Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32392e302f32342d3234203d3e20323636383737.roa
File:                     3135322e3233312e32392e302f32342d3234203d3e20323636383737.roa (raw, json)
Hash identifier:          fCnW9/7+7+MxH/BkNFRysI3W9hVSJ7A6Tw97gA+YV18=
Subject key identifier:   2B:54:AC:A8:40:71:B3:C7:28:D5:64:ED:5E:F5:71:20:59:10:7C:0F
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       56CA9517E1BAECA784C5B70CD9AD3E90F627718F
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32392e302f32342d3234203d3e20323636383737.roa
Signing time:             Fri 11 Jul 2025 21:25:03 +0000
ROA not before:           Fri 11 Jul 2025 21:20:03 +0000
ROA not after:            Fri 10 Jul 2026 21:25:03 +0000
asID:                     266877
IP address blocks:        152.231.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 19:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ca:95:17:e1:ba:ec:a7:84:c5:b7:0c:d9:ad:3e:90:f6:27:71:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Jul 11 21:20:03 2025 GMT
            Not After : Jul 10 21:25:03 2026 GMT
        Subject: CN=2B54ACA84071B3C728D564ED5EF5712059107C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:4c:a8:c7:56:fd:d8:b1:6a:cf:a0:51:9a:
                    7c:10:2f:04:39:4a:0c:fa:57:c2:4e:b1:60:a1:ed:
                    eb:9c:a0:47:87:14:f2:5e:48:c6:32:43:9e:b2:a3:
                    92:ec:0e:d4:b4:f9:54:c1:58:90:ab:6a:61:6f:af:
                    8a:06:be:52:6c:84:cc:6d:e1:39:10:ec:ce:f7:8c:
                    8c:f8:7f:1e:76:f4:de:92:5f:d1:07:22:6e:f8:e8:
                    c6:81:e3:fd:41:38:bd:8b:59:f7:d8:dd:5a:1a:8f:
                    a3:be:97:98:be:63:80:0f:a4:be:19:88:70:f8:c9:
                    03:1d:0f:b4:3a:cf:d4:15:28:ad:06:5c:dc:b1:6e:
                    ee:35:2d:d9:c7:04:e8:4b:bf:a0:d5:0d:d5:fb:5c:
                    a7:9e:21:03:03:7a:69:d9:29:b2:ad:d1:6a:1f:11:
                    25:3e:e7:9a:26:27:8a:4c:e3:0f:30:80:7c:af:39:
                    03:03:20:d7:cb:cc:29:03:0a:f7:4a:db:f0:47:50:
                    65:d2:d1:ae:d6:13:38:49:09:f0:f2:0e:44:f9:71:
                    95:0b:47:a0:a6:51:cd:b9:b9:52:61:03:c9:fa:32:
                    5a:02:d4:e6:c1:29:a6:c5:44:c7:6b:1d:6e:09:63:
                    1d:53:0b:e0:a0:93:9c:31:83:61:bd:00:d4:21:8c:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:54:AC:A8:40:71:B3:C7:28:D5:64:ED:5E:F5:71:20:59:10:7C:0F
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32392e302f32342d3234203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d2:13:a3:7c:a8:85:51:64:98:b8:56:58:57:18:4b:1f:24:
         b3:25:dd:34:6a:d3:36:12:bb:17:c7:29:a0:20:22:0e:fc:43:
         cb:3c:f8:ac:19:fe:9a:11:b9:46:e1:0a:a0:8f:2d:92:13:50:
         02:d1:9a:7e:02:67:93:a4:47:5f:7f:7b:d5:f1:cc:d0:2f:fe:
         58:dc:5f:c6:b1:9a:95:fc:e2:e2:80:c0:9a:a0:0d:e2:8d:79:
         b4:21:28:2e:56:6d:f2:ab:fe:7b:bc:b5:7c:f3:5a:f4:77:c4:
         22:b7:94:1f:32:70:46:63:16:84:f9:6d:b9:e4:23:52:e0:e1:
         13:00:34:d7:31:eb:46:07:42:d0:e4:52:58:96:52:01:45:94:
         7c:e6:9d:5a:76:2b:0f:34:4c:a4:76:54:61:1d:42:eb:56:44:
         4a:1a:6d:ec:4b:61:31:6b:9e:59:54:f7:d1:0a:b3:eb:39:7a:
         0c:3d:96:0b:3f:a7:01:11:a8:83:b8:12:3b:76:6f:3d:0c:84:
         f4:19:6a:6f:3d:40:5e:d8:e2:42:71:bc:44:15:7d:23:09:03:
         6f:05:38:8a:2b:a4:34:11:4e:03:44:19:ef:f1:4f:59:c9:77:
         44:4b:99:ef:3e:b2:f5:03:df:95:04:7d:cd:14:44:aa:94:90:
         a4:8e:62:16
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVsqVF+G67KeExbcM2a0+kPYncY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMxQUREMzZBM0EwNzFCNTRBOThFMjY2NDY2MkQ2Q0RD
RDE0NjRGQTAeFw0yNTA3MTEyMTIwMDNaFw0yNjA3MTAyMTI1MDNaMDMxMTAvBgNV
BAMTKDJCNTRBQ0E4NDA3MUIzQzcyOEQ1NjRFRDVFRjU3MTIwNTkxMDdDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xUyox1b92LFqz6BRmnwQLwQ5
Sgz6V8JOsWCh7eucoEeHFPJeSMYyQ56yo5LsDtS0+VTBWJCramFvr4oGvlJshMxt
4TkQ7M73jIz4fx529N6SX9EHIm746MaB4/1BOL2LWffY3Voaj6O+l5i+Y4APpL4Z
iHD4yQMdD7Q6z9QVKK0GXNyxbu41LdnHBOhLv6DVDdX7XKeeIQMDemnZKbKt0Wof
ESU+55omJ4pM4w8wgHyvOQMDINfLzCkDCvdK2/BHUGXS0a7WEzhJCfDyDkT5cZUL
R6CmUc25uVJhA8n6MloC1ObBKabFRMdrHW4JYx1TC+Cgk5wxg2G9ANQhjKEFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUK1SsqEBxs8co1WTtXvVxIFkQfA8wHwYDVR0j
BBgwFoAUYxrdNqOgcbVKmOJmRmLWzc0UZPowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOTIzNDFERjU0MjhGNjY3RDcyRDI1OEU5MjY5QUUxRDA2
M0E5MjhFOTFGMkZFMUE2MzFCODlEOTgwOEUwMEI3LzAvNjMxQUREMzZBM0EwNzFC
NTRBOThFMjY2NDY2MkQ2Q0RDRDE0NjRGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzFBREQzNkEzQTA3MUI1NEE5
OEUyNjY0NjYyRDZDRENEMTQ2NEZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjkyMzQxREY1NDI4RjY2N0Q3MkQyNThFOTI2OUFFMUQwNjNBOTI4RTkx
RjJGRTFBNjMxQjg5RDk4MDhFMDBCNy8wLzMxMzUzMjJlMzIzMzMxMmUzMjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOcd
MA0GCSqGSIb3DQEBCwUAA4IBAQAT0hOjfKiFUWSYuFZYVxhLHySzJd00atM2ErsX
xymgICIO/EPLPPisGf6aEblG4Qqgjy2SE1AC0Zp+AmeTpEdff3vV8czQL/5Y3F/G
sZqV/OLigMCaoA3ijXm0ISguVm3yq/57vLV881r0d8Qit5QfMnBGYxaE+W255CNS
4OETADTXMetGB0LQ5FJYllIBRZR85p1adisPNEykdlRhHULrVkRKGm3sS2Exa55Z
VPfRCrPrOXoMPZYLP6cBEaiDuBI7dm89DIT0GWpvPUBe2OJCcbxEFX0jCQNvBTiK
K6Q0EU4DRBnv8U9ZyXdES5nvPrL1A9+VBH3NFESqlJCkjmIW
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:48:35 2025 by rpki-client