Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/3230312e3133392e3137362e302f32312d3235203d3e203238333837.roa
File:                     3230312e3133392e3137362e302f32312d3235203d3e203238333837.roa (raw, json)
Hash identifier:          an89+KBX6zOocP2qE2oOM682sraMTZWYjxepY4Tt13c=
Subject key identifier:   93:E6:F7:DE:5C:F5:6C:DE:54:C0:A8:1A:F8:F5:7F:02:D9:B3:5C:E7
Certificate issuer:       /CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
Certificate serial:       46999C474E138668A39F7F0E486B57DF31BD0578
Authority key identifier: A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/3230312e3133392e3137362e302f32312d3235203d3e203238333837.roa
Signing time:             Fri 11 Jul 2025 17:25:02 +0000
ROA not before:           Fri 11 Jul 2025 17:20:02 +0000
ROA not after:            Fri 10 Jul 2026 17:25:02 +0000
asID:                     28387
IP address blocks:        201.139.176.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 05:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:99:9c:47:4e:13:86:68:a3:9f:7f:0e:48:6b:57:df:31:bd:05:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
        Validity
            Not Before: Jul 11 17:20:02 2025 GMT
            Not After : Jul 10 17:25:02 2026 GMT
        Subject: CN=93E6F7DE5CF56CDE54C0A81AF8F57F02D9B35CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:66:4a:f2:c0:4a:5e:c0:2e:bc:be:96:96:
                    90:31:07:97:52:fc:d0:37:ac:da:b1:17:c8:7b:73:
                    62:d5:38:18:c2:23:46:93:b1:9f:f5:98:1e:1b:87:
                    39:92:0c:c5:02:a5:7a:50:2f:20:8d:ff:6b:98:73:
                    17:0d:18:74:86:39:ce:04:f2:ec:cd:84:c1:5b:47:
                    e1:14:60:41:3a:f6:a7:82:f9:3f:89:4c:f6:06:4b:
                    84:f7:3b:50:c2:a6:29:35:d7:5e:ea:2e:cd:85:18:
                    90:0d:f7:3c:93:d5:bd:af:77:4c:34:5d:a4:da:2d:
                    be:32:ea:95:5f:1d:d2:f5:fa:d6:2c:67:37:2e:11:
                    0c:98:42:d9:02:5d:af:22:0d:4a:1d:46:93:9b:e4:
                    31:62:33:ab:d0:eb:88:30:23:ac:ef:44:84:80:68:
                    0d:7d:c6:90:1b:ca:71:91:9b:0b:ca:0c:a3:c6:f4:
                    bf:2c:6d:b7:c6:f8:d1:0f:a3:e2:f0:4c:4b:f5:c7:
                    87:da:2f:76:13:21:0b:8f:6e:cd:1a:4e:9d:1e:53:
                    72:c9:68:6d:d4:68:2c:cc:b5:75:ac:ce:c3:5d:79:
                    e1:f9:22:46:07:b0:d6:c2:c6:a5:94:cd:31:13:d9:
                    b6:9c:95:68:33:67:c0:6f:61:75:36:b2:c3:f9:40:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:F7:DE:5C:F5:6C:DE:54:C0:A8:1A:F8:F5:7F:02:D9:B3:5C:E7
            X509v3 Authority Key Identifier:
                keyid:A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/3230312e3133392e3137362e302f32312d3235203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:7a:16:f0:b9:0b:10:51:80:5f:2e:26:8f:06:fd:df:72:
