Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/3137392e302e3132392e302f32342d3234203d3e20323637393037.roa
File:                     3137392e302e3132392e302f32342d3234203d3e20323637393037.roa (raw, json)
Hash identifier:          Ve8lL6iaVwPBEliZ68BHx9LK6Z0JWMRxa9lh3jxpWF4=
Subject key identifier:   F8:5B:C3:2F:FE:A7:37:1C:BA:B4:F6:35:51:A7:E5:F3:89:B8:61:BC
Certificate issuer:       /CN=C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4
Certificate serial:       64CBF3102A10C5B7CA15A5B42AC2121D7414969F
Authority key identifier: C3:BA:DC:D0:C2:8F:DB:7B:45:4B:04:DB:1C:F6:F6:7A:91:AD:C9:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/3137392e302e3132392e302f32342d3234203d3e20323637393037.roa
Signing time:             Tue 04 Feb 2025 18:18:34 +0000
ROA not before:           Tue 04 Feb 2025 18:13:34 +0000
ROA not after:            Tue 03 Feb 2026 18:18:34 +0000
asID:                     267907
IP address blocks:        179.0.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cb:f3:10:2a:10:c5:b7:ca:15:a5:b4:2a:c2:12:1d:74:14:96:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4
        Validity
            Not Before: Feb  4 18:13:34 2025 GMT
            Not After : Feb  3 18:18:34 2026 GMT
        Subject: CN=F85BC32FFEA7371CBAB4F63551A7E5F389B861BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:03:05:52:f0:30:a6:a2:ba:a9:d2:94:53:
                    79:d9:0d:2a:cc:da:95:6e:e5:7d:37:97:dd:af:4b:
                    2a:73:d5:d0:fd:f8:51:cb:c6:5c:a8:e3:6c:10:d2:
                    a4:27:63:ce:aa:18:0c:af:e2:8d:0c:f7:1e:f1:0b:
                    7d:90:fd:23:4b:82:b1:d3:f0:18:77:f1:1f:e1:61:
                    b0:af:40:d4:23:46:90:ec:a1:17:80:f6:d2:ef:a5:
                    b5:94:d5:40:4d:69:1e:98:44:5b:96:3d:92:23:11:
                    4c:86:f8:d9:d4:82:66:bd:8f:97:34:95:df:dc:ea:
                    c4:56:d1:d0:2d:f5:67:32:b7:03:31:5e:bb:69:61:
                    7d:a9:28:24:c5:a0:f4:13:6e:77:87:5b:b6:df:dd:
                    20:f1:61:7f:27:46:9c:62:b2:a1:30:d2:db:9c:58:
                    f5:67:0e:69:ba:40:68:60:2a:5f:8b:60:00:f6:54:
                    c1:5c:92:15:31:2b:70:3a:47:5e:bc:4d:9c:6c:38:
                    b1:fe:69:f0:23:5a:cd:0b:4c:0d:24:04:22:f4:b5:
                    d4:f9:dc:ca:68:61:14:83:7c:1d:03:e7:3b:ac:2a:
                    c0:1d:a2:d3:7a:98:8c:f2:5b:9c:54:94:f8:9e:20:
                    99:ba:fc:e0:e0:be:1d:db:f5:18:a5:90:ca:95:2a:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:C3:2F:FE:A7:37:1C:BA:B4:F6:35:51:A7:E5:F3:89:B8:61:BC
            X509v3 Authority Key Identifier:
                keyid:C3:BA:DC:D0:C2:8F:DB:7B:45:4B:04:DB:1C:F6:F6:7A:91:AD:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/3137392e302e3132392e302f32342d3234203d3e20323637393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:dd:67:77:36:d0:01:86:d7:fb:d0:35:8f:53:71:3f:1b:86:
