Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa
File:                     3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa (raw, json)
Hash identifier:          y/j5d9xnFI+50yMIg+8hb0RzkOs3w1KCk6PUIgBAbNQ=
Subject key identifier:   68:6F:CE:45:14:D2:7A:A9:EB:55:88:94:BE:E2:55:CF:1E:CC:D4:D8
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       50E4801C1F2A324804CE6DE38B1CEB0C86908FC3
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa
Signing time:             Sat 23 Aug 2025 06:45:00 +0000
ROA not before:           Sat 23 Aug 2025 06:40:00 +0000
ROA not after:            Sat 22 Aug 2026 06:45:00 +0000
asID:                     52471
IP address blocks:        168.205.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e4:80:1c:1f:2a:32:48:04:ce:6d:e3:8b:1c:eb:0c:86:90:8f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Aug 23 06:40:00 2025 GMT
            Not After : Aug 22 06:45:00 2026 GMT
        Subject: CN=686FCE4514D27AA9EB558894BEE255CF1ECCD4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:27:e0:51:54:5b:44:8e:e4:23:de:39:11:
                    b9:18:0e:58:08:08:41:1f:47:3b:c0:f5:08:f7:09:
                    5a:16:50:55:a0:de:8c:a2:95:28:79:2c:de:6f:c2:
                    64:ab:3f:f3:2a:11:88:d4:21:4c:f1:54:5e:1c:83:
                    b7:a3:21:f6:da:7c:18:0f:70:5d:7e:26:e0:c6:23:
                    41:d1:6a:24:00:76:b4:13:36:1e:e9:62:e4:f6:f3:
                    ed:c1:87:ba:d6:cb:ed:35:0d:8c:3f:e8:1a:ad:4b:
                    0b:e8:de:96:88:32:ca:24:e0:2d:4b:c3:41:af:f9:
                    63:2d:3d:3d:93:9a:bc:3e:d6:62:72:e3:db:87:68:
                    d9:28:99:dd:78:58:26:27:31:ad:55:5c:1d:a4:62:
                    78:06:36:be:31:b9:ff:a6:af:ad:b2:13:98:0b:da:
                    66:29:a7:41:01:f3:2e:fb:ad:7f:29:6e:9f:18:91:
                    3c:5f:9e:7f:d6:9a:64:e7:b6:d4:66:fb:85:09:62:
                    83:77:68:a3:0b:12:cb:30:d7:8f:49:a6:34:90:c0:
                    e1:bf:87:da:88:76:1b:cc:66:77:de:c5:5e:d6:4e:
                    e1:f4:5a:bf:42:a7:a1:f9:c9:c6:47:71:3b:87:7b:
                    79:5b:d1:77:27:8e:f0:d0:bf:f5:bc:85:3c:6d:4d:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6F:CE:45:14:D2:7A:A9:EB:55:88:94:BE:E2:55:CF:1E:CC:D4:D8
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3136382e3230352e3137302e302f32332d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:f9:18:47:de:20:ca:29:fa:cd:c9:11:bd:25:1d:22:ac:c3:
         e1:16:3b:b8:81:79:fb:3a:8a:7b:d9:40:9e:7e:c8:b5:fc:31:
         71:17:50:e7:87:e9:9d:37:6c:82:ab:91:3d:b6:81:bd:51:6d:
