Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34322e302f32332d3233203d3e20323639393739.roa
File:                     3138372e302e34322e302f32332d3233203d3e20323639393739.roa (raw, json)
Hash identifier:          3SSCHXs9L8tsF5A+b9YwRjFxbJYLeOrxtSsmGOsg2lI=
Subject key identifier:   BB:89:93:A7:EE:F4:52:D2:0A:E8:82:18:40:A1:9A:BD:8B:2C:3C:1C
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       706CF9AD4A65C522368CB3EEA7AD200CA2C6EF44
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34322e302f32332d3233203d3e20323639393739.roa
Signing time:             Tue 07 Jan 2025 14:45:01 +0000
ROA not before:           Tue 07 Jan 2025 14:40:01 +0000
ROA not after:            Tue 06 Jan 2026 14:45:01 +0000
asID:                     269979
IP address blocks:        187.0.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6c:f9:ad:4a:65:c5:22:36:8c:b3:ee:a7:ad:20:0c:a2:c6:ef:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  7 14:40:01 2025 GMT
            Not After : Jan  6 14:45:01 2026 GMT
        Subject: CN=BB8993A7EEF452D20AE8821840A19ABD8B2C3C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:36:39:5b:ed:0e:a0:1a:0d:bb:90:b7:ea:
                    e7:7b:e5:5b:83:84:64:92:59:52:f2:23:43:13:b4:
                    b5:f2:29:5a:c7:3e:0a:07:9e:40:26:87:23:26:cc:
                    aa:29:06:fd:0a:68:41:65:c7:4a:e2:29:e4:06:78:
                    8a:22:df:79:76:f1:f8:cb:33:9f:92:49:89:27:cd:
                    0d:95:f0:2d:cf:87:8e:ee:e3:39:a7:86:5e:cb:31:
                    41:c1:15:7e:62:29:7b:52:6b:d5:40:40:c5:f5:5d:
                    0d:92:3e:cb:0e:eb:46:0f:55:96:91:00:3a:8d:17:
                    ad:32:1b:1f:16:88:b3:2f:42:93:46:5c:64:48:c0:
                    90:92:78:38:41:5f:18:cb:52:51:a7:6e:e8:df:8e:
                    d3:ee:ce:03:6f:8a:6a:5c:10:a6:d4:38:af:bc:d0:
                    19:5b:32:e5:e2:09:73:8d:13:80:4d:a7:15:5b:84:
                    44:4a:f1:8b:30:3a:e7:bd:12:5f:7a:04:e6:c0:e8:
                    33:eb:1d:da:fc:36:85:d9:80:49:42:87:29:0b:94:
                    01:25:2a:b0:43:b0:28:00:d6:12:c0:37:45:6b:a2:
                    5a:58:aa:c5:e8:d3:8f:7d:2f:18:e4:bc:f5:ed:ad:
                    3b:73:af:7d:7b:3b:0e:ac:22:32:99:5e:e3:c4:58:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:89:93:A7:EE:F4:52:D2:0A:E8:82:18:40:A1:9A:BD:8B:2C:3C:1C
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34322e302f32332d3233203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:b6:cb:eb:73:a5:fd:d4:65:ac:9f:fb:c7:b5:80:4d:d7:
         62:a3:f0:91:ec:e5:97:54:b7:47:33:10:2a:85:42:db:09:a8:
         a3:f5:94:15:c1:6b:43:1f:3d:98:e1:6d:b0:d7:da:a6:88:5f:
         e4:b2:10:2f:62:ae:55:c0:5d:bc:e2:91:e5:6c:39:3a:96:34:
         23:08:e6:d6:c8:89:ed:dd:5e:44:72:5b:06:be:56:68:eb:69:
         45:70:ce:fd:40:06:6a:b0:c9:63:6a:d8:cb:c9:c4:f9:7f:14:
         50:e0:b6:c4:57:03:08:c3:68:20:34:cc:97:96:33:88:60:5e:
         32:42:05:28:ce:7c:69:e1:7e:51:19:ec:bf:f7:b5:89:9f:e9:
         dd:02:a8:14:14:e5:35:42:01:50:ce:f6:22:27:27:e6:b8:22:
         26:76:32:d9:3b:11:14:bb:af:5f:1d:f1:ee:8e:0c:35:e3:15:
         3b:cb:d3:47:b5:39:9c:e8:c3:0a:6e:15:0f:af:27:9c:ff:7f:
         5e:ab:1d:8a:f6:0e:a9:0e:ab:cc:99:ea:6d:6e:80:82:24:50:
         7a:91:93:84:d8:6c:34:75:c6:65:27:6f:4e:88:57:7a:00:27:
         ab:e4:f1:74:3f:11:04:be:35:05:84:93:a6:7c:4b:50:ea:27:
         77:0b:33:68
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUcGz5rUplxSI2jLPup60gDKLG70QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNkE2MzgyQjYwOUFFQTdGNDEyREJGQTYzNEZBM0U3
NzVEMzMzRjAeFw0yNTAxMDcxNDQwMDFaFw0yNjAxMDYxNDQ1MDFaMDMxMTAvBgNV
BAMTKEJCODk5M0E3RUVGNDUyRDIwQUU4ODIxODQwQTE5QUJEOEIyQzNDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTozY5W+0OoBoNu5C36ud75VuD
hGSSWVLyI0MTtLXyKVrHPgoHnkAmhyMmzKopBv0KaEFlx0riKeQGeIoi33l28fjL
M5+SSYknzQ2V8C3Ph47u4zmnhl7LMUHBFX5iKXtSa9VAQMX1XQ2SPssO60YPVZaR
ADqNF60yGx8WiLMvQpNGXGRIwJCSeDhBXxjLUlGnbujfjtPuzgNvimpcEKbUOK+8
0BlbMuXiCXONE4BNpxVbhERK8YswOue9El96BObA6DPrHdr8NoXZgElChykLlAEl
KrBDsCgA1hLAN0VrolpYqsXo0499LxjkvPXtrTtzr317Ow6sIjKZXuPEWEPBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUu4mTp+70UtIK6IIYQKGavYssPBwwHwYDVR0j
BBgwFoAUeDamOCtgmup/QS2/pjT6PnddMz8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REExN0QwNjY2NjZFODhGMzZGMUYxRTQxOTFBQTNCQTA5
MDI2RTgxQTYzMzI5MzMzMjVFNkJFRDUxOUNCODUwLzAvNzgzNkE2MzgyQjYwOUFF
QTdGNDEyREJGQTYzNEZBM0U3NzVEMzMzRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODM2QTYzODJCNjA5QUVBN0Y0
MTJEQkZBNjM0RkEzRTc3NUQzMzNGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRBMTdEMDY2NjY2RTg4RjM2RjFGMUU0MTkxQUEzQkEwOTAyNkU4MUE2
MzMyOTMzMzI1RTZCRUQ1MTlDQjg1MC8wLzMxMzgzNzJlMzAyZTM0MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMjM2MzkzOTM3Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG7ACowDQYJ
KoZIhvcNAQELBQADggEBACxltsvrc6X91GWsn/vHtYBN12Kj8JHs5ZdUt0czECqF
QtsJqKP1lBXBa0MfPZjhbbDX2qaIX+SyEC9irlXAXbzikeVsOTqWNCMI5tbIie3d
XkRyWwa+VmjraUVwzv1ABmqwyWNq2MvJxPl/FFDgtsRXAwjDaCA0zJeWM4hgXjJC
BSjOfGnhflEZ7L/3tYmf6d0CqBQU5TVCAVDO9iInJ+a4IiZ2Mtk7ERS7r18d8e6O
DDXjFTvL00e1OZzowwpuFQ+vJ5z/f16rHYr2DqkOq8yZ6m1ugIIkUHqRk4TYbDR1
xmUnb06IV3oAJ6vk8XQ/EQS+NQWEk6Z8S1DqJ3cLM2g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:06:47 2025 by rpki-client