Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/3230312e3138322e37362e302f32342d3234203d3e20323733393636.roa
File:                     3230312e3138322e37362e302f32342d3234203d3e20323733393636.roa (raw, json)
Hash identifier:          l4dlx0CidTbMhaiPAgOZW+C2Md6xVgLQwC0LwJqg9cY=
Subject key identifier:   7F:DB:76:7E:61:B2:B7:22:F4:24:FD:D5:31:F2:59:E6:0E:CF:56:AF
Certificate issuer:       /CN=2A85DB20A6F649E19299347ED803233E0DC81C1F
Certificate serial:       21DA5A18EA2128041146CAC7A388BE0E7055D6FC
Authority key identifier: 2A:85:DB:20:A6:F6:49:E1:92:99:34:7E:D8:03:23:3E:0D:C8:1C:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/3230312e3138322e37362e302f32342d3234203d3e20323733393636.roa
Signing time:             Sat 11 Oct 2025 23:00:00 +0000
ROA not before:           Sat 11 Oct 2025 22:55:00 +0000
ROA not after:            Sat 10 Oct 2026 23:00:00 +0000
asID:                     273966
IP address blocks:        201.182.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 22:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:da:5a:18:ea:21:28:04:11:46:ca:c7:a3:88:be:0e:70:55:d6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A85DB20A6F649E19299347ED803233E0DC81C1F
        Validity
            Not Before: Oct 11 22:55:00 2025 GMT
            Not After : Oct 10 23:00:00 2026 GMT
        Subject: CN=7FDB767E61B2B722F424FDD531F259E60ECF56AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:77:36:8d:ab:f4:47:2f:0d:39:63:2c:66:
                    e5:e9:16:54:44:3f:61:8b:e0:35:72:de:ad:3b:43:
                    e4:1a:4c:97:16:4f:9b:f6:b4:1c:45:aa:98:6a:6f:
                    26:5e:fa:96:33:02:8e:bb:9d:84:73:70:d6:1d:9c:
                    8e:2c:8f:0e:20:88:7d:06:9a:9f:ad:8f:ca:ab:55:
                    c0:29:75:a7:f0:b4:d2:fe:57:8b:41:32:76:c6:b6:
                    f2:93:5a:b9:f8:06:d8:17:6e:64:cb:8a:f8:2a:bb:
                    37:40:17:90:50:56:e3:da:10:ec:3f:64:f0:f7:73:
                    f4:08:06:a9:07:1e:59:a1:6e:f4:c5:e8:67:d1:94:
                    df:66:64:a7:b9:58:75:a6:99:c2:02:56:f3:f0:6f:
                    e6:f3:38:1a:88:0e:eb:f5:fc:6e:3a:2e:49:49:e6:
                    c2:31:e9:2f:d1:11:fc:6f:1e:1a:b5:cf:50:9d:ff:
                    21:1f:3d:f2:02:15:cd:73:fb:21:30:3f:d9:0f:99:
                    8a:ba:5e:a0:f7:80:9c:42:7e:13:ca:94:36:08:57:
                    f5:56:71:85:07:cb:33:f8:44:f5:c7:e6:c3:93:cb:
                    3b:44:58:11:67:77:9c:14:c0:2f:00:42:9a:bf:f3:
                    15:67:01:6b:e4:a8:82:dd:de:9b:bf:37:5d:5e:0c:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:76:7E:61:B2:B7:22:F4:24:FD:D5:31:F2:59:E6:0E:CF:56:AF
            X509v3 Authority Key Identifier:
                keyid:2A:85:DB:20:A6:F6:49:E1:92:99:34:7E:D8:03:23:3E:0D:C8:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A85DB20A6F649E19299347ED803233E0DC81C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD6F8E7048E74F40800EAA41840FCA54BE39FF0A905BB6B6AD1AF2EE428BDE7E/0/3230312e3138322e37362e302f32342d3234203d3e20323733393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:cb:15:09:12:94:e2:5b:71:b7:71:9a:a1:bd:3e:0a:7d:
         40:1d:4c:b3:b4:91:34:af:b5:51:82:8c:a4:1f:c1:29:ed:76:
         8f:7e:2a:52:dc:75:96:b0:9d:0c:30:50:4c:63:50:46:8c:4d:
         fe:de:9f:55:ce:68:aa:97:f4:b7:7f:9c:ab:dc:d0:8a:10:f6:
         1d:db:42:2d:62:ab:28:6c:da:6b:9c:63:85:0d:dd:df:14:48:
         4a:c5:b1:85:44:2e:6e:e4:8e:d7:c2:87:41:0e:ea:4e:27:ee:
         21:f3:44:99:02:70:03:18:3b:61:42:05:e8:7b:76:40:d0:7f:
         6a:8c:89:c9:60:a0:30:34:db:04:17:c5:db:f7:f9:f1:93:94:
         74:b7:94:a0:d1:ab:7c:bf:ca:dd:85:8b:af:84:83:27:2c:53:
         9e:2c:18:f9:08:65:8c:17:e0:b3:85:f4:c6:a4:14:52:65:e7:
         bf:fd:c4:2d:86:95:85:6a:05:6d:9d:d5:84:cc:04:ca:61:48:
         d4:dc:39:fe:4f:9f:40:4e:fd:7b:d4:6f:2b:c4:e4:23:c5:e7:
         5d:36:ef:2c:f1:4a:db:01:2e:2c:1d:b3:a2:cb:39:87:91:bb:
         c4:2e:83:85:16:1e:28:d2:cd:04:0b:99:03:7c:40:8c:85:7a:
         20:8c:dc:8b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIdpaGOohKAQRRsrHo4i+DnBV1vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE4NURCMjBBNkY2NDlFMTkyOTkzNDdFRDgwMzIzM0Uw
REM4MUMxRjAeFw0yNTEwMTEyMjU1MDBaFw0yNjEwMTAyMzAwMDBaMDMxMTAvBgNV
BAMTKDdGREI3NjdFNjFCMkI3MjJGNDI0RkRENTMxRjI1OUU2MEVDRjU2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpz3c2jav0Ry8NOWMsZuXpFlRE
P2GL4DVy3q07Q+QaTJcWT5v2tBxFqphqbyZe+pYzAo67nYRzcNYdnI4sjw4giH0G
mp+tj8qrVcApdafwtNL+V4tBMnbGtvKTWrn4BtgXbmTLivgquzdAF5BQVuPaEOw/
ZPD3c/QIBqkHHlmhbvTF6GfRlN9mZKe5WHWmmcICVvPwb+bzOBqIDuv1/G46LklJ
5sIx6S/REfxvHhq1z1Cd/yEfPfICFc1z+yEwP9kPmYq6XqD3gJxCfhPKlDYIV/VW
cYUHyzP4RPXH5sOTyztEWBFnd5wUwC8AQpq/8xVnAWvkqILd3pu/N11eDA8zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUf9t2fmGytyL0JP3VMfJZ5g7PVq8wHwYDVR0j
BBgwFoAUKoXbIKb2SeGSmTR+2AMjPg3IHB8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDZGOEU3MDQ4RTc0RjQwODAwRUFBNDE4NDBGQ0E1NEJF
MzlGRjBBOTA1QkI2QjZBRDFBRjJFRTQyOEJERTdFLzAvMkE4NURCMjBBNkY2NDlF
MTkyOTkzNDdFRDgwMzIzM0UwREM4MUMxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQTg1REIyMEE2RjY0OUUxOTI5
OTM0N0VEODAzMjMzRTBEQzgxQzFGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q2RjhFNzA0OEU3NEY0MDgwMEVBQTQxODQwRkNBNTRCRTM5RkYwQTkw
NUJCNkI2QUQxQUYyRUU0MjhCREU3RS8wLzMyMzAzMTJlMzEzODMyMmUzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzkzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAybZM
MA0GCSqGSIb3DQEBCwUAA4IBAQCK98sVCRKU4ltxt3Gaob0+Cn1AHUyztJE0r7VR
goykH8Ep7XaPfipS3HWWsJ0MMFBMY1BGjE3+3p9Vzmiql/S3f5yr3NCKEPYd20It
YqsobNprnGOFDd3fFEhKxbGFRC5u5I7XwodBDupOJ+4h80SZAnADGDthQgXoe3ZA
0H9qjInJYKAwNNsEF8Xb9/nxk5R0t5Sg0at8v8rdhYuvhIMnLFOeLBj5CGWMF+Cz
hfTGpBRSZee//cQthpWFagVtndWEzATKYUjU3Dn+T59ATv171G8rxOQjxeddNu8s
8UrbAS4sHbOiyzmHkbvELoOFFh4o0s0EC5kDfECMhXogjNyL
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:50:46 2025 by rpki-client