Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32342d3234203d3e203238333937.roa
File:                     3133312e302e3233362e302f32342d3234203d3e203238333937.roa (raw, json)
Hash identifier:          UWgwNqZ4O1zWHqSmaFl2sZDfy9sg6BQjT2YoHJA+iOg=
Subject key identifier:   5E:79:8B:31:95:E2:0A:89:AA:2F:FB:AF:33:1B:86:03:4E:A6:21:70
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       6418AADA816DDE80C59B144EA668F56E56EC1B90
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32342d3234203d3e203238333937.roa
Signing time:             Mon 30 Jun 2025 21:40:00 +0000
ROA not before:           Mon 30 Jun 2025 21:35:00 +0000
ROA not after:            Mon 29 Jun 2026 21:40:00 +0000
asID:                     28397
IP address blocks:        131.0.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:18:aa:da:81:6d:de:80:c5:9b:14:4e:a6:68:f5:6e:56:ec:1b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Jun 30 21:35:00 2025 GMT
            Not After : Jun 29 21:40:00 2026 GMT
        Subject: CN=5E798B3195E20A89AA2FFBAF331B86034EA62170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:e1:76:9a:98:e8:b1:f1:c9:52:87:fb:74:
                    79:ab:9a:11:37:1a:b5:a3:3d:28:72:bd:b5:94:cb:
                    76:ee:14:f7:90:16:45:f0:27:f2:af:e1:1b:43:f1:
                    7c:c9:3f:cb:44:f1:aa:d3:b5:ad:a2:e7:1d:69:d5:
                    6c:a4:f5:98:c5:3e:94:0d:15:e7:6e:a3:6b:e2:3e:
                    87:a6:80:de:0a:2e:94:d6:bd:13:09:f4:b5:15:c6:
                    1a:f2:4f:69:18:d0:4f:4c:d6:39:be:d8:1f:70:47:
                    56:d2:d8:a5:03:b4:77:8b:80:7e:e4:93:7d:39:a4:
                    55:36:39:48:80:bb:55:f1:8f:4e:e4:27:06:f5:91:
                    fa:8f:80:a8:20:f7:0c:4a:65:cc:0f:b1:57:a2:c7:
                    a5:6f:30:2e:f2:3d:4a:6a:6d:b4:a5:a2:6b:5b:32:
                    38:73:f1:6a:62:45:62:f7:1c:d3:e9:f9:c6:8e:4a:
                    d0:01:d7:75:4d:e2:94:38:13:73:45:f6:14:97:1b:
                    45:bf:e3:da:0f:96:55:47:94:40:fb:be:de:70:fc:
                    e1:3c:d9:2d:a7:1a:d9:87:c7:50:c2:9c:a3:bd:e6:
                    74:7e:35:82:a2:5d:03:60:9e:83:c1:59:31:25:10:
                    9b:89:6c:f4:5f:43:51:80:05:43:75:69:e4:19:95:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:8B:31:95:E2:0A:89:AA:2F:FB:AF:33:1B:86:03:4E:A6:21:70
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32342d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bc:b0:4d:b3:71:43:15:0d:21:e7:f9:82:45:f6:81:0c:1f:
         4f:a7:7d:d3:0e:70:4a:48:90:85:46:83:d7:22:e7:1e:10:1f:
         34:a4:b2:9c:e3:ed:31:44:d7:6f:ff:b1:42:b2:51:cc:89:7f:
         1f:19:b7:e1:8e:0f:7a:88:c8:51:5f:07:e9:08:6b:2c:f3:30:
         60:17:dc:5d:ee:a6:29:2b:32:c3:b1:4d:d0:14:65:7d:03:2b:
         9f:3e:a2:e3:29:18:21:22:d3:23:e5:25:cd:b2:f7:08:bf:bc:
         7f:e3:ea:4a:d7:c5:36:b0:74:4a:d8:3f:59:62:37:b4:3d:2b:
         41:a1:36:c1:2a:4b:02:bd:cb:49:30:51:e9:53:00:9e:02:87:
         13:16:8a:f1:ed:14:55:15:10:27:2f:60:6f:a5:f9:f8:7d:89:
         67:20:80:9a:e0:e8:5f:c9:f3:10:50:c2:3e:be:e9:98:05:f2:
         47:5b:d6:46:b2:40:6a:b9:aa:7e:5f:e5:35:7a:8a:b6:b3:15:
         c6:d3:a8:9e:d8:27:2f:18:1f:69:57:25:06:41:3a:7f:5e:52:
         8f:a1:6a:3c:4f:07:5c:17:ef:c6:2e:3d:83:e9:b2:2c:93:c9:
         24:59:15:f1:d8:12:f1:76:b7:13:f1:dd:6a:06:da:ed:4a:51:
         98:f9:8a:46
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZBiq2oFt3oDFmxROpmj1blbsG5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5MDUyNzIyRTEyRjMxNTVGQUM0QTlFQkRFN0Q0ODcz
NTVDRjBCRTAeFw0yNTA2MzAyMTM1MDBaFw0yNjA2MjkyMTQwMDBaMDMxMTAvBgNV
BAMTKDVFNzk4QjMxOTVFMjBBODlBQTJGRkJBRjMzMUI4NjAzNEVBNjIxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB++F2mpjosfHJUof7dHmrmhE3
GrWjPShyvbWUy3buFPeQFkXwJ/Kv4RtD8XzJP8tE8arTta2i5x1p1Wyk9ZjFPpQN
Feduo2viPoemgN4KLpTWvRMJ9LUVxhryT2kY0E9M1jm+2B9wR1bS2KUDtHeLgH7k
k305pFU2OUiAu1Xxj07kJwb1kfqPgKgg9wxKZcwPsVeix6VvMC7yPUpqbbSlomtb
Mjhz8WpiRWL3HNPp+caOStAB13VN4pQ4E3NF9hSXG0W/49oPllVHlED7vt5w/OE8
2S2nGtmHx1DCnKO95nR+NYKiXQNgnoPBWTElEJuJbPRfQ1GABUN1aeQZlcNRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXnmLMZXiComqL/uvMxuGA06mIXAwHwYDVR0j
BBgwFoAUnZBSci4S8xVfrEqevefUhzVc8L4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNjNDRkZDQjY5RUQ3MTZCMUQ3RTYyQ0I1NjhCOTc2RDY0
NTlFOEFFRDQ4OUM1QjIzN0YxMTEwODNBNDIyMDA1LzAvOUQ5MDUyNzIyRTEyRjMx
NTVGQUM0QTlFQkRFN0Q0ODczNTVDRjBCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDkwNTI3MjJFMTJGMzE1NUZB
QzRBOUVCREU3RDQ4NzM1NUNGMEJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjYzQ0ZGQ0I2OUVENzE2QjFEN0U2MkNCNTY4Qjk3NkQ2NDU5RThBRUQ0
ODlDNUIyMzdGMTExMDgzQTQyMjAwNS8wLzMxMzMzMTJlMzAyZTMyMzMzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDAOwwDQYJ
KoZIhvcNAQELBQADggEBABu8sE2zcUMVDSHn+YJF9oEMH0+nfdMOcEpIkIVGg9ci
5x4QHzSkspzj7TFE12//sUKyUcyJfx8Zt+GOD3qIyFFfB+kIayzzMGAX3F3upikr
MsOxTdAUZX0DK58+ouMpGCEi0yPlJc2y9wi/vH/j6krXxTawdErYP1liN7Q9K0Gh
NsEqSwK9y0kwUelTAJ4ChxMWivHtFFUVECcvYG+l+fh9iWcggJrg6F/J8xBQwj6+
6ZgF8kdb1kayQGq5qn5f5TV6irazFcbTqJ7YJy8YH2lXJQZBOn9eUo+hajxPB1wX
78YuPYPpsiyTySRZFfHYEvF2txPx3WoG2u1KUZj5ikY=
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:26:40 2025 by rpki-client