         eb:f7:9c:40:c4:bc:e8:32:2e:69:8a:47:ef:fa:5b:84:f6:32:
         93:0f:c0:4b:7d:b8:ab:73:48:d5:d8:97:83:ac:aa:fe:80:09:
         01:da:42:c6:ef:64:b8:0c:b0:34:32:4f:38:9d:81:5a:8b:35:
         de:24:86:49:6f:ad:5d:fd:df:91:00:1d:35:ef:90:ee:8b:c6:
         5e:16:47:be:1d:a6:cd:f1:4f:0f:9a:ff:23:35:bc:ea:e5:6f:
         54:05:8c:12:eb:34:bb:39:b5:72:38:3f:2d:aa:a8:8f:44:70:
         73:2d:f9:0b:70:eb:b7:11:62:f2:53:8a:3e:e6:ce:97:e5:b8:
         3e:13:43:a7:9e:01:89:4f:99:68:b0:d3:1c:90:68:cb:7a:ae:
         67:e8:6c:e4:e3:ce:bc:f0:c5:6f:90:0f:69:b2:43:47:f9:2b:
         60:2e:3c:de:2a:36:ad:0f:c0:3e:07:9e:44:8c:97:2d:80:e8:
         43:ff:25:be:b2:3e:15:56:63:c8:34:64:38:88:76:9d:22:e2:
         02:ac:95:ee
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUOSAHB8qMkgEzm3jixzrDIaQj8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI5RDk2NjYxRUM4NTYyN0ExRjQ5OTRFODkzRjI2RkZD
NDA4QUZBQzAeFw0yNTA4MjMwNjQwMDBaFw0yNjA4MjIwNjQ1MDBaMDMxMTAvBgNV
BAMTKDY4NkZDRTQ1MTREMjdBQTlFQjU1ODg5NEJFRTI1NUNGMUVDQ0Q0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOyfgUVRbRI7kI945EbkYDlgI
CEEfRzvA9Qj3CVoWUFWg3oyilSh5LN5vwmSrP/MqEYjUIUzxVF4cg7ejIfbafBgP
cF1+JuDGI0HRaiQAdrQTNh7pYuT28+3Bh7rWy+01DYw/6BqtSwvo3paIMsok4C1L
w0Gv+WMtPT2Tmrw+1mJy49uHaNkomd14WCYnMa1VXB2kYngGNr4xuf+mr62yE5gL
2mYpp0EB8y77rX8pbp8YkTxfnn/WmmTnttRm+4UJYoN3aKMLEssw149JpjSQwOG/
h9qIdhvMZnfexV7WTuH0Wr9Cp6H5ycZHcTuHe3lb0XcnjvDQv/W8hTxtTZtbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUaG/ORRTSeqnrVYiUvuJVzx7M1NgwHwYDVR0j
BBgwFoAUW52WZh7IVieh9JlOiT8m/8QIr6wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTAzMUZBQzc2OTE0MzUyQzk1MjgwMzBGOTgzRjA3ODE2
OTY0QjIyRjZENjQ5NkIzMENCQjRFNjM2OTBGODY5LzAvNUI5RDk2NjYxRUM4NTYy
N0ExRjQ5OTRFODkzRjI2RkZDNDA4QUZBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjlEOTY2NjFFQzg1NjI3QTFG
NDk5NEU4OTNGMjZGRkM0MDhBRkFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzUwMzFGQUM3NjkxNDM1MkM5NTI4MDMwRjk4M0YwNzgxNjk2NEIyMkY2
RDY0OTZCMzBDQkI0RTYzNjkwRjg2OS8wLzMxMzYzODJlMzIzMDM1MmUzMTM3MzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMyMzQzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqM2q
MA0GCSqGSIb3DQEBCwUAA4IBAQCZ+RhH3iDKKfrNyRG9JR0irMPhFju4gXn7Oop7
2UCefsi1/DFxF1Dnh+mdN2yCq5E9toG9UW3r95xAxLzoMi5pikfv+luE9jKTD8BL
fbirc0jV2JeDrKr+gAkB2kLG72S4DLA0Mk84nYFaizXeJIZJb61d/d+RAB0175Du
i8ZeFke+HabN8U8Pmv8jNbzq5W9UBYwS6zS7ObVyOD8tqqiPRHBzLfkLcOu3EWLy
U4o+5s6X5bg+E0OnngGJT5losNMckGjLeq5n6Gzk48688MVvkA9pskNH+StgLjze
KjatD8A+B55EjJctgOhD/yW+sj4VVmPINGQ4iHadIuICrJXu
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:00:06 2025 by rpki-client