Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33302e302f32342d3234203d3e203237393531.roa
File:                     3135322e3233312e33302e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          PCSANXKCSXBTP7i7wtt0qN/B66QlN+raKZQKEoS0tkM=
Subject key identifier:   B0:0F:DB:A7:7F:45:B9:6F:10:E9:60:04:72:29:7C:4E:E5:79:E2:98
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       1C22D99974F49618F15AD8D6B7879397EE31C347
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33302e302f32342d3234203d3e203237393531.roa
Signing time:             Fri 04 Sep 2026 15:33:53 +0000
ROA not before:           Fri 04 Sep 2026 15:28:53 +0000
ROA not after:            Fri 03 Sep 2027 15:33:53 +0000
asID:                     27951
IP address blocks:        152.231.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:22:d9:99:74:f4:96:18:f1:5a:d8:d6:b7:87:93:97:ee:31:c3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Sep  4 15:28:53 2026 GMT
            Not After : Sep  3 15:33:53 2027 GMT
        Subject: CN=B00FDBA77F45B96F10E9600472297C4EE579E298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:83:58:e5:28:cf:26:be:c6:bf:c7:58:bb:
                    1e:c7:36:5f:0f:88:2d:5c:c6:37:6e:b1:dd:6a:d2:
                    3b:89:43:b7:6e:3d:ec:ca:be:0f:bf:46:28:37:49:
                    55:62:a2:aa:07:0a:f7:01:6f:c5:32:ed:1f:f4:9c:
                    c6:9b:28:77:d7:c3:15:4b:95:0d:08:3c:2f:9d:92:
                    79:18:66:d8:6c:9d:a8:01:9d:2c:82:c5:7f:59:4b:
                    7f:a1:65:e3:c2:ff:b0:f3:8d:2d:66:6c:7c:14:86:
                    4e:2c:ac:48:46:43:fd:35:f1:86:54:34:8c:2b:cc:
                    ca:c6:20:3f:7e:89:07:e9:ba:e6:d7:b3:b6:df:9b:
                    3b:ee:58:9e:bb:e8:01:12:ca:54:3f:0e:89:fb:d5:
                    58:d9:96:8a:53:11:84:10:89:8e:99:82:19:d2:60:
                    8f:83:57:46:ed:5f:8a:2c:30:b6:f3:06:0f:97:9b:
                    b3:4a:12:79:db:ef:05:88:cf:dc:7d:e9:e0:33:52:
                    ec:b6:f6:46:92:05:91:93:eb:b9:db:48:41:d6:01:
                    ad:51:90:c6:c1:b5:d5:16:da:97:76:8b:14:e3:ec:
                    96:0b:f5:a0:f6:b8:9b:a6:3e:2b:64:72:c1:2b:b0:
                    a5:1f:02:cf:07:a2:5e:dc:48:cf:c1:db:b5:66:b0:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0F:DB:A7:7F:45:B9:6F:10:E9:60:04:72:29:7C:4E:E5:79:E2:98
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33302e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:b8:46:b1:ed:97:35:21:35:e4:e8:2d:13:7a:5d:88:5f:
         9d:2b:00:92:a2:58:ab:65:3d:b1:8c:37:e1:a2:e5:ff:a1:f8:
