Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3137302e3234372e3231352e302f32342d3234203d3e20323635363431.roa
File:                     3137302e3234372e3231352e302f32342d3234203d3e20323635363431.roa (raw, json)
Hash identifier:          9P40WEk3n+GY2e0pKkNlyjf1ZxTOJLf/BGcQ5qcSCwc=
Subject key identifier:   2C:4D:B2:45:1A:F5:10:EF:09:8C:9B:2C:1C:29:D3:79:2F:A2:38:46
Certificate issuer:       /CN=84445FEE22581E9527451A2023AA1565199DA88D
Certificate serial:       5F49D5551D28C05A69F217E30F7D80738A23AF89
Authority key identifier: 84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3137302e3234372e3231352e302f32342d3234203d3e20323635363431.roa
Signing time:             Fri 11 Jul 2025 19:20:00 +0000
ROA not before:           Fri 11 Jul 2025 19:15:00 +0000
ROA not after:            Fri 10 Jul 2026 19:20:00 +0000
asID:                     265641
IP address blocks:        170.247.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 20:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:d5:55:1d:28:c0:5a:69:f2:17:e3:0f:7d:80:73:8a:23:af:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84445FEE22581E9527451A2023AA1565199DA88D
        Validity
            Not Before: Jul 11 19:15:00 2025 GMT
            Not After : Jul 10 19:20:00 2026 GMT
        Subject: CN=2C4DB2451AF510EF098C9B2C1C29D3792FA23846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:7a:8e:af:9b:d9:44:68:50:6d:85:95:34:
                    2b:8f:b1:fe:7f:d4:65:16:27:60:2b:cd:38:4e:77:
                    49:98:fd:e0:16:b9:0d:24:1e:25:1e:24:b0:d4:44:
                    d5:cb:52:5c:1e:8c:bb:32:b4:f7:ab:67:4d:af:03:
                    a9:25:45:36:3e:0e:73:b7:1e:de:44:d0:24:1c:dc:
                    6f:80:f8:99:64:ec:74:db:7e:b1:d0:2c:7c:e3:42:
                    60:93:49:c2:f3:fe:15:df:f5:16:6a:dd:ea:98:78:
                    1a:96:9f:62:ce:98:a6:6a:9f:87:eb:1c:fa:75:c8:
                    e3:50:62:0a:c5:7b:da:56:e9:af:d8:fc:62:b7:e0:
                    87:ae:e5:a2:2a:77:49:80:d2:37:51:e0:02:43:a4:
                    ca:70:cb:86:db:5b:3c:7d:e3:a2:72:25:7d:36:44:
                    d5:99:19:3b:46:ef:30:00:45:f6:7c:2d:5c:97:a8:
                    69:2a:f0:68:1e:06:eb:87:60:1a:37:b0:34:8c:20:
                    99:9b:32:68:a1:c8:6f:79:bd:49:b0:14:47:d4:37:
                    86:9a:26:5f:fc:bd:fb:1c:a7:b6:52:53:1b:01:fe:
                    d3:89:cf:c5:80:43:67:16:25:27:bd:63:94:bf:bb:
                    55:51:16:9a:f8:d8:01:6a:c1:8f:35:80:a1:8e:2f:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:B2:45:1A:F5:10:EF:09:8C:9B:2C:1C:29:D3:79:2F:A2:38:46
            X509v3 Authority Key Identifier:
                keyid:84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3137302e3234372e3231352e302f32342d3234203d3e20323635363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:af:87:cd:f5:4d:ee:20:9b:94:02:d3:d3:7c:d2:4b:6d:
         72:a5:0f:7c:2f:57:ca:f8:96:4a:33:d0:fa:6a:cc:80:17:d3:
         fa:8e:44:47:a7:7b:b7:e5:13:3c:da:61:fe:ff:09:21:21:2b:
         d3:de:c4:cb:28:9f:3c:fe:00:67:25:0a:ad:3b:e8:82:5d:d0:
         49:7a:a2:e4:f0:86:ad:e0:c8:14:18:ce:4b:4a:2a:68:a4:3c:
         ae:1b:ff:a9:15:25:37:ed:b9:45:8e:1b:34:83:f3:70:66:80:
         dc:99:e1:ba:4a:7c:72:d0:83:41:81:b3:fd:78:e0:4c:7c:08:
         d5:4d:99:8c:87:66:52:54:03:7e:93:09:14:ee:4f:1c:ab:bf:
         2f:00:62:4a:da:a5:52:dd:ca:c7:d8:3f:e9:d5:ef:6f:68:b8:
         fa:e6:a4:a6:13:4b:76:08:9f:c2:af:16:52:64:5f:87:df:c4:
         15:a1:17:6b:37:a9:21:80:d3:4b:85:20:73:37:c6:ec:cc:12:
         d6:c4:fe:e9:b5:79:97:6d:1e:8b:1c:00:35:52:f1:4c:46:e9:
         f5:80:9d:65:0b:f0:8b:10:f3:5f:0d:83:e6:a8:70:0e:69:69:
         9d:08:ff:62:ca:16:62:4a:11:a6:ad:29:2d:49:1a:69:fd:4f:
         27:97:fd:ad
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUX0nVVR0owFpp8hfjD32Ac4ojr4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ0NDVGRUUyMjU4MUU5NTI3NDUxQTIwMjNBQTE1NjUx
OTlEQTg4RDAeFw0yNTA3MTExOTE1MDBaFw0yNjA3MTAxOTIwMDBaMDMxMTAvBgNV
BAMTKDJDNERCMjQ1MUFGNTEwRUYwOThDOUIyQzFDMjlEMzc5MkZBMjM4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFXqOr5vZRGhQbYWVNCuPsf5/
1GUWJ2ArzThOd0mY/eAWuQ0kHiUeJLDURNXLUlwejLsytPerZ02vA6klRTY+DnO3
Ht5E0CQc3G+A+Jlk7HTbfrHQLHzjQmCTScLz/hXf9RZq3eqYeBqWn2LOmKZqn4fr
HPp1yONQYgrFe9pW6a/Y/GK34Ieu5aIqd0mA0jdR4AJDpMpwy4bbWzx946JyJX02
RNWZGTtG7zAARfZ8LVyXqGkq8GgeBuuHYBo3sDSMIJmbMmihyG95vUmwFEfUN4aa
Jl/8vfscp7ZSUxsB/tOJz8WAQ2cWJSe9Y5S/u1VRFpr42AFqwY81gKGOL6YBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQULE2yRRr1EO8JjJssHCnTeS+iOEYwHwYDVR0j
BBgwFoAUhERf7iJYHpUnRRogI6oVZRmdqI0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDM4MEYxNzhFN0YyMTI4RDFFQzIzOURGREIxOEM2NjZE
ODQ5QUFCOEI3RTA5NjBBOUJFMTM5QTlEOTg4MTJGLzAvODQ0NDVGRUUyMjU4MUU5
NTI3NDUxQTIwMjNBQTE1NjUxOTlEQTg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDQ0NUZFRTIyNTgxRTk1Mjc0
NTFBMjAyM0FBMTU2NTE5OURBODhELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQzODBGMTc4RTdGMjEyOEQxRUMyMzlERkRCMThDNjY2RDg0OUFBQjhC
N0UwOTYwQTlCRTEzOUE5RDk4ODEyRi8wLzMxMzczMDJlMzIzNDM3MmUzMjMxMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM0MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
99cwDQYJKoZIhvcNAQELBQADggEBAGuEr4fN9U3uIJuUAtPTfNJLbXKlD3wvV8r4
lkoz0PpqzIAX0/qOREene7flEzzaYf7/CSEhK9PexMsonzz+AGclCq076IJd0El6
ouTwhq3gyBQYzktKKmikPK4b/6kVJTftuUWOGzSD83BmgNyZ4bpKfHLQg0GBs/14
4Ex8CNVNmYyHZlJUA36TCRTuTxyrvy8AYkrapVLdysfYP+nV729ouPrmpKYTS3YI
n8KvFlJkX4ffxBWhF2s3qSGA00uFIHM3xuzMEtbE/um1eZdtHoscADVS8UxG6fWA
nWUL8IsQ818Ng+aocA5paZ0I/2LKFmJKEaatKS1JGmn9TyeX/a0=
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:07:09 2025 by rpki-client