Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34322e302f32342d3234203d3e20323732303836.roa
File:                     3138392e38352e34322e302f32342d3234203d3e20323732303836.roa (raw, json)
Hash identifier:          7qGcDp52otKegJHSwpkjzMJMDJiUJDn+lwX+Vu4eZGU=
Subject key identifier:   1C:7B:C1:C6:AB:19:9C:D5:25:4E:29:54:76:D2:2C:89:F1:09:AA:14
Certificate issuer:       /CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
Certificate serial:       6F34684E4405B3C50F6E55356B67614722777EE1
Authority key identifier: E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34322e302f32342d3234203d3e20323732303836.roa
Signing time:             Tue 01 Jul 2025 17:40:01 +0000
ROA not before:           Tue 01 Jul 2025 17:35:01 +0000
ROA not after:            Tue 30 Jun 2026 17:40:01 +0000
asID:                     272086
IP address blocks:        189.85.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 14:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:68:4e:44:05:b3:c5:0f:6e:55:35:6b:67:61:47:22:77:7e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E7CD1353F10CB00107B13CB5F25F283F514497
        Validity
            Not Before: Jul  1 17:35:01 2025 GMT
            Not After : Jun 30 17:40:01 2026 GMT
        Subject: CN=1C7BC1C6AB199CD5254E295476D22C89F109AA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:6f:2c:ab:c3:91:ab:d8:6f:46:c7:c4:dc:
                    11:db:75:0c:b9:08:e4:60:d7:53:7b:17:ca:b9:2b:
                    5a:ea:3c:a9:00:72:09:c9:91:a5:02:5d:b6:4d:71:
                    5b:7a:7c:90:da:db:e3:4f:fb:c4:2b:0e:a5:eb:03:
                    42:39:4e:fa:6d:35:bb:33:6d:f5:56:31:60:40:4a:
                    de:cb:9b:14:76:98:3a:08:f2:98:97:65:d4:21:ff:
                    b0:64:5e:b3:00:41:92:d7:69:e4:03:95:79:66:77:
                    1a:f5:fe:f5:56:d7:38:e1:51:3a:43:8a:d6:45:3f:
                    0b:89:e8:d1:a2:ad:29:ff:69:1e:d5:0a:86:e2:83:
                    49:65:1b:99:83:53:f8:ab:11:60:8f:c4:5c:97:86:
                    39:d1:c7:39:98:cf:61:d7:ff:eb:25:ec:8a:00:99:
                    e2:c9:88:77:ce:5e:78:4b:e6:6c:f0:ef:78:9c:9f:
                    35:5a:06:3c:ed:50:5e:25:b4:89:12:5d:b5:5f:fa:
                    c7:bf:03:37:62:89:88:99:a2:22:5d:a3:31:12:e6:
                    5c:88:3c:bc:f4:bd:01:fc:a1:71:34:de:08:77:0e:
                    95:4c:21:46:db:85:5d:4b:1a:7e:63:57:c9:0a:cc:
                    4e:70:41:34:8e:88:dd:05:ea:aa:82:f7:38:e8:0e:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7B:C1:C6:AB:19:9C:D5:25:4E:29:54:76:D2:2C:89:F1:09:AA:14
            X509v3 Authority Key Identifier:
                keyid:E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/3138392e38352e34322e302f32342d3234203d3e20323732303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:68:58:d5:8d:e1:8c:09:d8:8c:3e:09:40:07:b7:eb:99:a9:
