Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3233203d3e20323731393239.roa
File:                     3137392e302e34322e302f32332d3233203d3e20323731393239.roa (raw, json)
Hash identifier:          COVWEu5mNmweQUeKCaqSXL+SzitTGWR/dGx3hMKtuRM=
Subject key identifier:   4B:30:C0:CB:F2:8E:2C:D1:88:61:CB:9B:4E:C2:57:AB:7E:C8:FE:8E
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       251BC65F3032A5B38285FE4F18B94B4F7F0BFED7
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3233203d3e20323731393239.roa
Signing time:             Mon 01 Sep 2025 14:10:00 +0000
ROA not before:           Mon 01 Sep 2025 14:05:00 +0000
ROA not after:            Mon 31 Aug 2026 14:10:00 +0000
asID:                     271929
IP address blocks:        179.0.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1b:c6:5f:30:32:a5:b3:82:85:fe:4f:18:b9:4b:4f:7f:0b:fe:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Sep  1 14:05:00 2025 GMT
            Not After : Aug 31 14:10:00 2026 GMT
        Subject: CN=4B30C0CBF28E2CD18861CB9B4EC257AB7EC8FE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:95:11:d6:26:d0:d7:74:f4:ee:3f:e7:14:
                    9e:ca:f7:c9:cd:1f:db:16:77:57:54:a5:47:1c:9b:
                    44:31:9c:f0:ea:4c:a6:9d:9f:30:47:36:2b:bd:ca:
                    e5:19:fa:a7:a6:66:b9:ed:89:3a:25:e4:cc:b6:22:
                    b8:02:91:50:de:92:5c:94:22:d4:d9:15:f3:1c:58:
                    2f:19:f4:b2:3f:1b:54:f1:c5:50:90:65:c5:56:5c:
                    47:57:af:41:e6:20:24:90:60:40:f7:ec:70:4d:d7:
                    3b:39:da:59:4d:75:41:6f:75:f1:fd:ae:64:d6:10:
                    2e:0e:de:ff:c2:9d:95:97:74:a2:ca:7b:2e:42:63:
                    7c:d1:c9:3a:9a:f3:a9:ab:1a:05:db:64:c9:b7:12:
                    79:87:12:13:01:bd:da:1e:4c:f1:f8:b7:5a:6c:fe:
                    af:8a:64:0c:a6:01:b7:96:0b:35:5c:e9:f4:29:33:
                    c4:23:1e:94:d2:75:0e:a1:c4:02:24:2e:35:59:7d:
                    02:1a:29:1d:fa:82:01:62:88:e2:58:a0:0b:41:3f:
                    27:f5:fb:9b:36:02:26:16:54:af:18:72:ba:32:4a:
                    a1:c4:68:f7:dd:bf:f9:93:0c:db:e5:f7:75:83:67:
                    29:a2:fe:11:69:88:17:45:83:ab:e0:68:a6:b3:ff:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:C0:CB:F2:8E:2C:D1:88:61:CB:9B:4E:C2:57:AB:7E:C8:FE:8E
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3233203d3e20323731393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:63:9d:b0:d7:a6:0c:38:f4:2a:fb:1b:22:73:04:eb:3f:b3:
         cf:0c:1d:de:b7:4b:ea:df:17:bd:d5:51:37:b1:09:7d:fb:94:
         0a:a2:2e:c5:7d:9b:f4:e0:8b:7c:fb:27:55:15:95:83:79:45:
         54:32:49:73:bb:58:93:32:2e:80:ec:b2:47:f7:94:83:2a:2f:
         e7:e2:d1:71:d7:32:81:5c:fa:0c:97:a0:a1:06:16:c0:54:ae:
         9d:70:c6:bb:7b:ce:c3:85:29:95:e7:4a:18:5d:79:dc:b8:c5:
         1a:9b:04:1a:c6:62:e2:7c:63:3d:01:31:1d:f8:ac:b9:99:42:
         76:98:08:9e:1a:4b:32:d0:0f:59:32:ad:2b:ed:75:9c:40:ad:
         9e:1d:c5:2b:2e:88:9a:4b:14:e4:6c:aa:c1:93:1b:f0:98:3a:
         cd:e1:0b:c2:11:4f:34:8f:9d:b5:30:ee:67:fd:fd:a1:f3:70:
         a4:f6:f7:51:8b:b9:47:98:c7:f9:fd:1e:b2:3a:0c:78:e8:cb:
         87:94:91:f5:95:e3:5b:b7:3a:40:4f:7f:3a:a5:20:e3:7c:36:
         cd:f1:97:8a:cd:d3:94:3a:9c:95:1b:58:c2:b0:5a:f5:e1:9b:
         d7:70:d1:64:e5:73:ef:55:9f:87:ac:fd:62:2f:87:50:a8:f4:
         c2:db:dd:c3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJRvGXzAypbOChf5PGLlLT38L/tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2QzQxQTY4RTM0NzUxMzhBRjUzQTVCNTU2MjdFREUz
NTQzMjA2ODAeFw0yNTA5MDExNDA1MDBaFw0yNjA4MzExNDEwMDBaMDMxMTAvBgNV
BAMTKDRCMzBDMENCRjI4RTJDRDE4ODYxQ0I5QjRFQzI1N0FCN0VDOEZFOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigJUR1ibQ13T07j/nFJ7K98nN
H9sWd1dUpUccm0QxnPDqTKadnzBHNiu9yuUZ+qemZrntiTol5My2IrgCkVDeklyU
ItTZFfMcWC8Z9LI/G1TxxVCQZcVWXEdXr0HmICSQYED37HBN1zs52llNdUFvdfH9
rmTWEC4O3v/CnZWXdKLKey5CY3zRyTqa86mrGgXbZMm3EnmHEhMBvdoeTPH4t1ps
/q+KZAymAbeWCzVc6fQpM8QjHpTSdQ6hxAIkLjVZfQIaKR36ggFiiOJYoAtBPyf1
+5s2AiYWVK8YcroySqHEaPfdv/mTDNvl93WDZymi/hFpiBdFg6vgaKaz/73dAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSzDAy/KOLNGIYcubTsJXq37I/o4wHwYDVR0j
BBgwFoAUkGxBpo40dROK9TpbVWJ+3jVDIGgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjIwMDdCOEQ0QUEyNjE0NDA4N0Y5QzNFNUY5RDM5RUNF
NTZCRDRFRDA5Nzg2REUxNTE0N0M5NTU3MTc1NDA2LzAvOTA2QzQxQTY4RTM0NzUx
MzhBRjUzQTVCNTU2MjdFREUzNTQzMjA2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDZDNDFBNjhFMzQ3NTEzOEFG
NTNBNUI1NTYyN0VERTM1NDMyMDY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYyMDA3QjhENEFBMjYxNDQwODdGOUMzRTVGOUQzOUVDRTU2QkQ0RUQw
OTc4NkRFMTUxNDdDOTU1NzE3NTQwNi8wLzMxMzczOTJlMzAyZTM0MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMjM3MzEzOTMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGzACowDQYJ
KoZIhvcNAQELBQADggEBAKRjnbDXpgw49Cr7GyJzBOs/s88MHd63S+rfF73VUTex
CX37lAqiLsV9m/Tgi3z7J1UVlYN5RVQySXO7WJMyLoDsskf3lIMqL+fi0XHXMoFc
+gyXoKEGFsBUrp1wxrt7zsOFKZXnShhdedy4xRqbBBrGYuJ8Yz0BMR34rLmZQnaY
CJ4aSzLQD1kyrSvtdZxArZ4dxSsuiJpLFORsqsGTG/CYOs3hC8IRTzSPnbUw7mf9
/aHzcKT291GLuUeYx/n9HrI6DHjoy4eUkfWV41u3OkBPfzqlION8Ns3xl4rN05Q6
nJUbWMKwWvXhm9dw0WTlc+9Vn4es/WIvh1Co9MLb3cM=
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:52:57 2025 by rpki-client