Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3139302e302f32342d3234203d3e20323635353239.roa
File:                     3137302e3234372e3139302e302f32342d3234203d3e20323635353239.roa (raw, json)
Hash identifier:          PykSxib8g48Gul+UqdNPwJWKEGAA0D5uPFxacZXy7Z4=
Subject key identifier:   C6:93:9C:95:B2:43:47:83:FD:05:20:62:DC:39:04:78:90:1B:AF:11
Certificate issuer:       /CN=42FB55A41791F87502D72CC216E456680D5D80C0
Certificate serial:       45576707AE88ADE64A58B241B44B56F5D96E031B
Authority key identifier: 42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3139302e302f32342d3234203d3e20323635353239.roa
Signing time:             Tue 01 Jul 2025 13:40:01 +0000
ROA not before:           Tue 01 Jul 2025 13:35:01 +0000
ROA not after:            Tue 30 Jun 2026 13:40:01 +0000
asID:                     265529
IP address blocks:        170.247.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:57:67:07:ae:88:ad:e6:4a:58:b2:41:b4:4b:56:f5:d9:6e:03:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42FB55A41791F87502D72CC216E456680D5D80C0
        Validity
            Not Before: Jul  1 13:35:01 2025 GMT
            Not After : Jun 30 13:40:01 2026 GMT
        Subject: CN=C6939C95B2434783FD052062DC390478901BAF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:6c:a9:cc:3c:69:1b:ca:b6:3f:6c:23:23:
                    a3:38:a4:c7:fa:d4:fc:77:d2:00:de:ca:02:cb:89:
                    5a:0d:16:06:25:67:ba:91:dd:42:47:ac:c7:f1:93:
                    c6:ea:0d:3e:c6:9f:c1:8d:96:e6:27:b3:41:e6:40:
                    97:1a:f7:09:d6:05:02:9d:31:b3:49:b4:6b:2f:11:
                    c1:36:f2:f7:57:ae:bf:bc:a1:52:54:df:65:10:15:
                    17:ce:54:2c:17:58:1d:d8:e0:39:50:00:10:2d:38:
                    65:6d:e3:ba:60:3c:d3:9c:26:a4:54:7c:6d:16:c5:
                    32:22:f2:b1:b9:27:f6:5d:af:42:69:b0:d6:5a:1a:
                    4e:ac:6f:b1:cc:e7:67:fe:d3:b7:7b:14:77:09:40:
                    8d:ea:cd:04:a8:ba:fd:72:d5:28:53:1e:e0:4a:4f:
                    d5:2b:d2:d7:23:f6:6a:88:5e:f4:b4:f0:f4:a1:b6:
                    cc:35:fa:a2:90:6d:55:c2:70:0b:5f:07:73:4d:fe:
                    3c:82:17:c8:ab:21:f9:a8:db:c3:10:2e:04:18:81:
                    6c:65:49:be:89:cc:50:5c:8c:bb:dc:93:4b:18:1c:
                    4e:e3:15:c9:c8:c1:7a:03:59:47:90:5c:5e:85:3f:
                    3a:6c:d4:18:11:7b:31:7f:d7:5e:f4:c3:0d:81:8e:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:93:9C:95:B2:43:47:83:FD:05:20:62:DC:39:04:78:90:1B:AF:11
            X509v3 Authority Key Identifier:
                keyid:42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/3137302e3234372e3139302e302f32342d3234203d3e20323635353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:90:63:e9:c9:02:bf:64:5f:42:c0:36:d5:9a:51:92:66:f7:
