Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232393038.roa
File:                     3137302e3136392e3130382e302f32342d3234203d3e203232393038.roa (raw, json)
Hash identifier:          n3vcDtqAztbXZ69RyKdBrxkwTM6E/13uIRCpU7ncWuQ=
Subject key identifier:   51:4C:25:A1:95:A7:05:5C:B2:D2:F5:F2:35:9D:B8:9A:0C:69:9E:3C
Certificate issuer:       /CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
Certificate serial:       79B004CDF3EF99E8877E4E82A6A6ED44A91E1E63
Authority key identifier: AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232393038.roa
Signing time:             Thu 25 Sep 2025 19:00:00 +0000
ROA not before:           Thu 25 Sep 2025 18:55:00 +0000
ROA not after:            Thu 24 Sep 2026 19:00:00 +0000
asID:                     22908
IP address blocks:        170.169.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b0:04:cd:f3:ef:99:e8:87:7e:4e:82:a6:a6:ed:44:a9:1e:1e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1D84EEC51B659DC69FA2256D2118720A18D705
        Validity
            Not Before: Sep 25 18:55:00 2025 GMT
            Not After : Sep 24 19:00:00 2026 GMT
        Subject: CN=514C25A195A7055CB2D2F5F2359DB89A0C699E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:fc:57:69:ca:c4:c1:34:44:12:81:70:58:
                    7a:99:33:0a:16:1c:7c:32:83:40:80:11:d3:79:4c:
                    95:bc:9e:44:54:d5:ae:1b:8a:45:8a:98:56:d0:87:
                    49:42:22:0d:75:b7:d0:d5:2f:bd:99:2a:c7:28:f3:
                    a6:4c:ac:8e:9b:ab:6a:bf:76:b3:8e:aa:cf:7a:0a:
                    7d:7a:79:84:73:73:38:0d:6a:a6:3b:e5:44:ee:f6:
                    6f:bc:55:a8:1e:14:e6:fd:82:16:44:98:b1:e4:e9:
                    be:de:4b:3f:89:ca:2d:9f:8e:eb:fc:57:19:54:b3:
                    9d:b6:fc:a4:bb:a2:ef:0e:9c:b8:88:9a:13:5f:1d:
                    a6:c0:b6:a2:2c:50:b3:fd:2d:a2:5f:07:e3:59:9a:
                    59:c9:28:a5:aa:71:ed:7c:14:f6:6c:82:97:15:d0:
                    4f:44:86:30:c0:63:dc:15:db:a2:6e:5d:7b:81:85:
                    39:e5:e3:ec:18:af:8d:93:57:60:5e:7f:fa:8c:c3:
                    00:e1:68:b5:f0:d3:40:4a:d5:a5:b4:ba:36:f1:aa:
                    a4:9d:e2:88:fa:db:c7:ef:56:52:60:e5:c3:db:0c:
                    01:08:aa:e5:de:fd:ab:6f:f2:ed:3e:cd:d7:3a:91:
                    07:84:23:aa:18:b5:5a:3c:9b:5b:69:5b:4b:b0:f5:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:25:A1:95:A7:05:5C:B2:D2:F5:F2:35:9D:B8:9A:0C:69:9E:3C
            X509v3 Authority Key Identifier:
                keyid:AD:1D:84:EE:C5:1B:65:9D:C6:9F:A2:25:6D:21:18:72:0A:18:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD1D84EEC51B659DC69FA2256D2118720A18D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDEBEE75B2F92C4C429917DCCAE37E77123C098C78627C29ABA0B449BD8E4E74/0/3137302e3136392e3130382e302f32342d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.169.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:3b:51:80:a4:c0:1d:04:dd:a1:62:34:8b:47:c0:2f:18:
         87:e1:f0:da:68:8d:8b:92:79:72:ba:11:e8:9f:9c:22:30:0f:
         32:1e:e7:0d:8f:f4:b5:fc:ed:ac:7a:70:21:7f:56:db:04:8a:
         46:61:a2:5f:ac:52:47:79:8c:96:35:01:0e:87:1c:ef:60:79:
         cf:78:82:07:b6:39:0a:95:bb:11:21:9f:0f:6e:7a:70:ce:d9:
         e9:44:8b:3f:21:3d:74:be:1e:21:de:07:c5:d5:2c:ba:ad:6c:
         c6:90:30:10:20:c3:82:02:ba:48:25:19:f2:01:9f:c2:68:5f:
         ce:53:df:1f:7d:64:91:e0:66:9e:9e:05:24:d0:10:6a:0d:a8:
         7f:49:c5:09:1f:d4:58:b6:32:c3:91:51:a6:0b:17:ae:6c:af:
         a6:96:f0:74:5b:4f:50:e3:64:34:66:9b:52:e2:ef:00:2e:83:
         2f:3b:8b:79:f3:21:b4:74:4a:53:46:96:19:d6:24:31:74:02:
         6d:80:3e:13:b4:7f:a5:58:1c:56:10:64:0e:13:d9:f0:57:d0:
         7d:0a:43:1f:1c:92:c5:fb:64:23:c6:3e:ae:f1:95:79:7c:e3:
         2d:f9:be:ba:24:8a:b5:67:e7:99:6c:18:a7:90:18:4f:f9:af:
         f2:a5:1b:a8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUebAEzfPvmeiHfk6CpqbtRKkeHmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQxRDg0RUVDNTFCNjU5REM2OUZBMjI1NkQyMTE4NzIw
QTE4RDcwNTAeFw0yNTA5MjUxODU1MDBaFw0yNjA5MjQxOTAwMDBaMDMxMTAvBgNV
BAMTKDUxNEMyNUExOTVBNzA1NUNCMkQyRjVGMjM1OURCODlBMEM2OTlFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtm/xXacrEwTREEoFwWHqZMwoW
HHwyg0CAEdN5TJW8nkRU1a4bikWKmFbQh0lCIg11t9DVL72ZKsco86ZMrI6bq2q/
drOOqs96Cn16eYRzczgNaqY75UTu9m+8VageFOb9ghZEmLHk6b7eSz+Jyi2fjuv8
VxlUs522/KS7ou8OnLiImhNfHabAtqIsULP9LaJfB+NZmlnJKKWqce18FPZsgpcV
0E9EhjDAY9wV26JuXXuBhTnl4+wYr42TV2Bef/qMwwDhaLXw00BK1aW0ujbxqqSd
4oj628fvVlJg5cPbDAEIquXe/atv8u0+zdc6kQeEI6oYtVo8m1tpW0uw9UmvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUUwloZWnBVyy0vXyNZ24mgxpnjwwHwYDVR0j
BBgwFoAUrR2E7sUbZZ3Gn6IlbSEYcgoY1wUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FREVCRUU3NUIyRjkyQzRDNDI5OTE3RENDQUUzN0U3NzEy
M0MwOThDNzg2MjdDMjlBQkEwQjQ0OUJEOEU0RTc0LzAvQUQxRDg0RUVDNTFCNjU5
REM2OUZBMjI1NkQyMTE4NzIwQTE4RDcwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDFEODRFRUM1MUI2NTlEQzY5
RkEyMjU2RDIxMTg3MjBBMThENzA1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRURFQkVFNzVCMkY5MkM0QzQyOTkxN0RDQ0FFMzdFNzcxMjNDMDk4Qzc4
NjI3QzI5QUJBMEI0NDlCRDhFNEU3NC8wLzMxMzczMDJlMzEzNjM5MmUzMTMwMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqls
MA0GCSqGSIb3DQEBCwUAA4IBAQCBDjtRgKTAHQTdoWI0i0fALxiH4fDaaI2Lknly
uhHon5wiMA8yHucNj/S1/O2senAhf1bbBIpGYaJfrFJHeYyWNQEOhxzvYHnPeIIH
tjkKlbsRIZ8PbnpwztnpRIs/IT10vh4h3gfF1Sy6rWzGkDAQIMOCArpIJRnyAZ/C
aF/OU98ffWSR4GaengUk0BBqDah/ScUJH9RYtjLDkVGmCxeubK+mlvB0W09Q42Q0
ZptS4u8ALoMvO4t58yG0dEpTRpYZ1iQxdAJtgD4TtH+lWBxWEGQOE9nwV9B9CkMf
HJLF+2Qjxj6u8ZV5fOMt+b66JIq1Z+eZbBinkBhP+a/ypRuo
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:04 2025 by rpki-client