         74:87:ef:d1:d0:6f:43:dc:af:dd:48:2b:31:be:48:85:b4:b7:
         2c:3d:3b:97:70:79:0a:70:7d:c0:14:36:59:6b:f0:e0:c8:31:
         ac:51:71:7c:ba:89:35:86:dd:ae:2f:56:33:8a:78:8b:1c:e6:
         0a:3b:5d:30:5e:18:6c:93:ac:c8:04:07:c5:8b:51:e9:bb:33:
         db:d6:87:d4:6b:ab:f4:74:7c:a4:6e:ab:b3:d3:0c:3d:a0:4f:
         da:b1:9b:9d:13:30:55:ed:c5:6f:3d:51:63:99:8a:89:98:46:
         37:04:31:25:fe:ad:fb:bc:f4:ba:28:44:c4:9d:58:fb:8f:4b:
         4b:40:58:39:8b:9e:02:63:1c:7f:13:7f:1a:4a:06:d8:7f:1a:
         cf:cf:b6:63:9f:ca:cc:40:5e:90:06:6c:07:09:14:89:e7:63:
         97:cd:36:75:77:5b:e5:d6:fc:0e:8f:69:0f:eb:c9:01:72:30:
         a5:40:74:2e:c4:5c:f2:d5:da:90:a4:fb:09:22:f1:9a:65:b4:
         cc:65:1f:5b:d5:e9:c3:7d:6b:a2:2b:e9:63:aa:fe:3e:46:8e:
         21:72:a7:de:5b:52:08:7a:45:84:84:05:3b:e7:de:af:b4:22:
         0f:9e:0b:7e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbzRoTkQFs8UPblU1a2dhRyJ3fuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBFN0NEMTM1M0YxMENCMDAxMDdCMTNDQjVGMjVGMjgz
RjUxNDQ5NzAeFw0yNTA3MDExNzM1MDFaFw0yNjA2MzAxNzQwMDFaMDMxMTAvBgNV
BAMTKDFDN0JDMUM2QUIxOTlDRDUyNTRFMjk1NDc2RDIyQzg5RjEwOUFBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQ28sq8ORq9hvRsfE3BHbdQy5
CORg11N7F8q5K1rqPKkAcgnJkaUCXbZNcVt6fJDa2+NP+8QrDqXrA0I5TvptNbsz
bfVWMWBASt7LmxR2mDoI8piXZdQh/7BkXrMAQZLXaeQDlXlmdxr1/vVW1zjhUTpD
itZFPwuJ6NGirSn/aR7VCobig0llG5mDU/irEWCPxFyXhjnRxzmYz2HX/+sl7IoA
meLJiHfOXnhL5mzw73icnzVaBjztUF4ltIkSXbVf+se/AzdiiYiZoiJdozES5lyI
PLz0vQH8oXE03gh3DpVMIUbbhV1LGn5jV8kKzE5wQTSOiN0F6qqC9zjoDmBrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHHvBxqsZnNUlTilUdtIsifEJqhQwHwYDVR0j
BBgwFoAU4OfNE1PxDLABB7E8tfJfKD9RRJcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTZEOEI2MjNDNTVBNkI1QkQ4QTlFOUM4MkQ0MkM1OTQx
NjgxM0UwQTA0NTYyNzc3NzE4NjM1QzM3QzdCQ0QxLzAvRTBFN0NEMTM1M0YxMENC
MDAxMDdCMTNDQjVGMjVGMjgzRjUxNDQ5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMEU3Q0QxMzUzRjEwQ0IwMDEw
N0IxM0NCNUYyNUYyODNGNTE0NDk3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEU2RDhCNjIzQzU1QTZCNUJEOEE5RTlDODJENDJDNTk0MTY4MTNFMEEw
NDU2Mjc3NzcxODYzNUMzN0M3QkNEMS8wLzMxMzgzOTJlMzgzNTJlMzQzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjMwMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1VKjAN
BgkqhkiG9w0BAQsFAAOCAQEAJmhY1Y3hjAnYjD4JQAe365mpdIfv0dBvQ9yv3Ugr
Mb5IhbS3LD07l3B5CnB9wBQ2WWvw4MgxrFFxfLqJNYbdri9WM4p4ixzmCjtdMF4Y
bJOsyAQHxYtR6bsz29aH1Gur9HR8pG6rs9MMPaBP2rGbnRMwVe3Fbz1RY5mKiZhG
NwQxJf6t+7z0uihExJ1Y+49LS0BYOYueAmMcfxN/GkoG2H8az8+2Y5/KzEBekAZs
BwkUiedjl802dXdb5db8Do9pD+vJAXIwpUB0LsRc8tXakKT7CSLxmmW0zGUfW9Xp
w31roivpY6r+PkaOIXKn3ltSCHpFhIQFO+fer7QiD54Lfg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:24:28 2025 by rpki-client