         b3:65:92:2b:f8:d5:52:a1:b3:46:89:db:f1:69:a1:83:b9:9c:
         9a:d4:2d:45:ed:2f:3a:b9:bc:e8:64:47:99:71:57:4d:45:91:
         98:57:ca:8f:af:64:29:e2:73:56:fa:59:3b:b4:62:99:31:16:
         34:b3:b7:aa:8d:96:03:da:a2:fd:fe:40:b2:81:79:c1:37:62:
         eb:6a:44:86:30:ec:a7:4f:46:d3:de:3e:e2:a7:99:03:13:3c:
         a7:6c:47:33:38:1b:12:50:05:3f:96:00:3f:5d:24:3a:f4:58:
         e1:ae:57:23:a4:0f:36:3b:12:b8:23:2e:21:06:31:84:f1:03:
         94:ea:ce:6d:00:10:2f:0a:c2:43:4e:62:51:49:4c:de:40:55:
         b5:e9:0b:9e:09:5d:86:1e:7b:0f:f8:2e:47:1e:fa:3d:5e:4d:
         65:31:e9:13:fb:16:ec:e2:14:fe:49:5c:9a:e0:c6:ab:87:d6:
         2d:f2:83:63:3a:8b:0a:a7:5a:8a:9c:8b:31:c2:ad:40:b2:90:
         86:15:27:a2:89:8d:48:98:a3:7e:b2:3b:11:31:66:21:a5:cc:
         89:fc:9e:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHCLZmXT0lhjxWtjWt4eTl+4xw0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMxQUREMzZBM0EwNzFCNTRBOThFMjY2NDY2MkQ2Q0RD
RDE0NjRGQTAeFw0yNjA5MDQxNTI4NTNaFw0yNzA5MDMxNTMzNTNaMDMxMTAvBgNV
BAMTKEIwMEZEQkE3N0Y0NUI5NkYxMEU5NjAwNDcyMjk3QzRFRTU3OUUyOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YINY5SjPJr7Gv8dYux7HNl8P
iC1cxjdusd1q0juJQ7duPezKvg+/Rig3SVVioqoHCvcBb8Uy7R/0nMabKHfXwxVL
lQ0IPC+dknkYZthsnagBnSyCxX9ZS3+hZePC/7DzjS1mbHwUhk4srEhGQ/018YZU
NIwrzMrGID9+iQfpuubXs7bfmzvuWJ676AESylQ/Don71VjZlopTEYQQiY6ZghnS
YI+DV0btX4osMLbzBg+Xm7NKEnnb7wWIz9x96eAzUuy29kaSBZGT67nbSEHWAa1R
kMbBtdUW2pd2ixTj7JYL9aD2uJumPitkcsErsKUfAs8Hol7cSM/B27VmsBfVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsA/bp39FuW8Q6WAEcil8TuV54pgwHwYDVR0j
BBgwFoAUYxrdNqOgcbVKmOJmRmLWzc0UZPowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOTIzNDFERjU0MjhGNjY3RDcyRDI1OEU5MjY5QUUxRDA2
M0E5MjhFOTFGMkZFMUE2MzFCODlEOTgwOEUwMEI3LzAvNjMxQUREMzZBM0EwNzFC
NTRBOThFMjY2NDY2MkQ2Q0RDRDE0NjRGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzFBREQzNkEzQTA3MUI1NEE5
OEUyNjY0NjYyRDZDRENEMTQ2NEZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjkyMzQxREY1NDI4RjY2N0Q3MkQyNThFOTI2OUFFMUQwNjNBOTI4RTkx
RjJGRTFBNjMxQjg5RDk4MDhFMDBCNy8wLzMxMzUzMjJlMzIzMzMxMmUzMzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJjnHjAN
BgkqhkiG9w0BAQsFAAOCAQEAFfO4RrHtlzUhNeToLRN6XYhfnSsAkqJYq2U9sYw3
4aLl/6H4s2WSK/jVUqGzRonb8Wmhg7mcmtQtRe0vOrm86GRHmXFXTUWRmFfKj69k
KeJzVvpZO7RimTEWNLO3qo2WA9qi/f5AsoF5wTdi62pEhjDsp09G094+4qeZAxM8
p2xHMzgbElAFP5YAP10kOvRY4a5XI6QPNjsSuCMuIQYxhPEDlOrObQAQLwrCQ05i
UUlM3kBVtekLngldhh57D/guRx76PV5NZTHpE/sW7OIU/klcmuDGq4fWLfKDYzqL
CqdaipyLMcKtQLKQhhUnoomNSJijfrI7ETFmIaXMifyezA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 01:58:01 2026 by rpki-client