Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37332e302f32342d3234203d3e20323733303638.roa
File:                     36362e3233312e37332e302f32342d3234203d3e20323733303638.roa (raw, json)
Hash identifier:          F5lr2xNuFOm7a8OeR6+aLB9wAyMIDlECTSk2/aT4mqM=
Subject key identifier:   F7:58:63:D9:11:B9:A8:51:5A:C0:6F:C9:1F:34:2F:67:95:B8:B3:0A
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       65A1F71A586979C6721B8E0E6F2F8526828B4147
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37332e302f32342d3234203d3e20323733303638.roa
Signing time:             Mon 19 May 2025 23:19:45 +0000
ROA not before:           Mon 19 May 2025 23:14:45 +0000
ROA not after:            Mon 18 May 2026 23:19:45 +0000
asID:                     273068
IP address blocks:        66.231.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a1:f7:1a:58:69:79:c6:72:1b:8e:0e:6f:2f:85:26:82:8b:41:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: May 19 23:14:45 2025 GMT
            Not After : May 18 23:19:45 2026 GMT
        Subject: CN=F75863D911B9A8515AC06FC91F342F6795B8B30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:7d:6d:ca:8d:1f:af:1f:db:2e:f0:ee:a9:
                    aa:7a:eb:74:4c:f8:5a:2e:d5:27:13:f2:4d:a5:9b:
                    fd:2f:b8:fa:b6:11:b9:bb:3d:29:73:09:a0:8c:c7:
                    51:51:7d:39:ef:d8:be:3e:d6:ec:f1:d8:2d:9d:5c:
                    f4:92:de:a7:61:ec:3a:d8:ec:35:f5:cf:12:ae:96:
                    a1:b3:87:f1:76:4c:99:a0:4b:77:7d:a3:c0:b8:95:
                    0f:d2:b8:d4:57:95:97:ad:89:6e:35:28:a9:e1:c2:
                    ee:d4:85:16:13:fd:e4:38:bf:bf:90:c0:27:ff:75:
                    df:e1:01:eb:cc:ad:ec:c5:0f:f1:ae:e0:14:cf:c1:
                    9f:ca:83:8b:51:ce:1d:ce:51:22:53:0e:2c:f9:1a:
                    12:cf:22:81:d9:f7:92:ad:38:ca:9a:38:f7:3a:b4:
                    c9:d3:c7:2a:71:99:17:99:35:6c:39:f1:03:18:de:
                    a9:c0:3d:90:6c:64:e1:2a:f6:5f:81:5a:3e:df:e0:
                    3b:91:cd:97:78:ee:8a:7a:f5:38:3b:ad:1a:98:37:
                    60:5d:b7:4a:cb:45:9b:87:6f:62:cb:2e:ab:f8:40:
                    96:0e:6e:2f:ff:88:bd:fa:d0:1f:a9:b8:3c:54:23:
                    0f:c3:1a:55:87:d5:53:d3:50:e2:4b:81:3f:1b:f8:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:58:63:D9:11:B9:A8:51:5A:C0:6F:C9:1F:34:2F:67:95:B8:B3:0A
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37332e302f32342d3234203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:80:6c:f0:76:8d:76:1d:c6:31:ad:7e:d1:a4:ff:9c:d6:
         3c:ce:2e:8a:02:de:d5:0d:46:91:87:09:02:5a:88:95:49:50:
         d1:ef:89:dd:0d:5c:d1:fa:88:af:c1:22:7e:0d:c2:42:84:b2:
         16:2e:fc:a1:20:54:f8:89:36:4a:28:f3:a7:a2:a3:92:57:83:
         9d:57:d6:b9:80:99:a9:47:99:a4:c2:69:0b:17:bc:4b:77:fa:
         37:f0:44:47:0b:3c:00:cd:cd:7b:6f:b3:c5:03:17:2a:44:1d:
         45:61:0f:c8:8e:2d:59:51:04:eb:b4:81:11:04:75:09:62:da:
         e2:11:cb:b8:7a:33:4e:58:c8:e6:cb:71:f6:2e:80:b1:d2:67:
         54:1c:21:24:63:56:e9:0f:76:9f:a0:09:73:c5:11:b4:2b:df:
         8b:d5:c5:4d:81:7a:49:22:31:5e:84:bf:e8:fe:95:3f:dc:7e:
         b6:5b:65:33:6a:a4:42:f1:81:b3:30:d3:fe:24:fb:77:c8:e7:
         8e:2f:c2:76:b1:9f:d3:91:25:9d:5a:c3:44:ba:39:63:16:d2:
         bd:f6:cc:90:73:68:3e:eb:c6:87:b5:77:80:be:2d:74:2d:aa:
         33:bf:03:90:7e:45:51:dd:c4:38:78:34:7b:43:30:3d:f1:54:
         2b:cd:03:74
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZaH3GlhpecZyG44Oby+FJoKLQUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNTA1MTkyMzE0NDVaFw0yNjA1MTgyMzE5NDVaMDMxMTAvBgNV
BAMTKEY3NTg2M0Q5MTFCOUE4NTE1QUMwNkZDOTFGMzQyRjY3OTVCOEIzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLX1tyo0frx/bLvDuqap663RM
+Fou1ScT8k2lm/0vuPq2Ebm7PSlzCaCMx1FRfTnv2L4+1uzx2C2dXPSS3qdh7DrY
7DX1zxKulqGzh/F2TJmgS3d9o8C4lQ/SuNRXlZetiW41KKnhwu7UhRYT/eQ4v7+Q
wCf/dd/hAevMrezFD/Gu4BTPwZ/Kg4tRzh3OUSJTDiz5GhLPIoHZ95KtOMqaOPc6
tMnTxypxmReZNWw58QMY3qnAPZBsZOEq9l+BWj7f4DuRzZd47op69Tg7rRqYN2Bd
t0rLRZuHb2LLLqv4QJYObi//iL360B+puDxUIw/DGlWH1VPTUOJLgT8b+GPzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU91hj2RG5qFFawG/JHzQvZ5W4swowHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzczMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzMwMzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELnSTAN
BgkqhkiG9w0BAQsFAAOCAQEAckyAbPB2jXYdxjGtftGk/5zWPM4uigLe1Q1GkYcJ
AlqIlUlQ0e+J3Q1c0fqIr8Eifg3CQoSyFi78oSBU+Ik2Sijzp6KjkleDnVfWuYCZ
qUeZpMJpCxe8S3f6N/BERws8AM3Ne2+zxQMXKkQdRWEPyI4tWVEE67SBEQR1CWLa
4hHLuHozTljI5stx9i6AsdJnVBwhJGNW6Q92n6AJc8URtCvfi9XFTYF6SSIxXoS/
6P6VP9x+tltlM2qkQvGBszDT/iT7d8jnji/CdrGf05ElnVrDRLo5YxbSvfbMkHNo
PuvGh7V3gL4tdC2qM78DkH5FUd3EOHg0e0MwPfFUK80DdA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 06:07:07 2025 by rpki-client