Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f32322d3232203d3e2036353335.roa
File:                     3137392e342e302e302f32322d3232203d3e2036353335.roa (raw, json)
Hash identifier:          9cItAXyP9vyteFMoJ5p9dVpr4LddSQovCIgsoJykcp8=
Subject key identifier:   D8:8B:5B:73:85:83:97:3D:02:FB:9D:71:DE:92:6E:1D:B9:B0:9D:0A
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       528F7CB31579FC5CCB2B4D95AAE111260469FD63
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f32322d3232203d3e2036353335.roa
Signing time:             Mon 30 Jun 2025 15:24:07 +0000
ROA not before:           Mon 30 Jun 2025 15:19:07 +0000
ROA not after:            Mon 29 Jun 2026 15:24:07 +0000
asID:                     6535
IP address blocks:        179.4.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8f:7c:b3:15:79:fc:5c:cb:2b:4d:95:aa:e1:11:26:04:69:fd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Jun 30 15:19:07 2025 GMT
            Not After : Jun 29 15:24:07 2026 GMT
        Subject: CN=D88B5B738583973D02FB9D71DE926E1DB9B09D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:fb:6e:76:b8:ad:c0:03:6e:96:d9:bf:40:83:
                    fc:0d:25:24:c7:c6:92:cd:6c:30:84:e1:61:9e:a3:
                    c8:1c:3a:f5:4c:a7:d8:fa:82:0b:59:14:87:0b:b0:
                    fe:c1:f6:5b:ed:43:44:a0:5f:33:fe:b3:54:df:7e:
                    c2:8d:a7:4c:e1:b5:24:5d:a7:41:6d:43:bf:31:28:
                    54:e3:05:07:44:d0:78:ea:3d:90:f0:e1:ed:07:e6:
                    24:70:66:a6:9f:d3:4c:75:f2:fb:75:5f:40:3f:a4:
                    c5:e4:e8:59:b9:e5:37:d1:ae:7a:c4:3b:3d:3c:9f:
                    91:58:4d:1d:05:7c:38:41:2b:33:8d:f1:bd:38:14:
                    95:04:ba:4f:14:c5:db:df:23:e3:9f:a4:f7:8d:ff:
                    2e:25:11:bc:da:ce:f2:b3:38:91:fd:3a:40:cb:bb:
                    59:94:f6:68:b4:1d:a2:34:de:2c:0b:ad:20:f5:db:
                    a7:da:90:55:f9:87:b1:b1:ec:ea:29:50:bf:4b:6d:
                    ea:8b:23:45:28:58:ad:41:49:56:ff:b2:33:6b:4d:
                    4d:69:48:75:97:93:b2:de:a4:f8:7d:4c:58:63:f0:
                    a9:69:9a:39:49:40:ae:c1:7b:73:6d:bc:33:b2:89:
                    2a:85:15:85:11:0f:ca:f4:ec:ff:79:e9:8e:f4:05:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8B:5B:73:85:83:97:3D:02:FB:9D:71:DE:92:6E:1D:B9:B0:9D:0A
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f32322d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.4.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:56:a9:94:8b:81:84:36:b0:bf:9d:4b:e9:90:30:17:12:
         c5:11:b5:08:bf:43:c6:d9:0c:62:17:1c:cd:f6:3e:46:7b:2d:
         3f:a5:67:d3:cb:9f:ae:7d:1a:8b:b1:7c:4a:eb:8f:e5:d6:6c:
         b1:cc:7c:71:c4:da:0c:6d:b4:ab:ab:a2:ab:40:9a:2b:5c:52:
         71:16:1f:3d:0d:26:29:f0:c1:75:71:cf:13:7d:df:7e:78:9b:
         ae:7e:3b:2c:85:50:97:5e:0d:29:6c:53:bb:8d:7c:be:91:81:
         39:e9:30:3f:64:bc:f4:c7:fd:29:aa:80:78:62:1f:fd:4b:df:
         7b:ae:c9:ef:11:63:6e:06:bc:5c:7f:3c:c1:44:2f:1f:e8:ad:
         b1:4a:c4:e6:ff:cb:bc:5f:e0:b6:1e:ab:40:6d:77:21:fb:68:
         a1:8f:5b:3b:98:a1:df:f8:25:2a:1a:40:ea:6e:34:73:6a:65:
         23:dc:1e:2d:37:3d:89:fe:d0:22:48:56:21:27:d7:ce:3f:73:
         fb:0f:96:24:d9:09:14:eb:c3:10:46:fa:20:65:12:ef:c1:6f:
         b2:3c:6c:65:96:7d:41:62:06:8f:88:76:ca:45:07:c0:c9:cb:
         42:3f:12:9c:07:20:36:4a:95:6c:af:cf:7a:04:9f:b2:48:a7:
         b4:22:71:b8
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUUo98sxV5/FzLK02VquERJgRp/WMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNTA2MzAxNTE5MDdaFw0yNjA2MjkxNTI0MDdaMDMxMTAvBgNV
BAMTKEQ4OEI1QjczODU4Mzk3M0QwMkZCOUQ3MURFOTI2RTFEQjlCMDlEMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7+252uK3AA26W2b9Ag/wNJSTH
xpLNbDCE4WGeo8gcOvVMp9j6ggtZFIcLsP7B9lvtQ0SgXzP+s1TffsKNp0zhtSRd
p0FtQ78xKFTjBQdE0HjqPZDw4e0H5iRwZqaf00x18vt1X0A/pMXk6Fm55TfRrnrE
Oz08n5FYTR0FfDhBKzON8b04FJUEuk8UxdvfI+OfpPeN/y4lEbzazvKzOJH9OkDL
u1mU9mi0HaI03iwLrSD126fakFX5h7Gx7OopUL9LbeqLI0UoWK1BSVb/sjNrTU1p
SHWXk7LepPh9TFhj8KlpmjlJQK7Be3NtvDOyiSqFFYURD8r07P956Y70BTwhAgMB
AAGjggLAMIICvDAdBgNVHQ4EFgQU2Itbc4WDlz0C+51x3pJuHbmwnQowHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBvwYIKwYBBQUHAQsEgbIwga8wgawG
CCsGAQUFBzALhoGfcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzczOTJlMzQyZTMwMmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzYzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKzBAAwDQYJKoZIhvcN
AQELBQADggEBAIauVqmUi4GENrC/nUvpkDAXEsURtQi/Q8bZDGIXHM32PkZ7LT+l
Z9PLn659GouxfErrj+XWbLHMfHHE2gxttKuroqtAmitcUnEWHz0NJinwwXVxzxN9
3354m65+OyyFUJdeDSlsU7uNfL6RgTnpMD9kvPTH/SmqgHhiH/1L33uuye8RY24G
vFx/PMFELx/orbFKxOb/y7xf4LYeq0BtdyH7aKGPWzuYod/4JSoaQOpuNHNqZSPc
Hi03PYn+0CJIViEn184/c/sPliTZCRTrwxBG+iBlEu/Bb7I8bGWWfUFiBo+IdspF
B8DJy0I/EpwHIDZKlWyvz3oEn7JIp7Qicbg=
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:40:28 2025 by rpki-client