Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa
File:                     3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          uw5ky8bHVbVD+8RrIw9oNvBFexpTIW+ipcV9k8tD3xk=
Subject key identifier:   D3:7A:DB:DC:49:71:04:85:60:16:E7:72:33:E6:13:10:4E:E6:05:3C
Certificate issuer:       /CN=B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2
Certificate serial:       1D5DA966CF2ED5DA93A2CD5689B3164F865AA4F9
Authority key identifier: B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa
Signing time:             Fri 10 Oct 2025 15:45:00 +0000
ROA not before:           Fri 10 Oct 2025 15:40:00 +0000
ROA not after:            Fri 09 Oct 2026 15:45:00 +0000
asID:                     13335
IP address blocks:        148.227.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5d:a9:66:cf:2e:d5:da:93:a2:cd:56:89:b3:16:4f:86:5a:a4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2
        Validity
            Not Before: Oct 10 15:40:00 2025 GMT
            Not After : Oct  9 15:45:00 2026 GMT
        Subject: CN=D37ADBDC497104856016E77233E613104EE6053C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:97:be:36:f6:4a:03:93:29:0d:0a:dc:31:
                    b3:73:c1:08:a0:68:0f:ce:7e:c7:05:5d:ae:cd:47:
                    cb:74:b4:38:46:0f:ba:0b:e5:39:f7:e1:99:e5:0e:
                    e4:a6:80:c3:af:90:47:05:47:8b:dc:78:33:4f:84:
                    d9:5b:0b:96:e3:cc:3d:30:6f:26:cd:94:ef:f1:56:
                    43:dc:a5:7f:0e:3e:49:65:c6:18:44:e8:d3:b4:63:
                    cb:58:6e:27:70:bd:dc:e3:b1:0c:3d:5d:93:c8:73:
                    10:1f:72:a1:6a:fb:84:ba:19:8e:01:b8:a2:ec:a1:
                    aa:64:26:82:50:87:b6:ea:92:15:d5:13:a4:6d:14:
                    39:1a:0c:34:e1:12:57:84:9a:2b:2f:6c:2e:5f:3e:
                    4a:4f:f7:0b:58:40:81:b7:c7:b0:84:ae:af:53:c9:
                    5e:22:79:a9:5f:e2:f9:0d:41:79:ea:c1:a2:e6:c9:
                    9c:aa:59:f7:01:97:29:82:d6:8f:f3:d6:75:f8:95:
                    65:c0:9b:43:5b:ca:9e:50:60:20:29:90:4e:43:a6:
                    74:0a:9a:0b:e3:67:fb:f3:56:a1:0d:8d:06:8f:d7:
                    47:c1:d0:4c:78:d7:1d:de:4b:01:78:99:62:26:fc:
                    09:a2:f9:68:f3:c7:ec:4b:ca:b2:d7:a3:27:cd:b3:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7A:DB:DC:49:71:04:85:60:16:E7:72:33:E6:13:10:4E:E6:05:3C
            X509v3 Authority Key Identifier:
                keyid:B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/3134382e3232372e3136372e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.227.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:57:cf:dd:fa:cc:71:33:fd:76:e7:f2:b2:7c:a5:34:0e:7e:
         b6:3b:d9:da:42:3a:7c:2a:0a:e0:43:8c:70:41:96:45:3b:37:
         8a:34:bd:e4:19:6e:19:20:09:ef:e8:19:5f:17:fc:d7:14:f6:
         2d:81:cb:dc:b9:fb:9b:71:8a:fe:50:00:44:13:5a:5c:2d:36:
         50:78:9f:f4:43:db:e8:86:f9:ca:58:dd:df:ab:d5:a4:15:99:
         da:6e:ff:bc:3b:e3:49:7a:59:8e:b3:46:b3:ef:d5:ec:69:52:
         6e:be:ae:0d:f1:69:5f:5d:8d:ec:e3:b9:b6:56:25:8d:95:62:
         5b:5d:6b:7e:c7:49:da:b2:dc:2c:02:72:c2:45:7a:ff:18:84:
         03:8b:3c:4f:f4:2a:50:28:b5:58:ae:63:ea:c4:3d:3d:fb:55:
         b3:51:2e:e4:95:53:4a:e4:60:d0:06:cd:bd:30:9b:2f:20:55:
         98:71:b3:43:bb:a2:3f:56:8c:d7:25:fc:58:64:4e:9b:b3:77:
         8f:81:8f:a5:92:31:ee:5f:bc:9e:68:42:7b:64:c9:2d:06:0d:
         e8:d4:41:c2:90:45:47:73:e4:d6:31:89:8b:d6:2d:72:cf:c7:
         88:97:a1:60:15:d3:da:bc:11:eb:2f:c8:11:28:2d:ef:96:4a:
         92:b0:b6:97
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHV2pZs8u1dqTos1WibMWT4ZapPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBNkNFRTcwRDYzRDk1Q0IxMEMwM0Q2NjY1NkZFNUZC
QzQyRjhCMjAeFw0yNTEwMTAxNTQwMDBaFw0yNjEwMDkxNTQ1MDBaMDMxMTAvBgNV
BAMTKEQzN0FEQkRDNDk3MTA0ODU2MDE2RTc3MjMzRTYxMzEwNEVFNjA1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IZe+NvZKA5MpDQrcMbNzwQig
aA/OfscFXa7NR8t0tDhGD7oL5Tn34ZnlDuSmgMOvkEcFR4vceDNPhNlbC5bjzD0w
bybNlO/xVkPcpX8OPkllxhhE6NO0Y8tYbidwvdzjsQw9XZPIcxAfcqFq+4S6GY4B
uKLsoapkJoJQh7bqkhXVE6RtFDkaDDThEleEmisvbC5fPkpP9wtYQIG3x7CErq9T
yV4iealf4vkNQXnqwaLmyZyqWfcBlymC1o/z1nX4lWXAm0Nbyp5QYCApkE5DpnQK
mgvjZ/vzVqENjQaP10fB0Ex41x3eSwF4mWIm/Ami+Wjzx+xLyrLXoyfNs9H3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU03rb3ElxBIVgFudyM+YTEE7mBTwwHwYDVR0j
BBgwFoAUt6bO5w1j2VyxDAPWZlb+X7xC+LIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wN0QzOURDREQ2RDlFOTYzMzVDNTBBMzI3NDNCRkUxMjYy
NjdGNUEzNUIxMDU4OEMyQzcyQTI0MTRFRkU4ODFGLzAvQjdBNkNFRTcwRDYzRDk1
Q0IxMEMwM0Q2NjY1NkZFNUZCQzQyRjhCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0E2Q0VFNzBENjNEOTVDQjEw
QzAzRDY2NjU2RkU1RkJDNDJGOEIyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDdEMzlEQ0RENkQ5RTk2MzM1QzUwQTMyNzQzQkZFMTI2MjY3RjVBMzVC
MTA1ODhDMkM3MkEyNDE0RUZFODgxRi8wLzMxMzQzODJlMzIzMjM3MmUzMTM2Mzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlOOn
MA0GCSqGSIb3DQEBCwUAA4IBAQB4V8/d+sxxM/125/KyfKU0Dn62O9naQjp8Kgrg
Q4xwQZZFOzeKNL3kGW4ZIAnv6BlfF/zXFPYtgcvcufubcYr+UABEE1pcLTZQeJ/0
Q9vohvnKWN3fq9WkFZnabv+8O+NJelmOs0az79XsaVJuvq4N8WlfXY3s47m2ViWN
lWJbXWt+x0nastwsAnLCRXr/GIQDizxP9CpQKLVYrmPqxD09+1WzUS7klVNK5GDQ
Bs29MJsvIFWYcbNDu6I/VozXJfxYZE6bs3ePgY+lkjHuX7yeaEJ7ZMktBg3o1EHC
kEVHc+TWMYmL1i1yz8eIl6FgFdPavBHrL8gRKC3vlkqSsLaX
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:08:55 2025 by rpki-client