Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36342e302f32342d3234203d3e203238303837.roa
File:                     3136382e3233342e36342e302f32342d3234203d3e203238303837.roa (raw, json)
Hash identifier:          gsMIpDs0crnCe1rTb2btwSSL25RjuWtm6KMwqsVFcLs=
Subject key identifier:   5A:63:9F:1C:EE:07:A8:9E:63:D3:76:9C:6A:55:AC:C5:BB:8B:30:05
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       2537862FEAFFAD2C704576CEB0698A57A7D630EC
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36342e302f32342d3234203d3e203238303837.roa
Signing time:             Thu 18 Sep 2025 00:30:01 +0000
ROA not before:           Thu 18 Sep 2025 00:25:01 +0000
ROA not after:            Thu 17 Sep 2026 00:30:01 +0000
asID:                     28087
IP address blocks:        168.234.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:37:86:2f:ea:ff:ad:2c:70:45:76:ce:b0:69:8a:57:a7:d6:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Sep 18 00:25:01 2025 GMT
            Not After : Sep 17 00:30:01 2026 GMT
        Subject: CN=5A639F1CEE07A89E63D3769C6A55ACC5BB8B3005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:cc:53:31:b8:24:57:a4:f6:62:86:3f:c1:
                    d6:8c:57:f6:a4:2f:73:a0:e8:9c:40:ce:4c:02:58:
                    53:22:d9:36:26:6e:24:ef:15:bd:0f:0e:33:21:9a:
                    b3:05:ba:1e:f7:83:04:63:41:6f:d6:4b:f0:09:2a:
                    3d:8d:dc:c8:69:7d:49:de:57:c6:f7:41:a7:d1:63:
                    56:33:8b:49:98:92:2d:b1:34:b0:c2:17:bf:3f:56:
                    cb:7d:60:16:7d:9a:3c:18:c2:4e:28:1a:6a:8f:d1:
                    bb:b4:c7:ae:47:f8:dd:37:8e:87:cd:3a:83:25:17:
                    71:4c:7d:e0:f1:38:3e:07:f8:1c:5f:67:df:2c:ba:
                    11:da:80:6b:ed:b8:cc:8c:34:c6:b9:24:5c:73:c2:
                    d8:69:65:c6:bf:9f:d5:fa:9b:0d:01:34:58:90:74:
                    73:84:78:12:2d:a6:71:9e:e5:17:fe:50:c3:11:ac:
                    6c:b3:60:bc:c2:1a:1d:86:61:74:d8:fc:0e:48:a4:
                    7e:8a:08:23:ad:01:08:a9:c8:7c:08:f5:73:6b:ba:
                    92:de:3c:a3:8f:6e:04:e8:1b:15:a0:94:a0:88:88:
                    24:2e:19:5c:de:05:8c:a2:5b:5a:ed:a6:ee:24:d2:
                    db:02:5a:d3:71:f0:ee:23:80:82:d3:1b:b3:02:3f:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:63:9F:1C:EE:07:A8:9E:63:D3:76:9C:6A:55:AC:C5:BB:8B:30:05
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36342e302f32342d3234203d3e203238303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:e5:d3:23:86:53:31:4b:ea:e7:e9:f0:22:9e:01:8f:d1:
         3a:65:c2:10:f3:aa:df:53:34:54:95:22:37:2c:de:e8:a9:aa:
         1d:a4:c8:8f:f2:cb:87:4e:f8:ee:ef:5b:3c:fb:08:93:50:94:
         c0:ac:99:7f:8a:6f:c0:53:f7:13:78:53:ac:f7:23:1b:bb:71:
         23:1d:73:3c:20:c3:c0:d0:e0:54:cb:d5:be:78:97:9e:9c:93:
         7d:96:24:13:5e:dd:17:2b:e2:c5:a5:cd:6a:d7:35:c0:88:32:
         0d:51:69:47:7b:ec:c0:a8:2c:c8:e7:3f:74:f3:b8:ab:7f:da:
         65:94:9b:46:64:a1:de:f2:9a:cc:c5:39:61:85:85:dd:3a:76:
         b0:e9:b5:eb:a1:76:67:7a:09:85:4e:9c:84:20:6e:05:64:b6:
         4e:af:3b:1d:ad:0a:9c:75:a6:81:30:3d:7d:51:20:1a:20:79:
         15:da:27:bd:90:a2:2a:a5:8d:d8:dc:68:48:46:e1:d5:62:a3:
         f0:3d:9b:23:45:d8:18:71:4b:c8:2f:21:5d:06:20:ed:11:d8:
         8f:de:be:ad:81:02:3e:27:35:77:f2:b5:3e:38:64:bd:0e:93:
         93:6a:6a:6b:bd:2f:db:bc:62:7e:9b:bc:35:ed:bf:2c:6d:d5:
         a1:f6:af:6a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJTeGL+r/rSxwRXbOsGmKV6fWMOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNTA5MTgwMDI1MDFaFw0yNjA5MTcwMDMwMDFaMDMxMTAvBgNV
BAMTKDVBNjM5RjFDRUUwN0E4OUU2M0QzNzY5QzZBNTVBQ0M1QkI4QjMwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHMxTMbgkV6T2YoY/wdaMV/ak
L3Og6JxAzkwCWFMi2TYmbiTvFb0PDjMhmrMFuh73gwRjQW/WS/AJKj2N3MhpfUne
V8b3QafRY1Yzi0mYki2xNLDCF78/Vst9YBZ9mjwYwk4oGmqP0bu0x65H+N03jofN
OoMlF3FMfeDxOD4H+BxfZ98suhHagGvtuMyMNMa5JFxzwthpZca/n9X6mw0BNFiQ
dHOEeBItpnGe5Rf+UMMRrGyzYLzCGh2GYXTY/A5IpH6KCCOtAQipyHwI9XNrupLe
PKOPbgToGxWglKCIiCQuGVzeBYyiW1rtpu4k0tsCWtNx8O4jgILTG7MCPwf7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWmOfHO4HqJ5j03acalWsxbuLMAUwHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzNjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjqQDAN
BgkqhkiG9w0BAQsFAAOCAQEAUczl0yOGUzFL6ufp8CKeAY/ROmXCEPOq31M0VJUi
Nyze6KmqHaTIj/LLh0747u9bPPsIk1CUwKyZf4pvwFP3E3hTrPcjG7txIx1zPCDD
wNDgVMvVvniXnpyTfZYkE17dFyvixaXNatc1wIgyDVFpR3vswKgsyOc/dPO4q3/a
ZZSbRmSh3vKazMU5YYWF3Tp2sOm166F2Z3oJhU6chCBuBWS2Tq87Ha0KnHWmgTA9
fVEgGiB5FdonvZCiKqWN2NxoSEbh1WKj8D2bI0XYGHFLyC8hXQYg7RHYj96+rYEC
Pic1d/K1PjhkvQ6Tk2pqa70v27xifpu8Ne2/LG3Vofavag==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:03 2025 by rpki-client