Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230392e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3230392e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          8FZcQg+L9a7z2pA2oKX5F8GyUdRLBTbbL3fNiW43bhQ=
Subject key identifier:   A7:95:A9:29:24:C4:89:B4:36:E7:C5:A8:BC:34:40:F7:37:D3:BD:13
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       6AEC8A7D5C357219DD1C5E1E6A63987E89AED516
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230392e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:04 +0000
ROA not before:           Fri 31 Oct 2025 18:10:04 +0000
ROA not after:            Fri 30 Oct 2026 18:15:04 +0000
asID:                     27976
IP address blocks:        179.63.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ec:8a:7d:5c:35:72:19:dd:1c:5e:1e:6a:63:98:7e:89:ae:d5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:04 2025 GMT
            Not After : Oct 30 18:15:04 2026 GMT
        Subject: CN=A795A92924C489B436E7C5A8BC3440F737D3BD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:0d:fb:9e:5b:4b:f3:6d:08:7b:be:ce:e5:
                    07:27:3e:a0:64:1f:15:e2:86:7d:7b:c2:88:96:bd:
                    da:95:ca:75:55:b7:35:72:c8:a0:50:dc:b3:02:f0:
                    bc:3d:68:76:35:dc:89:ed:3d:3e:e1:a6:8d:23:69:
                    f6:df:1f:cc:dc:0e:9d:e9:72:94:4e:b0:a7:a2:d5:
                    db:6a:89:4b:70:f3:52:ba:f3:ba:21:b0:08:74:d1:
                    eb:2d:9d:c7:3d:1f:de:d6:7c:43:cf:4c:8c:38:6b:
                    80:16:47:aa:10:14:fa:c7:95:6d:9a:73:27:ea:9e:
                    84:05:58:b4:66:a0:f4:83:88:d3:44:d2:02:be:f7:
                    86:25:3b:82:cc:b8:05:93:45:7e:38:21:44:0e:48:
                    e1:96:2f:7e:17:46:11:55:97:5b:fa:f8:e9:e1:b5:
                    31:e0:14:82:06:4e:98:d1:98:94:8a:0d:b4:18:51:
                    d1:60:2d:c3:31:4c:1b:43:7c:59:95:1e:4d:ce:b6:
                    dc:c9:fb:5b:08:20:6d:36:d8:23:0f:57:ff:9c:91:
                    34:c1:2f:aa:ee:29:c8:20:68:40:10:f4:2f:18:a3:
                    52:c0:b2:50:e8:2d:c1:57:f3:8f:b7:a1:0e:cc:b8:
                    d3:4c:32:9c:bc:28:53:38:8e:c7:4b:b4:e2:f9:87:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:95:A9:29:24:C4:89:B4:36:E7:C5:A8:BC:34:40:F7:37:D3:BD:13
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230392e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:7c:f6:5d:5b:0f:2e:9c:b6:bd:38:60:91:2e:ca:09:d0:
         fe:87:d8:ea:00:25:08:0d:0b:30:08:71:4c:be:a0:1d:2b:f4:
         f3:0d:6e:1a:d7:20:c7:d1:9b:1a:ba:ed:da:58:aa:45:57:06:
         92:44:f8:09:29:53:e6:40:00:86:e1:fe:bb:2e:c8:8f:3b:1f:
         fd:81:6a:0d:14:c4:0a:b4:7b:15:05:90:10:1d:88:08:fc:12:
         4b:2b:f7:c8:b8:66:3b:c9:58:f1:eb:7e:50:2e:6e:cf:0c:3e:
         70:49:8d:9f:a8:24:b2:db:fe:bf:e5:59:42:aa:ae:83:20:70:
         bb:52:64:ea:c5:b5:21:69:a4:9d:cd:5f:19:b4:44:17:79:93:
         69:a5:98:99:5e:f8:87:d9:5c:e4:ff:df:d4:9f:73:bd:e0:14:
         01:75:17:02:38:64:ef:e2:7e:41:87:cd:51:f2:36:d1:6f:bb:
         98:18:03:a7:c3:73:e5:d7:6c:ed:59:ad:12:70:a2:5a:5c:e1:
         15:59:60:be:1d:56:e2:b3:55:58:ea:98:6f:7f:ad:12:96:95:
         75:c7:7d:4b:57:15:9b:a5:de:91:a3:ac:5f:00:be:52:b2:90:
         d1:0b:05:d4:fe:49:cc:f2:20:40:0f:2f:6a:75:bd:95:b8:1a:
         91:81:34:78
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUauyKfVw1chndHF4eamOYfomu1RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNTEwMzExODEwMDRaFw0yNjEwMzAxODE1MDRaMDMxMTAvBgNV
BAMTKEE3OTVBOTI5MjRDNDg5QjQzNkU3QzVBOEJDMzQ0MEY3MzdEM0JEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQgg37nltL820Ie77O5QcnPqBk
HxXihn17woiWvdqVynVVtzVyyKBQ3LMC8Lw9aHY13IntPT7hpo0jafbfH8zcDp3p
cpROsKei1dtqiUtw81K687ohsAh00estncc9H97WfEPPTIw4a4AWR6oQFPrHlW2a
cyfqnoQFWLRmoPSDiNNE0gK+94YlO4LMuAWTRX44IUQOSOGWL34XRhFVl1v6+Onh
tTHgFIIGTpjRmJSKDbQYUdFgLcMxTBtDfFmVHk3OttzJ+1sIIG022CMPV/+ckTTB
L6ruKcggaEAQ9C8Yo1LAslDoLcFX84+3oQ7MuNNMMpy8KFM4jsdLtOL5h/B5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUp5WpKSTEibQ258WovDRA9zfTvRMwHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMxMzczOTJlMzYzMzJlMzIzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM/0TAN
BgkqhkiG9w0BAQsFAAOCAQEAYuN89l1bDy6ctr04YJEuygnQ/ofY6gAlCA0LMAhx
TL6gHSv08w1uGtcgx9GbGrrt2liqRVcGkkT4CSlT5kAAhuH+uy7Ijzsf/YFqDRTE
CrR7FQWQEB2ICPwSSyv3yLhmO8lY8et+UC5uzww+cEmNn6gkstv+v+VZQqqugyBw
u1Jk6sW1IWmknc1fGbREF3mTaaWYmV74h9lc5P/f1J9zveAUAXUXAjhk7+J+QYfN
UfI20W+7mBgDp8Nz5dds7VmtEnCiWlzhFVlgvh1W4rNVWOqYb3+tEpaVdcd9S1cV
m6XekaOsXwC+UrKQ0QsF1P5JzPIgQA8vanW9lbgakYE0eA==
-----END CERTIFICATE-----
Generated at Sat Nov 1 19:44:05 2025 by rpki-client