Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32342d3234203d3e20323731393239.roa
File:                     3137392e302e34322e302f32342d3234203d3e20323731393239.roa (raw, json)
Hash identifier:          pfisxudVLmvRSORHnhiv38n/CrtzKsHELeXnFTJzP1Y=
Subject key identifier:   CB:50:BB:5E:1D:2D:D7:3B:6D:D6:B3:0E:C1:C0:49:AE:83:92:1C:36
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       051F3735A95A28B7B758B0B5137FAD5EE8A5D88D
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32342d3234203d3e20323731393239.roa
Signing time:             Sat 30 Aug 2025 14:40:00 +0000
ROA not before:           Sat 30 Aug 2025 14:35:00 +0000
ROA not after:            Sat 29 Aug 2026 14:40:00 +0000
asID:                     271929
IP address blocks:        179.0.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:37:35:a9:5a:28:b7:b7:58:b0:b5:13:7f:ad:5e:e8:a5:d8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Aug 30 14:35:00 2025 GMT
            Not After : Aug 29 14:40:00 2026 GMT
        Subject: CN=CB50BB5E1D2DD73B6DD6B30EC1C049AE83921C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:06:4e:46:38:89:15:13:90:23:29:f4:ea:
                    4a:b2:b2:8c:57:1c:7f:80:f8:ff:b7:6f:32:69:1a:
                    37:97:54:bb:78:db:a1:16:b0:85:95:11:2c:89:26:
                    04:f3:96:2e:a0:68:2a:21:1f:e2:a9:db:a1:de:60:
                    4d:59:83:86:55:dd:ae:14:c6:d6:62:15:12:9c:c7:
                    30:ae:6b:62:0c:3a:e6:6b:ec:6d:b7:b2:2c:4c:7c:
                    ae:61:b9:23:b4:7c:73:f2:c4:a8:7e:97:48:dd:71:
                    54:ae:52:22:3c:31:c7:c2:cf:86:70:ba:73:ad:05:
                    4c:5f:1f:97:47:a2:3e:d6:2b:9d:75:40:d7:dd:8a:
                    35:48:d2:7b:da:d6:10:ff:89:c5:a3:fa:58:d7:54:
                    29:86:28:30:8f:c8:9e:85:9a:da:b2:21:d8:4f:5a:
                    47:ba:fb:36:0f:d4:de:f4:1d:5f:b3:f2:0c:f2:7c:
                    14:9f:96:c7:73:aa:c6:5e:4c:86:bc:94:3c:03:22:
                    1b:cc:3d:ea:2b:4d:75:7a:7e:6d:97:be:34:15:f0:
                    4c:23:ea:b4:1e:44:da:db:a5:14:3f:64:15:e7:4a:
                    ce:9d:ba:c5:09:8c:c8:65:c6:7c:95:ca:bf:5b:95:
                    c2:9e:bf:be:7a:cb:99:1d:a4:82:46:54:7a:c2:e8:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:BB:5E:1D:2D:D7:3B:6D:D6:B3:0E:C1:C0:49:AE:83:92:1C:36
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32342d3234203d3e20323731393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:13:d1:fb:dc:c6:6d:93:76:b4:a0:93:16:b4:57:89:e1:90:
         ae:ad:ec:1d:20:fc:c4:a2:8b:ab:33:fb:6b:b8:c4:60:77:d3:
         0f:84:16:81:de:8e:cc:a1:2f:53:f3:c5:c2:5e:2b:96:50:cb:
         7f:c8:b5:1a:cf:08:b4:ec:9c:b4:77:f7:d5:e8:b0:47:3c:60:
         16:e0:d3:5d:2a:6b:9d:bc:c2:ac:2e:5b:93:27:ba:b5:2a:0d:
         d8:a3:30:70:89:38:4c:e4:35:f7:f6:fd:cf:01:92:9d:6e:99:
         20:13:fb:82:ec:e7:94:f9:c2:bb:1d:3c:46:13:9e:f8:2b:9d:
         03:50:13:cd:4e:d5:8e:ea:3d:03:92:4c:32:83:a5:c6:bb:91:
         7b:39:6e:3f:86:75:14:2c:72:d5:7a:a7:7c:ce:46:42:5b:6b:
         f6:5e:f5:aa:d2:b9:59:13:98:b1:54:a6:13:7c:9a:f3:25:42:
         ff:15:5d:bb:5e:b9:32:64:9f:1c:a5:77:df:6f:df:b7:28:17:
         f3:14:69:e1:0e:e7:dd:86:30:e1:69:da:c2:34:bc:81:3b:e7:
         6d:84:7c:e5:b5:6a:ed:cd:ed:4b:ad:25:c9:a6:71:27:62:ad:
         ca:11:1f:b6:93:d2:ad:4d:06:ef:e0:96:17:b4:9a:3b:ef:07:
         4d:05:a8:9e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBR83NalaKLe3WLC1E3+tXuil2I0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2QzQxQTY4RTM0NzUxMzhBRjUzQTVCNTU2MjdFREUz
NTQzMjA2ODAeFw0yNTA4MzAxNDM1MDBaFw0yNjA4MjkxNDQwMDBaMDMxMTAvBgNV
BAMTKENCNTBCQjVFMUQyREQ3M0I2REQ2QjMwRUMxQzA0OUFFODM5MjFDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNQZORjiJFROQIyn06kqysoxX
HH+A+P+3bzJpGjeXVLt426EWsIWVESyJJgTzli6gaCohH+Kp26HeYE1Zg4ZV3a4U
xtZiFRKcxzCua2IMOuZr7G23sixMfK5huSO0fHPyxKh+l0jdcVSuUiI8McfCz4Zw
unOtBUxfH5dHoj7WK511QNfdijVI0nva1hD/icWj+ljXVCmGKDCPyJ6FmtqyIdhP
Wke6+zYP1N70HV+z8gzyfBSflsdzqsZeTIa8lDwDIhvMPeorTXV6fm2XvjQV8Ewj
6rQeRNrbpRQ/ZBXnSs6dusUJjMhlxnyVyr9blcKev756y5kdpIJGVHrC6IDdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUy1C7Xh0t1ztt1rMOwcBJroOSHDYwHwYDVR0j
BBgwFoAUkGxBpo40dROK9TpbVWJ+3jVDIGgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjIwMDdCOEQ0QUEyNjE0NDA4N0Y5QzNFNUY5RDM5RUNF
NTZCRDRFRDA5Nzg2REUxNTE0N0M5NTU3MTc1NDA2LzAvOTA2QzQxQTY4RTM0NzUx
MzhBRjUzQTVCNTU2MjdFREUzNTQzMjA2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDZDNDFBNjhFMzQ3NTEzOEFG
NTNBNUI1NTYyN0VERTM1NDMyMDY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYyMDA3QjhENEFBMjYxNDQwODdGOUMzRTVGOUQzOUVDRTU2QkQ0RUQw
OTc4NkRFMTUxNDdDOTU1NzE3NTQwNi8wLzMxMzczOTJlMzAyZTM0MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEzOTMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzACowDQYJ
KoZIhvcNAQELBQADggEBAAYT0fvcxm2TdrSgkxa0V4nhkK6t7B0g/MSii6sz+2u4
xGB30w+EFoHejsyhL1PzxcJeK5ZQy3/ItRrPCLTsnLR399XosEc8YBbg010qa528
wqwuW5MnurUqDdijMHCJOEzkNff2/c8Bkp1umSAT+4Ls55T5wrsdPEYTnvgrnQNQ
E81O1Y7qPQOSTDKDpca7kXs5bj+GdRQsctV6p3zORkJba/Ze9arSuVkTmLFUphN8
mvMlQv8VXbteuTJknxyld99v37coF/MUaeEO592GMOFp2sI0vIE7522EfOW1au3N
7UutJcmmcSdircoRH7aT0q1NBu/glhe0mjvvB00FqJ4=
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:52:47 2025 by rpki-client