d:e8:ca:a0:d0:9e:ee:17:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Oct 29 20:15:00 2025 GMT
            Not After : Oct 28 20:20:00 2026 GMT
        Subject: CN=F142D9EC47AF0F925A7FCA38F057525D66280392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:d0:69:66:0e:33:2c:90:43:53:e9:77:11:
                    8f:42:85:1a:68:9c:24:6c:75:a7:d9:11:8d:a7:ab:
                    d7:20:ec:a1:01:62:1e:be:86:89:ba:97:99:57:f1:
                    f6:91:df:02:5a:bf:48:e3:1d:50:13:3d:21:d5:38:
                    c6:14:fa:23:16:16:0f:08:88:ec:e5:cb:86:b8:6a:
                    17:d8:b0:ec:a3:db:37:60:68:a2:89:3a:e6:93:fc:
                    ed:31:ad:ab:55:65:19:a9:69:3c:a0:a4:cc:5d:9c:
                    5a:fa:02:ea:57:4a:2b:83:e6:9f:de:05:32:e0:58:
                    d6:db:7c:9d:0c:ef:77:b0:fd:43:17:fe:b6:c2:9b:
                    2e:09:10:92:56:7b:2d:52:d3:63:3f:ce:37:7e:86:
                    76:ef:85:c3:3e:3b:84:a5:85:0c:fc:f0:11:c0:bd:
                    e9:bd:79:57:97:e1:df:22:12:06:d3:e0:51:11:18:
                    62:5f:fd:7e:72:03:1c:02:de:e2:48:d6:fd:10:1c:
                    77:83:aa:c8:f0:b6:83:10:23:d0:5c:b6:7c:70:9f:
                    b4:10:10:2d:40:7c:41:5e:36:f1:09:0c:e2:2c:a3:
                    bd:b8:72:bb:64:92:d6:c5:6d:0b:dd:30:65:2b:e0:
                    04:cb:d7:4e:51:46:09:64:93:3d:e8:e9:d7:1c:21:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:42:D9:EC:47:AF:0F:92:5A:7F:CA:38:F0:57:52:5D:66:28:03:92
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e322e302f32332d3234203d3e20323734303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:cf:18:3c:a8:ce:5f:8d:55:82:af:77:d2:27:76:6e:1a:
         8c:33:1f:a1:0e:4f:d8:70:44:19:3b:78:df:9c:bf:f3:23:56:
         66:aa:02:ce:eb:21:c4:89:37:12:7f:80:3f:23:36:5a:5a:9f:
         02:e9:85:a4:16:42:7f:2d:a7:d2:d8:97:4b:6a:13:8d:18:e7:
         65:6b:dd:59:63:80:e3:ba:5a:ff:47:00:52:a1:8b:9a:74:cb:
         81:15:22:4d:95:5d:26:bd:e3:14:fd:91:92:bb:b6:3e:bc:66:
         d6:da:04:35:12:bf:0d:a9:25:d0:53:37:28:00:8d:96:1a:1d:
         f9:6e:6a:ef:08:7c:c3:cb:16:99:67:3f:58:17:d5:7f:95:7a:
         49:ed:a5:87:4b:ae:02:78:80:cf:41:41:db:4e:0c:67:ef:f1:
         32:2c:20:08:55:3b:2e:23:8d:37:44:f4:17:ac:5f:5d:e4:11:
         1e:a3:0b:a9:72:d2:98:15:58:73:90:a9:bd:27:b9:e1:da:9e:
         07:c9:78:d3:df:a3:7f:8f:22:70:a8:fd:b4:ac:81:f1:27:df:
         fe:8a:bd:25:db:e4:33:d7:ef:c0:36:7d:f9:26:7e:16:86:09:
         9e:be:82:37:e9:76:57:8b:7c:a2:dd:1d:d9:1a:2d:25:37:00:
         a4:5c:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:51:53 2025 by rpki-client