         27:5b:0e:06:89:ca:f1:6c:97:09:95:f9:e2:8e:16:5e:c5:63:
         53:e0:12:53:27:5b:51:bd:30:bd:76:41:db:6c:5c:cd:65:6a:
         6d:05:4d:4a:15:d7:71:1f:71:5c:97:69:91:c8:5b:28:4b:e6:
         59:5c:83:f7:15:22:c4:16:b6:fd:10:31:1b:5e:79:40:68:ec:
         96:fe:72:12:b1:ba:8c:5a:af:99:d1:8e:fd:95:4a:4f:f4:c6:
         8a:7f:6f:25:a1:49:03:b3:f7:8d:77:da:ff:20:4f:a3:83:27:
         82:97:b1:54:91:47:80:64:15:31:b3:a7:90:47:c0:0a:e2:1f:
         8e:75:bb:a7:13:a9:a5:ef:55:0a:bb:23:bc:23:77:ec:ca:8e:
         fc:43:00:73:85:f4:33:11:9c:88:60:3c:04:ac:81:56:74:fc:
         f9:ea:5d:cb:93:36:0f:ca:5c:fc:b9:33:2c:94:69:51:e8:da:
         ee:cd:26:4a:cd:8b:fc:53:2e:28:c3:a9:3e:9e:6d:a5:e6:0b:
         46:66:b1:9f:45:82:18:c8:bd:ed:32:c6:c8:2a:44:92:22:75:
         95:c6:8d:bf:8e:85:e6:b5:3e:34:f3:2c:c4:db:5b:7b:88:f8:
         15:c9:c7:f3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZMvzECoQxbfKFaW0KsISHXQUlp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNCQURDRDBDMjhGREI3QjQ1NEIwNERCMUNGNkY2N0E5
MUFEQzlCNDAeFw0yNTAyMDQxODEzMzRaFw0yNjAyMDMxODE4MzRaMDMxMTAvBgNV
BAMTKEY4NUJDMzJGRkVBNzM3MUNCQUI0RjYzNTUxQTdFNUYzODlCODYxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hgMFUvAwpqK6qdKUU3nZDSrM
2pVu5X03l92vSypz1dD9+FHLxlyo42wQ0qQnY86qGAyv4o0M9x7xC32Q/SNLgrHT
8Bh38R/hYbCvQNQjRpDsoReA9tLvpbWU1UBNaR6YRFuWPZIjEUyG+NnUgma9j5c0
ld/c6sRW0dAt9WcytwMxXrtpYX2pKCTFoPQTbneHW7bf3SDxYX8nRpxisqEw0tuc
WPVnDmm6QGhgKl+LYAD2VMFckhUxK3A6R168TZxsOLH+afAjWs0LTA0kBCL0tdT5
3MpoYRSDfB0D5zusKsAdotN6mIzyW5xUlPieIJm6/ODgvh3b9RilkMqVKtvdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+FvDL/6nNxy6tPY1Uafl84m4YbwwHwYDVR0j
BBgwFoAUw7rc0MKP23tFSwTbHPb2epGtybQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yN0VFNDZGOUYwRkQyMDY0RDUxOTI1Q0MxRUFCMUJEMzFD
M0RGMEM5MEJDOTQ4NUVFRjc1NzFGMUQ2NUJDNEE4LzAvQzNCQURDRDBDMjhGREI3
QjQ1NEIwNERCMUNGNkY2N0E5MUFEQzlCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0JBRENEMEMyOEZEQjdCNDU0
QjA0REIxQ0Y2RjY3QTkxQURDOUI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjdFRTQ2RjlGMEZEMjA2NEQ1MTkyNUNDMUVBQjFCRDMxQzNERjBDOTBC
Qzk0ODVFRUY3NTcxRjFENjVCQzRBOC8wLzMxMzczOTJlMzAyZTMxMzIzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMAgTAN
BgkqhkiG9w0BAQsFAAOCAQEAIt1ndzbQAYbX+9A1j1NxPxuGJ1sOBonK8WyXCZX5
4o4WXsVjU+ASUydbUb0wvXZB22xczWVqbQVNShXXcR9xXJdpkchbKEvmWVyD9xUi
xBa2/RAxG155QGjslv5yErG6jFqvmdGO/ZVKT/TGin9vJaFJA7P3jXfa/yBPo4Mn
gpexVJFHgGQVMbOnkEfACuIfjnW7pxOppe9VCrsjvCN37MqO/EMAc4X0MxGciGA8
BKyBVnT8+epdy5M2D8pc/LkzLJRpUeja7s0mSs2L/FMuKMOpPp5tpeYLRmaxn0WC
GMi97TLGyCpEkiJ1lcaNv46F5rU+NPMsxNtbe4j4FcnH8w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:37 2025 by rpki-client