Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231332e302f32342d3234203d3e203237393736.roa
File:                     3137392e36332e3231332e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          OZcrwiGuT59D84Z130Tg9ZuCaL0ZhQ1UXrMjp066GKo=
Subject key identifier:   73:AB:FE:83:F4:B4:A8:13:EF:30:33:56:C0:0C:99:4A:92:42:AA:52
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       24EF27ADA52471E598FB8BEB9EF2D1D6AC693A36
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231332e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:02 +0000
ROA not before:           Fri 31 Oct 2025 18:10:02 +0000
ROA not after:            Fri 30 Oct 2026 18:15:02 +0000
asID:                     27976
IP address blocks:        179.63.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ef:27:ad:a5:24:71:e5:98:fb:8b:eb:9e:f2:d1:d6:ac:69:3a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:02 2025 GMT
            Not After : Oct 30 18:15:02 2026 GMT
        Subject: CN=73ABFE83F4B4A813EF303356C00C994A9242AA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:6e:ba:31:0f:2c:3a:43:c7:da:25:72:38:
                    35:54:fe:d5:1a:f1:3e:f3:9f:6f:2c:c9:b7:d6:11:
                    2e:cd:18:a7:57:5a:66:5e:c4:3b:73:41:78:d2:fd:
                    63:58:53:72:96:7c:fd:18:b6:46:d7:ec:b4:8d:bc:
                    c2:0d:3e:13:a1:42:2e:03:65:3b:f5:16:73:49:3a:
                    fe:3e:07:25:b6:29:31:9e:0c:d7:c2:5f:9c:d2:47:
                    a0:a3:77:d2:eb:4b:5c:25:a7:c3:b2:ac:74:80:3f:
                    9e:83:ee:f1:5d:a1:1b:2d:a3:04:9e:ef:a9:19:ca:
                    ba:03:d6:3e:72:62:ec:b3:f3:81:bb:fc:37:20:60:
                    87:cb:56:ac:5d:0d:d8:e5:dc:6a:60:e9:a9:92:bb:
                    53:cd:ed:fe:c7:23:e3:85:c1:81:5a:e4:3d:eb:89:
                    be:8c:1f:eb:0e:f7:19:5c:54:cd:3f:19:05:09:dc:
                    e3:0a:2c:b3:a8:13:8a:91:bf:a5:a8:26:1b:b6:0c:
                    ee:eb:b5:0e:0a:72:c5:79:cb:90:30:83:a6:80:40:
                    6f:71:c6:48:04:9f:c6:53:26:d6:93:b7:d2:9e:1d:
                    31:7a:08:25:b3:98:37:d5:33:d2:d9:8a:fa:f8:10:
                    5d:e0:71:d5:81:cd:7a:6a:16:dd:94:21:57:29:a5:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:FE:83:F4:B4:A8:13:EF:30:33:56:C0:0C:99:4A:92:42:AA:52
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3231332e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:c1:fb:f4:34:dd:73:29:2d:c3:03:ad:15:3b:f5:94:2b:01:
         2b:6f:44:c1:48:a8:4e:7f:d5:91:48:8d:17:fa:9a:12:36:03:
         ed:43:a3:f5:83:02:84:1c:7d:82:e5:27:88:c1:13:5a:3a:48:
         51:ab:85:32:63:43:41:fc:e7:37:f2:c0:72:b6:76:70:89:fc:
         a7:40:5e:99:87:9d:43:d8:bd:41:0e:96:78:f3:9b:03:d4:00:
         f6:fb:20:52:4c:9e:ce:b2:c8:18:5b:16:9a:f8:a7:d1:81:b7:
         e1:f5:3d:4b:11:20:e2:37:95:ea:df:ed:5f:29:d0:e1:d4:e1:
         4c:38:b2:5f:a5:7b:91:ed:4b:86:39:e9:b0:59:b5:15:98:34:
         46:79:ac:5a:a6:62:7c:1d:06:e3:c2:4d:0b:ae:92:d9:d3:ef:
         96:59:da:6e:67:4c:80:cd:41:df:d9:ce:2f:a9:20:3c:dd:f7:
         7c:48:4c:92:00:26:ba:b0:d3:ff:6d:b0:ba:3e:77:1e:eb:a3:
         7a:b8:94:91:44:f2:a8:f7:7c:62:30:ce:5c:83:0e:27:4c:0d:
         5f:b6:2c:13:80:8f:4b:cb:c4:58:b1:a0:8a:91:07:26:ff:50:
         b8:f3:82:a4:aa:46:10:29:81:ef:da:7f:7a:55:b8:79:dc:bb:
         f1:ff:bf:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJO8nraUkceWY+4vrnvLR1qxpOjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNTEwMzExODEwMDJaFw0yNjEwMzAxODE1MDJaMDMxMTAvBgNV
BAMTKDczQUJGRTgzRjRCNEE4MTNFRjMwMzM1NkMwMEM5OTRBOTI0MkFBNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50W66MQ8sOkPH2iVyODVU/tUa
8T7zn28sybfWES7NGKdXWmZexDtzQXjS/WNYU3KWfP0YtkbX7LSNvMINPhOhQi4D
ZTv1FnNJOv4+ByW2KTGeDNfCX5zSR6Cjd9LrS1wlp8OyrHSAP56D7vFdoRstowSe
76kZyroD1j5yYuyz84G7/DcgYIfLVqxdDdjl3Gpg6amSu1PN7f7HI+OFwYFa5D3r
ib6MH+sO9xlcVM0/GQUJ3OMKLLOoE4qRv6WoJhu2DO7rtQ4KcsV5y5Awg6aAQG9x
xkgEn8ZTJtaTt9KeHTF6CCWzmDfVM9LZivr4EF3gcdWBzXpqFt2UIVcppfWlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUc6v+g/S0qBPvMDNWwAyZSpJCqlIwHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMxMzczOTJlMzYzMzJlMzIzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM/1TAN
BgkqhkiG9w0BAQsFAAOCAQEAssH79DTdcyktwwOtFTv1lCsBK29EwUioTn/VkUiN
F/qaEjYD7UOj9YMChBx9guUniMETWjpIUauFMmNDQfznN/LAcrZ2cIn8p0BemYed
Q9i9QQ6WePObA9QA9vsgUkyezrLIGFsWmvin0YG34fU9SxEg4jeV6t/tXynQ4dTh
TDiyX6V7ke1LhjnpsFm1FZg0RnmsWqZifB0G48JNC66S2dPvllnabmdMgM1B39nO
L6kgPN33fEhMkgAmurDT/22wuj53HuujeriUkUTyqPd8YjDOXIMOJ0wNX7YsE4CP
S8vEWLGgipEHJv9QuPOCpKpGECmB79p/elW4edy78f+/nw==
-----END CERTIFICATE-----
Generated at Sat Nov 1 19:43:14 2025 by rpki-client