Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e35302e302f32332d3234203d3e20323732303934.roa
File:                     3138312e3233332e35302e302f32332d3234203d3e20323732303934.roa (raw, json)
Hash identifier:          PMZlCVY7XailQW46dCzGDdoYgtyzS46uKyv3fTSH1ug=
Subject key identifier:   99:9C:C9:D2:0C:71:82:17:41:0B:60:40:69:B1:4D:60:D3:81:69:E3
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       7DCDC9D32EB1AB3131D2E78B18EDACC44FB1DA57
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e35302e302f32332d3234203d3e20323732303934.roa
Signing time:             Fri 22 Aug 2025 14:40:26 +0000
ROA not before:           Fri 22 Aug 2025 14:35:26 +0000
ROA not after:            Fri 21 Aug 2026 14:40:26 +0000
asID:                     272094
IP address blocks:        181.233.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cd:c9:d3:2e:b1:ab:31:31:d2:e7:8b:18:ed:ac:c4:4f:b1:da:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Aug 22 14:35:26 2025 GMT
            Not After : Aug 21 14:40:26 2026 GMT
        Subject: CN=999CC9D20C718217410B604069B14D60D38169E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:f0:fc:b8:5f:f9:76:1b:e2:e8:8f:13:ff:
                    fd:29:7f:4c:36:7a:72:a0:40:c3:28:15:ee:40:9e:
                    13:c4:22:c0:08:03:24:db:09:71:d6:1e:26:80:9e:
                    9a:cd:2b:cf:31:cd:28:a9:7c:79:29:88:06:03:07:
                    67:af:13:d4:12:c2:01:e8:19:3e:c2:5a:55:ed:9b:
                    82:5d:39:bb:01:6f:30:1b:f6:9c:c1:14:bb:8e:ca:
                    0e:b2:72:67:04:76:07:5b:1c:90:29:37:70:bd:cf:
                    7d:ba:5f:04:34:c6:f2:d4:f7:37:27:f5:a9:69:6f:
                    78:98:36:87:80:89:fe:95:de:bb:35:cf:bd:a7:56:
                    7a:3f:e7:fc:89:c9:8b:79:01:e6:52:e9:a9:c2:c4:
                    1b:05:a4:1d:eb:9b:2e:ae:02:20:5f:d7:b8:ac:52:
                    3f:f5:34:31:53:ff:de:61:3d:b6:45:13:99:87:17:
                    bd:ac:82:7a:ac:0e:c9:94:fd:38:8f:97:15:be:3e:
                    6d:b1:b1:fa:3c:86:7e:5e:06:b4:67:65:0f:1f:8a:
                    71:50:10:fe:60:cd:6d:e5:fa:10:df:e2:a2:75:49:
                    71:0d:48:7d:60:1a:32:fc:30:15:91:06:a9:05:72:
                    4f:1f:08:12:f4:1d:8c:1c:06:18:a4:e1:10:24:85:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9C:C9:D2:0C:71:82:17:41:0B:60:40:69:B1:4D:60:D3:81:69:E3
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e35302e302f32332d3234203d3e20323732303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:72:09:3b:e3:23:32:5b:82:f0:ec:e6:02:ed:7a:d4:c7:
         81:db:fc:47:e2:cb:2d:ed:13:8f:2b:18:c7:40:7b:15:54:72:
         64:1d:59:90:c8:38:95:e8:64:8c:70:cc:8f:ef:a4:05:98:4a:
         1d:15:f9:d2:c0:f0:14:95:c9:8d:bb:28:df:da:26:59:c2:f7:
         7f:37:02:3c:95:68:d2:25:a5:65:ce:e8:8b:ee:f7:25:96:50:
         33:50:92:f8:cc:89:72:a1:c3:f6:74:68:ec:cb:d6:84:2e:bc:
         8d:0f:84:a6:10:43:96:d2:41:47:b6:29:e8:38:c3:74:2c:36:
         6a:c6:34:3b:09:e6:ce:83:62:64:d8:4f:af:20:4c:c8:2d:a9:
         f2:5d:38:42:21:8b:eb:db:41:bd:98:42:a2:72:6e:31:42:2f:
         73:07:bf:bd:0a:bc:c0:1f:00:21:42:4e:37:84:c0:b1:e2:dd:
         70:29:4e:34:24:30:f7:3b:c2:82:21:8e:a8:53:92:2f:37:a1:
         54:32:96:ba:8c:bd:e5:25:5d:15:5b:7b:54:b5:8b:fc:5e:cd:
         41:f2:69:10:5e:88:90:86:06:ac:2a:f3:5a:b9:77:ed:0e:34:
         96:9f:a6:1e:60:81:91:5e:e9:09:0b:00:3d:f3:33:90:58:1a:
         e7:53:60:98
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfc3J0y6xqzEx0ueLGO2sxE+x2lcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2QzQxQTY4RTM0NzUxMzhBRjUzQTVCNTU2MjdFREUz
NTQzMjA2ODAeFw0yNTA4MjIxNDM1MjZaFw0yNjA4MjExNDQwMjZaMDMxMTAvBgNV
BAMTKDk5OUNDOUQyMEM3MTgyMTc0MTBCNjA0MDY5QjE0RDYwRDM4MTY5RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhPD8uF/5dhvi6I8T//0pf0w2
enKgQMMoFe5AnhPEIsAIAyTbCXHWHiaAnprNK88xzSipfHkpiAYDB2evE9QSwgHo
GT7CWlXtm4JdObsBbzAb9pzBFLuOyg6ycmcEdgdbHJApN3C9z326XwQ0xvLU9zcn
9alpb3iYNoeAif6V3rs1z72nVno/5/yJyYt5AeZS6anCxBsFpB3rmy6uAiBf17is
Uj/1NDFT/95hPbZFE5mHF72sgnqsDsmU/TiPlxW+Pm2xsfo8hn5eBrRnZQ8finFQ
EP5gzW3l+hDf4qJ1SXENSH1gGjL8MBWRBqkFck8fCBL0HYwcBhik4RAkhfI3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmZzJ0gxxghdBC2BAabFNYNOBaeMwHwYDVR0j
BBgwFoAUkGxBpo40dROK9TpbVWJ+3jVDIGgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjIwMDdCOEQ0QUEyNjE0NDA4N0Y5QzNFNUY5RDM5RUNF
NTZCRDRFRDA5Nzg2REUxNTE0N0M5NTU3MTc1NDA2LzAvOTA2QzQxQTY4RTM0NzUx
MzhBRjUzQTVCNTU2MjdFREUzNTQzMjA2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDZDNDFBNjhFMzQ3NTEzOEFG
NTNBNUI1NTYyN0VERTM1NDMyMDY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYyMDA3QjhENEFBMjYxNDQwODdGOUMzRTVGOUQzOUVDRTU2QkQ0RUQw
OTc4NkRFMTUxNDdDOTU1NzE3NTQwNi8wLzMxMzgzMTJlMzIzMzMzMmUzNTMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBteky
MA0GCSqGSIb3DQEBCwUAA4IBAQBucnIJO+MjMluC8OzmAu161MeB2/xH4sst7ROP
KxjHQHsVVHJkHVmQyDiV6GSMcMyP76QFmEodFfnSwPAUlcmNuyjf2iZZwvd/NwI8
lWjSJaVlzuiL7vclllAzUJL4zIlyocP2dGjsy9aELryND4SmEEOW0kFHtinoOMN0
LDZqxjQ7CebOg2Jk2E+vIEzILanyXThCIYvr20G9mEKicm4xQi9zB7+9CrzAHwAh
Qk43hMCx4t1wKU40JDD3O8KCIY6oU5IvN6FUMpa6jL3lJV0VW3tUtYv8Xs1B8mkQ
XoiQhgasKvNauXftDjSWn6YeYIGRXukJCwA98zOQWBrnU2CY
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:26 2025 by rpki-client