         3a:8a:5c:25:bb:30:b4:bc:7f:78:07:2d:1b:b7:a1:45:5d:a3:
         9a:d3:34:5b:9f:6f:d8:ae:01:31:71:12:c8:a7:4c:74:a8:57:
         c2:aa:6f:f4:1c:f0:8d:4c:f1:2a:20:57:1e:40:75:f9:a1:26:
         51:c8:79:bf:b2:88:de:d3:ff:24:bf:04:74:7d:17:7f:94:c8:
         47:cf:6f:4c:17:b1:78:21:2c:2c:55:e8:f2:97:f3:f0:24:f1:
         f3:f2:a7:b9:29:78:c5:6a:73:3c:97:87:5f:dc:fe:c8:bf:b8:
         75:97:ac:df:43:94:bd:21:d7:57:fe:69:6a:ab:47:a0:6f:3f:
         d2:36:96:3e:cb:d1:2d:6a:36:9f:50:bb:59:d3:e8:04:7b:15:
         61:4f:49:96:ed:5b:ab:56:49:da:13:fe:88:24:d1:a2:f7:9a:
         de:86:d5:59:89:d8:e0:87:31:c5:ae:90:5d:9c:99:5e:c3:04:
         e6:3e:0d:22:a9:a5:dd:d1:21:60:2e:62:42:ca:35:3c:15:14:
         cc:b5:bc:62:51:7c:72:3a:64:03:c9:66:a1:e2:2d:a1:d1:d1:
         6e:65:f4:6e:2d:5a:45:d8:58:10:95:af:0a:4f:61:6f:ee:43:
         3f:bf:47:9a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURVdnB66IreZKWLJBtEtW9dluAxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJGQjU1QTQxNzkxRjg3NTAyRDcyQ0MyMTZFNDU2Njgw
RDVEODBDMDAeFw0yNTA3MDExMzM1MDFaFw0yNjA2MzAxMzQwMDFaMDMxMTAvBgNV
BAMTKEM2OTM5Qzk1QjI0MzQ3ODNGRDA1MjA2MkRDMzkwNDc4OTAxQkFGMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrTGypzDxpG8q2P2wjI6M4pMf6
1Px30gDeygLLiVoNFgYlZ7qR3UJHrMfxk8bqDT7Gn8GNluYns0HmQJca9wnWBQKd
MbNJtGsvEcE28vdXrr+8oVJU32UQFRfOVCwXWB3Y4DlQABAtOGVt47pgPNOcJqRU
fG0WxTIi8rG5J/Zdr0JpsNZaGk6sb7HM52f+07d7FHcJQI3qzQSouv1y1ShTHuBK
T9Ur0tcj9mqIXvS08PShtsw1+qKQbVXCcAtfB3NN/jyCF8irIfmo28MQLgQYgWxl
Sb6JzFBcjLvck0sYHE7jFcnIwXoDWUeQXF6FPzps1BgRezF/1170ww2BjmSrAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUxpOclbJDR4P9BSBi3DkEeJAbrxEwHwYDVR0j
BBgwFoAUQvtVpBeR+HUC1yzCFuRWaA1dgMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Q0YxRTE3RUI2RDlBNzA4MERCNkIwRjUwQTI1QTQ2QUMy
MUIwNDVEM0MxQzM5QkUwMjJEMjEzQkY0MUNEN0IxLzAvNDJGQjU1QTQxNzkxRjg3
NTAyRDcyQ0MyMTZFNDU2NjgwRDVEODBDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkZCNTVBNDE3OTFGODc1MDJE
NzJDQzIxNkU0NTY2ODBENUQ4MEMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOENGMUUxN0VCNkQ5QTcwODBEQjZCMEY1MEEyNUE0NkFDMjFCMDQ1RDND
MUMzOUJFMDIyRDIxM0JGNDFDRDdCMS8wLzMxMzczMDJlMzIzNDM3MmUzMTM5MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNTMyMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
974wDQYJKoZIhvcNAQELBQADggEBAGSQY+nJAr9kX0LANtWaUZJm9zqKXCW7MLS8
f3gHLRu3oUVdo5rTNFufb9iuATFxEsinTHSoV8Kqb/Qc8I1M8SogVx5AdfmhJlHI
eb+yiN7T/yS/BHR9F3+UyEfPb0wXsXghLCxV6PKX8/Ak8fPyp7kpeMVqczyXh1/c
/si/uHWXrN9DlL0h11f+aWqrR6BvP9I2lj7L0S1qNp9Qu1nT6AR7FWFPSZbtW6tW
SdoT/ogk0aL3mt6G1VmJ2OCHMcWukF2cmV7DBOY+DSKppd3RIWAuYkLKNTwVFMy1
vGJRfHI6ZAPJZqHiLaHR0W5l9G4tWkXYWBCVrwpPYW/uQz+/R5o=
-----END CERTIFICATE-----
Generated at Fri Jul 4 18:41:55 2025 by rpki-client