Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131322e302f32322d3234203d3e20323634383336.roa
File:                     3137302e38322e3131322e302f32322d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          zRWeIPrXO4BwJ2m4kw9cVNNFpa83RChNkw/J5LUuWYw=
Subject key identifier:   F4:B5:B1:36:37:DA:4B:F2:74:DE:C3:33:56:CC:82:0A:21:50:B6:01
Certificate issuer:       /CN=D8907C24B083798F60D6D27B4273976C3AF83A69
Certificate serial:       4EB21E7DB60B71D5B8504FBA7F8591F15EA7D916
Authority key identifier: D8:90:7C:24:B0:83:79:8F:60:D6:D2:7B:42:73:97:6C:3A:F8:3A:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131322e302f32322d3234203d3e20323634383336.roa
Signing time:             Thu 07 Aug 2025 15:35:02 +0000
ROA not before:           Thu 07 Aug 2025 15:30:02 +0000
ROA not after:            Thu 06 Aug 2026 15:35:02 +0000
asID:                     264836
IP address blocks:        170.82.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b2:1e:7d:b6:0b:71:d5:b8:50:4f:ba:7f:85:91:f1:5e:a7:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8907C24B083798F60D6D27B4273976C3AF83A69
        Validity
            Not Before: Aug  7 15:30:02 2025 GMT
            Not After : Aug  6 15:35:02 2026 GMT
        Subject: CN=F4B5B13637DA4BF274DEC33356CC820A2150B601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:74:4a:08:5b:99:f9:1d:38:7b:88:f5:a8:
                    a0:ad:3b:7b:bd:98:64:3e:0a:16:b0:dd:8c:a1:2c:
                    24:bf:57:79:03:4d:d2:85:5f:95:5e:42:88:df:19:
                    40:c6:8f:4d:a4:ad:3c:7e:02:69:50:91:76:f2:df:
                    11:09:70:bb:bd:76:9e:4b:da:fc:5d:87:92:94:40:
                    d3:c4:de:97:8b:5f:7c:7d:7c:60:db:9c:d3:2d:2f:
                    ff:11:f1:23:b7:23:6a:c1:56:12:7c:a8:e5:05:5f:
                    f1:1d:7a:16:ec:50:09:ef:c7:1e:25:66:3d:aa:ca:
                    02:45:33:c8:09:bc:03:eb:8d:4f:0c:06:5c:05:a0:
                    ca:65:24:d4:e8:f9:1e:04:f3:f3:05:4a:27:2e:0c:
                    ff:04:1c:ea:1f:76:f2:46:f3:ff:23:dc:f5:1a:09:
                    8d:55:09:f5:ca:a9:a6:6f:9d:63:9f:dd:e3:31:c6:
                    7e:9b:4c:88:e7:64:e7:db:ff:5e:4f:46:67:05:16:
                    1d:38:2b:bd:42:8b:c2:b9:06:6f:f4:bb:78:e0:a6:
                    c1:24:74:ca:7c:49:9b:55:11:04:9c:9b:98:63:74:
                    40:dc:cc:cc:6f:4b:6d:72:bf:0f:e4:6c:c3:c7:37:
                    68:ea:14:1f:b8:c2:3d:45:34:91:79:49:b8:e2:ea:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:B1:36:37:DA:4B:F2:74:DE:C3:33:56:CC:82:0A:21:50:B6:01
            X509v3 Authority Key Identifier:
                keyid:D8:90:7C:24:B0:83:79:8F:60:D6:D2:7B:42:73:97:6C:3A:F8:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/D8907C24B083798F60D6D27B4273976C3AF83A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8907C24B083798F60D6D27B4273976C3AF83A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131322e302f32322d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:60:c0:5c:68:86:8c:4e:e5:fd:e8:4e:15:08:c8:b2:c7:f9:
         0e:97:34:b5:8e:90:e6:bb:3a:84:22:88:fc:c2:ee:07:fe:7f:
         90:5a:39:e1:18:7a:22:f2:85:e6:ff:22:ff:09:bd:f8:9b:da:
         98:64:e1:64:70:37:9a:58:ec:63:1d:d4:d6:b8:87:cf:0c:9d:
         76:fb:70:64:65:92:40:73:7f:07:ef:be:da:6e:cf:58:21:a9:
         c6:d6:ee:66:c0:4f:65:07:b5:a4:92:2d:de:30:bf:f7:37:54:
         b2:b4:05:6f:d4:6c:d7:ad:05:9b:1a:a2:eb:73:77:cb:bf:cc:
         75:00:2a:d3:20:9a:7d:8d:10:c3:b0:a9:fb:6f:9d:52:ca:f2:
         2f:2d:33:70:53:dd:c3:ea:e2:55:68:98:79:47:20:6e:63:9b:
         43:2d:7d:3e:56:85:74:81:ae:42:4d:1a:06:f4:df:94:ff:87:
         81:14:b1:d2:ea:9c:43:d3:3e:0f:12:ee:cc:80:ed:86:e7:d7:
         2d:02:d5:a1:48:9f:d3:f8:35:59:9e:de:5f:d6:77:5b:50:83:
         1c:1d:78:51:23:76:78:c9:a7:9c:c4:9d:11:49:e4:f6:d7:bc:
         2b:3d:2d:71:9a:0c:c6:4e:38:a0:52:7b:5c:1e:a8:38:7b:22:
         43:44:62:2b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTrIefbYLcdW4UE+6f4WR8V6n2RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg5MDdDMjRCMDgzNzk4RjYwRDZEMjdCNDI3Mzk3NkMz
QUY4M0E2OTAeFw0yNTA4MDcxNTMwMDJaFw0yNjA4MDYxNTM1MDJaMDMxMTAvBgNV
BAMTKEY0QjVCMTM2MzdEQTRCRjI3NERFQzMzMzU2Q0M4MjBBMjE1MEI2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cXRKCFuZ+R04e4j1qKCtO3u9
mGQ+Chaw3YyhLCS/V3kDTdKFX5VeQojfGUDGj02krTx+AmlQkXby3xEJcLu9dp5L
2vxdh5KUQNPE3peLX3x9fGDbnNMtL/8R8SO3I2rBVhJ8qOUFX/EdehbsUAnvxx4l
Zj2qygJFM8gJvAPrjU8MBlwFoMplJNTo+R4E8/MFSicuDP8EHOofdvJG8/8j3PUa
CY1VCfXKqaZvnWOf3eMxxn6bTIjnZOfb/15PRmcFFh04K71Ci8K5Bm/0u3jgpsEk
dMp8SZtVEQScm5hjdEDczMxvS21yvw/kbMPHN2jqFB+4wj1FNJF5Sbji6prBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9LWxNjfaS/J03sMzVsyCCiFQtgEwHwYDVR0j
BBgwFoAU2JB8JLCDeY9g1tJ7QnOXbDr4OmkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEMyMTA4MDM2QjZBNjE1NDc4RDI3ODRFMDNBQTQ0MTVG
OEMxOTIxRkZEQTMwODIwM0Y4NjU5RTU0NzA5MTE4LzAvRDg5MDdDMjRCMDgzNzk4
RjYwRDZEMjdCNDI3Mzk3NkMzQUY4M0E2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODkwN0MyNEIwODM3OThGNjBE
NkQyN0I0MjczOTc2QzNBRjgzQTY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRDMjEwODAzNkI2QTYxNTQ3OEQyNzg0RTAzQUE0NDE1RjhDMTkyMUZG
REEzMDgyMDNGODY1OUU1NDcwOTExOC8wLzMxMzczMDJlMzgzMjJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlJw
MA0GCSqGSIb3DQEBCwUAA4IBAQDQYMBcaIaMTuX96E4VCMiyx/kOlzS1jpDmuzqE
Ioj8wu4H/n+QWjnhGHoi8oXm/yL/Cb34m9qYZOFkcDeaWOxjHdTWuIfPDJ12+3Bk
ZZJAc38H777abs9YIanG1u5mwE9lB7Wkki3eML/3N1SytAVv1GzXrQWbGqLrc3fL
v8x1ACrTIJp9jRDDsKn7b51SyvIvLTNwU93D6uJVaJh5RyBuY5tDLX0+VoV0ga5C
TRoG9N+U/4eBFLHS6pxD0z4PEu7MgO2G59ctAtWhSJ/T+DVZnt5f1ndbUIMcHXhR
I3Z4yaecxJ0RSeT217wrPS1xmgzGTjigUntcHqg4eyJDRGIr
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:58:31 2025 by rpki-client