Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10983.roa
File:                     AS10983.roa (raw, json)
Hash identifier:          AUNyfEGLbws3gNQJZTWeRP9cVv7loDJok+YyeIgvOzU=
Subject key identifier:   77:F2:4B:E1:FD:88:E9:1D:87:33:C2:1E:6B:86:1B:C2:01:D0:B6:9C
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       459F2332E395E4F1BEA2AE549DF564A67D8AD179
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10983.roa
Signing time:             Tue 24 Jun 2025 19:05:00 +0000
ROA not before:           Tue 24 Jun 2025 19:00:00 +0000
ROA not after:            Tue 23 Jun 2026 19:05:00 +0000
asID:                     10983
IP address blocks:        200.45.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9f:23:32:e3:95:e4:f1:be:a2:ae:54:9d:f5:64:a6:7d:8a:d1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Jun 24 19:00:00 2025 GMT
            Not After : Jun 23 19:05:00 2026 GMT
        Subject: CN=77F24BE1FD88E91D8733C21E6B861BC201D0B69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:ee:25:3b:b2:81:42:94:ad:8c:2d:4f:7c:
                    67:11:95:47:ce:01:77:89:1f:bb:bc:5f:4f:97:cc:
                    a0:96:b2:84:7f:81:f3:c2:6d:e1:e7:97:5c:8d:9d:
                    78:8a:f5:65:8a:3c:15:87:54:57:19:58:75:b6:91:
                    cd:e4:ee:40:0d:ed:04:3d:93:4a:c8:ae:51:72:d7:
                    c4:7b:8d:57:1a:79:c9:eb:27:fb:82:60:52:92:6f:
                    2e:89:70:51:60:4f:8e:1e:a9:0f:87:00:ec:f0:bd:
                    51:28:9e:c2:8c:42:47:e7:8e:4e:04:e5:6d:86:e7:
                    8b:ea:9f:7a:0b:1e:e9:97:1f:48:88:88:63:23:ab:
                    31:d4:c2:ab:40:9c:a9:af:5b:cb:8d:dd:ce:21:a1:
                    cd:f6:27:73:aa:4b:00:0a:2a:f7:1c:18:c5:bd:d6:
                    a2:2b:4a:d1:24:bc:c1:5e:67:49:a6:86:2a:19:ec:
                    13:d3:2b:59:5f:15:89:7a:9e:7f:99:7d:49:0b:e6:
                    95:fb:53:95:50:db:6b:7b:06:66:30:95:c2:28:cb:
                    9a:b4:7d:3b:1f:c2:a8:96:0d:93:be:7d:4a:28:dc:
                    51:0b:1e:67:e5:1a:b3:66:f6:a8:f3:68:ac:c8:8c:
                    75:32:11:40:37:3e:c8:42:95:11:6d:8e:8d:ce:49:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F2:4B:E1:FD:88:E9:1D:87:33:C2:1E:6B:86:1B:C2:01:D0:B6:9C
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.45.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:a5:17:80:5c:6e:18:82:78:61:34:5f:03:5b:61:dc:f7:
         be:98:80:fd:ad:d7:d7:c4:6c:82:69:be:ad:36:6b:04:44:cc:
         cf:37:7e:6d:03:49:d9:2d:d4:58:8c:8a:68:e2:15:13:e9:b4:
         9c:1a:70:cc:42:83:01:82:28:d6:6d:67:54:15:e9:0b:68:a4:
         ec:47:de:cf:a8:3a:3f:ae:7d:bf:32:53:32:1a:31:bb:4e:45:
         85:f1:28:bf:09:97:d0:e2:30:ff:2e:d7:10:09:b6:76:6d:5f:
         f2:91:f4:5e:d6:3c:1e:cb:d6:cf:25:b0:74:b4:5d:d1:31:d4:
         7a:7e:11:7a:f8:08:ca:55:68:98:93:39:ce:d7:2c:68:3f:a9:
         52:53:57:4b:eb:45:05:35:ed:ab:66:96:e2:ad:5e:31:52:9b:
         ad:50:64:9b:93:75:da:ff:7a:13:44:6e:84:ff:9a:c2:5a:79:
         52:d4:8c:ec:20:ba:06:fa:85:4c:3f:8b:e8:07:62:2d:80:ac:
         81:d4:4f:33:91:89:82:6f:e0:5c:56:f0:b2:dd:97:8f:0a:79:
         2a:80:7a:cb:4b:ac:ef:0f:eb:2d:1d:67:34:60:fc:72:b9:6f:
         5b:30:2b:08:f4:d5:d0:7f:9d:fb:6d:92:3f:64:2b:c2:87:ae:
         61:1c:15:dc
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIURZ8jMuOV5PG+oq5UnfVkpn2K0XkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNTA2MjQxOTAwMDBaFw0yNjA2MjMxOTA1MDBaMDMxMTAvBgNV
BAMTKDc3RjI0QkUxRkQ4OEU5MUQ4NzMzQzIxRTZCODYxQkMyMDFEMEI2OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Du4lO7KBQpStjC1PfGcRlUfO
AXeJH7u8X0+XzKCWsoR/gfPCbeHnl1yNnXiK9WWKPBWHVFcZWHW2kc3k7kAN7QQ9
k0rIrlFy18R7jVcaecnrJ/uCYFKSby6JcFFgT44eqQ+HAOzwvVEonsKMQkfnjk4E
5W2G54vqn3oLHumXH0iIiGMjqzHUwqtAnKmvW8uN3c4hoc32J3OqSwAKKvccGMW9
1qIrStEkvMFeZ0mmhioZ7BPTK1lfFYl6nn+ZfUkL5pX7U5VQ22t7BmYwlcIoy5q0
fTsfwqiWDZO+fUoo3FELHmflGrNm9qjzaKzIjHUyEUA3PshClRFtjo3OSfOPAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUd/JL4f2I6R2HM8Iea4YbwgHQtpwwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMxMDk4My5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgtBDAN
BgkqhkiG9w0BAQsFAAOCAQEAieWlF4BcbhiCeGE0XwNbYdz3vpiA/a3X18Rsgmm+
rTZrBETMzzd+bQNJ2S3UWIyKaOIVE+m0nBpwzEKDAYIo1m1nVBXpC2ik7Efez6g6
P659vzJTMhoxu05FhfEovwmX0OIw/y7XEAm2dm1f8pH0XtY8HsvWzyWwdLRd0THU
en4RevgIylVomJM5ztcsaD+pUlNXS+tFBTXtq2aW4q1eMVKbrVBkm5N12v96E0Ru
hP+awlp5UtSM7CC6BvqFTD+L6AdiLYCsgdRPM5GJgm/gXFbwst2Xjwp5KoB6y0us
7w/rLR1nNGD8crlvWzArCPTV0H+d+22SP2QrwoeuYRwV3A==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:45:03 2025 by rpki-client