Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e20323634363430.roa
File:                     3137392e36332e3231362e302f32312d3234203d3e20323634363430.roa (raw, json)
Hash identifier:          NA7iNkhojMgXNzijn7fXI4vYnsi4C4yiU42bGMIvHks=
Subject key identifier:   73:A8:0B:11:22:B6:FF:71:9C:6B:3C:CB:EA:72:26:70:BD:C3:0E:BC
Certificate issuer:       /CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
Certificate serial:       5254FEBE6A216D72E5B02B675FAB3E16AB50705E
Authority key identifier: 87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e20323634363430.roa
Signing time:             Mon 09 Jun 2025 20:21:25 +0000
ROA not before:           Mon 09 Jun 2025 20:16:25 +0000
ROA not after:            Mon 08 Jun 2026 20:21:25 +0000
asID:                     264640
IP address blocks:        179.63.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 20:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:54:fe:be:6a:21:6d:72:e5:b0:2b:67:5f:ab:3e:16:ab:50:70:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
        Validity
            Not Before: Jun  9 20:16:25 2025 GMT
            Not After : Jun  8 20:21:25 2026 GMT
        Subject: CN=73A80B1122B6FF719C6B3CCBEA722670BDC30EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:5f:54:dc:ac:b6:e2:fd:e4:07:53:7b:ff:
                    9f:3d:49:0f:b5:5b:48:74:d5:fe:50:58:79:e1:e9:
                    18:f8:8d:ca:43:0e:54:a6:54:dd:0c:80:38:ce:3e:
                    05:43:51:cb:43:2e:c0:48:50:d0:d2:a5:12:cb:eb:
                    c1:da:00:92:75:ea:d6:d6:31:1b:52:b6:12:a6:42:
                    b7:b9:3e:16:f2:86:c8:24:29:77:33:c1:04:3a:82:
                    2a:eb:8c:dc:dc:9f:c9:84:c5:70:6d:7c:50:53:63:
                    9a:71:c4:ed:1d:f1:34:1e:60:88:fe:9b:c9:05:a3:
                    89:b7:3e:83:2b:0c:10:15:8f:51:7f:e3:82:8b:1a:
                    c8:3e:c6:e5:15:30:74:af:cf:6e:43:b6:6e:04:ce:
                    55:84:fe:6a:87:10:a7:c6:30:f4:71:db:a0:f3:fc:
                    13:65:e9:3d:d3:54:cc:67:4b:b4:8e:d9:f5:9a:12:
                    6a:d3:70:d1:9b:61:ef:92:7a:a7:1f:76:d0:4a:14:
                    e5:28:19:e1:5a:59:34:26:8c:56:0a:99:06:9a:a7:
                    15:73:28:68:fe:a3:d9:91:64:35:5a:dc:62:33:67:
                    8b:61:71:df:1c:32:78:e1:ec:1e:9d:6f:8e:69:f3:
                    08:75:63:fb:99:94:53:58:bd:72:83:b9:31:1a:6b:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:0B:11:22:B6:FF:71:9C:6B:3C:CB:EA:72:26:70:BD:C3:0E:BC
            X509v3 Authority Key Identifier:
                keyid:87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e20323634363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:59:07:ed:ce:bc:3b:72:97:3e:b3:a2:63:69:a3:e3:fe:4f:
