Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa
File:                     3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa (raw, json)
Hash identifier:          X/K+Grl8HhaqNxAmFdynExI5w1ctD/GCdPFzsAggL4s=
Subject key identifier:   00:01:A9:4E:B0:BF:76:AA:85:82:F2:39:30:59:17:F4:38:1B:C5:4B
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       573F8A55842BF745741454C0F7E2CF5E93953FDB
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa
Signing time:             Fri 11 Jul 2025 21:25:04 +0000
ROA not before:           Fri 11 Jul 2025 21:20:04 +0000
ROA not after:            Fri 10 Jul 2026 21:25:04 +0000
asID:                     266877
IP address blocks:        152.231.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 19:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3f:8a:55:84:2b:f7:45:74:14:54:c0:f7:e2:cf:5e:93:95:3f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Jul 11 21:20:04 2025 GMT
            Not After : Jul 10 21:25:04 2026 GMT
        Subject: CN=0001A94EB0BF76AA8582F239305917F4381BC54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:a6:09:74:8b:9b:11:2a:2f:b9:8a:b0:db:
                    7d:6b:f2:e6:ea:0e:f8:b9:17:7f:2e:33:24:91:2a:
                    30:93:45:8a:61:f3:4e:00:ed:18:59:f1:eb:6a:6d:
                    fa:cb:0d:19:dc:ba:fa:83:dd:82:1f:f2:b8:43:d5:
                    79:8c:31:f6:a1:a6:fc:a1:a5:4d:4d:73:35:90:af:
                    45:3b:4a:ea:82:02:28:72:34:dc:27:54:69:bd:d9:
                    16:67:9f:d0:15:e8:72:fd:b5:df:a6:30:45:ab:e6:
                    62:26:5b:59:b9:2b:22:9c:45:6d:fb:96:c1:80:be:
                    55:2c:2b:a9:a3:d3:68:b1:d0:53:6d:1b:c4:f0:4c:
                    1d:6e:6a:da:a1:ba:2b:af:c6:97:59:a0:ae:fb:54:
                    c1:61:71:af:e2:eb:c6:cf:b7:53:7c:2a:e8:f1:22:
                    38:a2:b6:3c:42:42:34:ca:11:7b:8d:0d:ff:d5:41:
                    ee:f7:02:f6:68:36:9e:ad:39:29:4e:22:fb:58:50:
                    7b:6e:dd:4a:68:9d:74:40:15:3c:c1:59:74:2c:b9:
                    16:63:e8:68:af:82:22:ba:45:03:d6:2b:77:21:1a:
                    e6:7b:e0:68:0a:f6:d5:85:c9:b5:9a:5c:90:1a:7f:
                    15:b7:bb:c3:f4:97:a8:52:d2:c8:c3:23:e6:48:b0:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:A9:4E:B0:BF:76:AA:85:82:F2:39:30:59:17:F4:38:1B:C5:4B
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32352e302f32342d3234203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:69:ad:a9:66:cb:58:f9:95:59:ad:b6:4b:8a:1c:b8:d9:e8:
         6e:fa:4a:ec:d6:39:40:cb:bd:41:91:fe:03:40:d5:24:80:d9:
         33:27:81:c0:52:15:f5:57:6b:38:ad:50:a5:7a:b1:5f:94:ed:
         54:7d:93:0d:61:48:ee:f0:35:a7:f9:0f:af:1e:fe:22:86:75:
         40:6f:50:46:9a:e4:18:5e:ce:09:ad:23:bf:d3:d4:ea:91:6a:
         70:49:d9:61:b2:0e:ad:c1:58:58:db:8a:f8:b7:32:87:0d:d4:
         c2:7f:fc:90:30:d2:6c:08:7a:84:8d:1d:24:9c:6a:81:46:6a:
         52:2a:fb:7c:7d:32:90:46:bd:a8:22:30:e2:2e:ac:52:06:40:
         86:8d:c9:70:f4:5b:2f:6d:e3:ff:b2:aa:12:cc:43:a6:84:4b:
         c2:44:a6:c3:c4:9c:9b:0e:a2:dd:76:8c:34:f1:36:2b:79:c4:
         8c:3e:dc:d1:c2:30:c9:8f:3a:a0:e9:1f:9e:7a:af:32:7d:63:
         88:22:08:8a:54:d5:45:ab:15:e1:21:69:55:9f:df:89:9a:7c:
         6d:5a:fb:7c:2a:84:b2:3b:4f:60:c1:06:a5:7d:59:ea:cf:fa:
         d5:e5:bb:a6:80:d2:32:a0:d3:92:51:26:0d:af:85:da:8a:f3:
         ec:e8:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:48:34 2025 by rpki-client