         30:89:5b:bd:53:d4:ae:1e:73:9b:d7:61:5f:24:47:46:e7:57:
         44:97:9e:38:f9:33:e7:3d:3f:db:3f:fb:89:2e:06:23:1c:e9:
         bb:d4:88:7a:5c:a4:74:ea:37:44:17:57:0b:50:94:49:3a:4e:
         7f:b5:17:d9:c9:a1:7a:0f:af:2e:6e:b3:2e:a8:bb:df:90:cc:
         bf:a1:49:de:c4:37:29:d5:94:57:5d:df:de:6d:f8:46:0e:75:
         c6:62:65:54:75:8f:da:67:59:ed:ef:ce:8b:7e:37:14:45:78:
         2e:d7:75:c6:ce:8a:4a:8d:13:70:0b:97:45:5c:79:d8:27:32:
         05:dc:0f:33:03:75:b6:38:1e:fb:3b:e9:46:a1:63:51:f2:d5:
         34:6f:e2:c2:b8:f9:62:b3:86:d3:62:9a:57:98:8b:5f:b6:1a:
         51:e2:ed:8f:d2:f6:6a:ef:bb:a8:6c:0e:29:96:d4:36:e9:e2:
         bb:7f:26:2d:43:1c:72:01:07:7f:8b:ae:7a:41:3a:80:c8:60:
         b1:4f:fe:f4:95:80:41:6b:4a:4b:41:1f:d7:c5:01:18:07:2e:
         0d:3e:bd:f0:c9:77:23:93:6c:41:d2:2c:29:96:61:a5:9f:4e:
         be:e9:e2:d8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURpmcR04Thmijn38OSGtX3zG9BXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRCMjk4NkY3QThDQzExNEVGQjAwRTRBM0Y0QzVGNkY0
QTY5MEQxMzAeFw0yNTA3MTExNzIwMDJaFw0yNjA3MTAxNzI1MDJaMDMxMTAvBgNV
BAMTKDkzRTZGN0RFNUNGNTZDREU1NEMwQTgxQUY4RjU3RjAyRDlCMzVDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlmZK8sBKXsAuvL6WlpAxB5dS
/NA3rNqxF8h7c2LVOBjCI0aTsZ/1mB4bhzmSDMUCpXpQLyCN/2uYcxcNGHSGOc4E
8uzNhMFbR+EUYEE69qeC+T+JTPYGS4T3O1DCpik1117qLs2FGJAN9zyT1b2vd0w0
XaTaLb4y6pVfHdL1+tYsZzcuEQyYQtkCXa8iDUodRpOb5DFiM6vQ64gwI6zvRISA
aA19xpAbynGRmwvKDKPG9L8sbbfG+NEPo+LwTEv1x4faL3YTIQuPbs0aTp0eU3LJ
aG3UaCzMtXWszsNdeeH5IkYHsNbCxqWUzTET2baclWgzZ8BvYXU2ssP5QC85AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUk+b33lz1bN5UwKga+PV/AtmzXOcwHwYDVR0j
BBgwFoAUpLKYb3qMwRTvsA5KP0xfb0ppDRMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjEwQzU4NTE5QzU0MkFFQUE4N0NDQzRCNUYxQUVBRjRB
QUQwNjNBQjNFMUY1MjFGMkVBNjI0REMwRkE5MkI2LzAvQTRCMjk4NkY3QThDQzEx
NEVGQjAwRTRBM0Y0QzVGNkY0QTY5MEQxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEIyOTg2RjdBOENDMTE0RUZC
MDBFNEEzRjRDNUY2RjRBNjkwRDEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODIxMEM1ODUxOUM1NDJBRUFBODdDQ0M0QjVGMUFFQUY0QUFEMDYzQUIz
RTFGNTIxRjJFQTYyNERDMEZBOTJCNi8wLzMyMzAzMTJlMzEzMzM5MmUzMTM3MzYy
ZTMwMmYzMjMxMmQzMjM1MjAzZDNlMjAzMjM4MzMzODM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyYuw
MA0GCSqGSIb3DQEBCwUAA4IBAQBqdXoW8LkLEFGAXy4mjwb933IwiVu9U9SuHnOb
12FfJEdG51dEl544+TPnPT/bP/uJLgYjHOm71Ih6XKR06jdEF1cLUJRJOk5/tRfZ
yaF6D68ubrMuqLvfkMy/oUnexDcp1ZRXXd/ebfhGDnXGYmVUdY/aZ1nt786LfjcU
RXgu13XGzopKjRNwC5dFXHnYJzIF3A8zA3W2OB77O+lGoWNR8tU0b+LCuPlis4bT
YppXmItfthpR4u2P0vZq77uobA4pltQ26eK7fyYtQxxyAQd/i656QTqAyGCxT/70
lYBBa0pLQR/XxQEYBy4NPr3wyXcjk2xB0iwplmGln06+6eLY
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:25:26 2025 by rpki-client