         71:ca:9e:c6:3e:b6:49:2d:71:1e:91:90:1a:13:9a:c1:cf:59:
         5e:b1:d1:24:91:22:1e:db:c0:79:c6:02:74:1c:7d:cd:8d:26:
         92:ca:c4:f8:aa:50:b2:dd:31:5f:5a:c6:0c:cb:0a:f7:6b:21:
         79:28:f7:38:fb:cc:e7:d5:bd:9c:66:0e:1f:c7:91:a9:9b:06:
         12:b8:6b:71:ed:a0:8e:f7:55:3b:e0:85:80:64:be:1f:e7:9c:
         30:ca:e2:15:70:fc:54:b4:88:c2:29:2e:55:52:c3:36:52:5f:
         fd:a0:54:26:3f:cc:13:e5:55:4a:d4:fe:b7:0b:82:6e:0e:f0:
         05:51:cd:cc:80:f1:85:f8:a2:e1:ac:ba:73:0e:ea:b9:ee:aa:
         7e:ea:5e:d8:62:a6:68:f0:54:ec:2b:52:af:db:1f:a6:5d:05:
         05:06:26:e6:d6:3b:14:21:c8:09:32:dd:4f:2d:d2:39:65:8b:
         26:d8:2b:3d:f4:b0:07:4b:91:82:ed:e3:cf:96:c4:01:0f:11:
         c4:f2:1f:68:3f:59:91:41:b2:c0:26:e9:f3:72:b9:6e:c7:7f:
         1c:eb:b8:ff:8c:f4:2f:43:a3:c4:f8:5c:0d:84:73:9c:fb:45:
         c5:9b:4f:68
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUlT+vmohbXLlsCtnX6s+FqtQcF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxQTVGNDhBRDhBODNDMTgzREIzNjI0QUVBMDU4MjVE
NzQ5RERGNzAeFw0yNTA2MDkyMDE2MjVaFw0yNjA2MDgyMDIxMjVaMDMxMTAvBgNV
BAMTKDczQTgwQjExMjJCNkZGNzE5QzZCM0NDQkVBNzIyNjcwQkRDMzBFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ml9U3Ky24v3kB1N7/589SQ+1
W0h01f5QWHnh6Rj4jcpDDlSmVN0MgDjOPgVDUctDLsBIUNDSpRLL68HaAJJ16tbW
MRtSthKmQre5PhbyhsgkKXczwQQ6girrjNzcn8mExXBtfFBTY5pxxO0d8TQeYIj+
m8kFo4m3PoMrDBAVj1F/44KLGsg+xuUVMHSvz25Dtm4EzlWE/mqHEKfGMPRx26Dz
/BNl6T3TVMxnS7SO2fWaEmrTcNGbYe+SeqcfdtBKFOUoGeFaWTQmjFYKmQaapxVz
KGj+o9mRZDVa3GIzZ4thcd8cMnjh7B6db45p8wh1Y/uZlFNYvXKDuTEaa0fBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUc6gLESK2/3GcazzL6nImcL3DDrwwHwYDVR0j
BBgwFoAUhxpfSK2Kg8GD2zYkrqBYJddJ3fcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OTkwMkEzMEYxMEY4QURBMzIxQzMxQTNGNjQ3QjEzRDUx
MEI3RkMxNzg3MEM1RjI5NDU2MDY3MDdDNEJCRTg4LzAvODcxQTVGNDhBRDhBODND
MTgzREIzNjI0QUVBMDU4MjVENzQ5RERGNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzFBNUY0OEFEOEE4M0MxODNE
QjM2MjRBRUEwNTgyNUQ3NDlEREY3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjk5MDJBMzBGMTBGOEFEQTMyMUMzMUEzRjY0N0IxM0Q1MTBCN0ZDMTc4
NzBDNUYyOTQ1NjA2NzA3QzRCQkU4OC8wLzMxMzczOTJlMzYzMzJlMzIzMTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsz/Y
MA0GCSqGSIb3DQEBCwUAA4IBAQB0WQftzrw7cpc+s6JjaaPj/k9xyp7GPrZJLXEe
kZAaE5rBz1lesdEkkSIe28B5xgJ0HH3NjSaSysT4qlCy3TFfWsYMywr3ayF5KPc4
+8zn1b2cZg4fx5GpmwYSuGtx7aCO91U74IWAZL4f55wwyuIVcPxUtIjCKS5VUsM2
Ul/9oFQmP8wT5VVK1P63C4JuDvAFUc3MgPGF+KLhrLpzDuq57qp+6l7YYqZo8FTs
K1Kv2x+mXQUFBibm1jsUIcgJMt1PLdI5ZYsm2Cs99LAHS5GC7ePPlsQBDxHE8h9o
P1mRQbLAJunzcrlux38c67j/jPQvQ6PE+FwNhHOc+0XFm09o
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:17:56 2025 by rpki-client