Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135372e302f32342d3234203d3e203231353735.roa
File:                     3139302e382e3135372e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          8u2HrsJn6iMyeZ3Ni3GIy+SM5vLSsOH2Ldosf5OqLO4=
Subject key identifier:   86:E9:A4:C8:E5:D8:0F:37:88:82:38:51:EC:90:63:43:E5:A3:46:D6
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       2FA841940EF94EB7D052E1D8153105F5BBE7FA74
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135372e302f32342d3234203d3e203231353735.roa
Signing time:             Thu 07 Aug 2025 21:05:01 +0000
ROA not before:           Thu 07 Aug 2025 21:00:01 +0000
ROA not after:            Thu 06 Aug 2026 21:05:01 +0000
asID:                     21575
IP address blocks:        190.8.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 18:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a8:41:94:0e:f9:4e:b7:d0:52:e1:d8:15:31:05:f5:bb:e7:fa:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Aug  7 21:00:01 2025 GMT
            Not After : Aug  6 21:05:01 2026 GMT
        Subject: CN=86E9A4C8E5D80F3788823851EC906343E5A346D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:bb:3d:dc:99:8a:84:3e:df:4d:11:16:cf:
                    88:38:d1:14:53:79:3d:fa:5b:b5:91:d8:46:24:59:
                    b8:a5:58:55:d5:bc:29:0e:2c:e7:63:8b:86:a5:b3:
                    e6:80:8e:5f:c1:4f:55:dc:a9:ec:25:aa:26:7d:60:
                    61:50:37:23:5b:a4:a2:d1:64:b7:5a:97:c9:d8:69:
                    f7:e7:88:c2:6a:66:d5:cd:93:a9:46:15:9d:45:eb:
                    a8:11:a2:2f:d1:72:50:28:c1:6b:e9:14:81:55:73:
                    38:85:31:f6:cc:dd:0d:90:c5:1c:69:d3:71:c1:1c:
                    66:39:49:00:50:50:8d:19:4d:19:dd:18:98:2a:71:
                    53:2e:88:bd:02:49:86:a0:77:e1:d1:8a:10:3f:1d:
                    d8:61:94:2b:4c:24:48:76:e5:63:ac:88:a1:c1:73:
                    e1:ec:bf:f3:db:f4:c9:2b:ec:fd:62:36:95:79:20:
                    48:bc:3c:fa:7d:5e:10:e4:e7:69:c1:0e:59:be:45:
                    02:e1:ac:70:52:3a:c0:f6:f0:6d:42:e3:6e:6b:12:
                    a5:ca:e4:6c:52:34:56:24:7e:f8:1d:f3:44:17:38:
                    6e:e3:f8:48:9a:9e:a0:98:15:42:1f:2c:c0:da:f5:
                    8f:71:17:5c:b3:e0:05:f5:5d:6a:f1:87:43:35:fc:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E9:A4:C8:E5:D8:0F:37:88:82:38:51:EC:90:63:43:E5:A3:46:D6
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135372e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:33:75:7f:3f:f4:f8:35:d3:08:ef:5b:f1:dc:93:80:44:
         ec:98:9f:ff:09:74:10:1e:3d:f5:39:7b:03:7a:16:a2:3f:a7:
         7c:e7:fc:49:6a:d9:78:74:d7:d2:28:85:96:01:b2:60:1c:25:
         7c:40:b7:bc:a3:dc:cc:0d:5a:20:af:cf:0e:95:1c:62:27:c2:
         62:42:0c:09:fa:c4:69:22:24:20:27:dc:e8:fd:71:1a:bc:80:
         84:b4:24:dc:5a:3d:01:b6:36:a7:ca:71:00:f8:58:e5:4e:23:
         4d:ca:ae:64:64:dd:79:03:97:84:87:b2:b5:77:78:6b:23:dc:
         ce:39:70:bc:f6:95:44:be:c3:65:88:66:53:05:e9:83:40:bc:
         b7:87:f3:61:81:9e:01:38:91:a0:cf:c7:bf:18:f6:f4:f3:31:
         58:40:32:95:24:db:67:24:e6:2d:19:b8:6b:a2:e5:b0:ed:db:
         64:52:a2:f8:c1:1f:96:09:ae:8e:8f:7c:e4:cb:b4:95:bb:ad:
         25:ea:38:00:3f:74:c3:6b:c3:60:95:07:3d:0b:06:e3:e7:2f:
         3a:fd:49:95:26:d2:e1:52:93:8f:5a:f4:f7:7e:8e:ed:97:0d:
         57:2f:df:27:bf:c8:24:5e:bf:5b:8a:35:eb:ff:7e:2c:45:47:
         1b:31:c0:21
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUL6hBlA75TrfQUuHYFTEF9bvn+nQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIxQzFCN0I4MTgzNjAwNUI0NTVDNEZGMjZEREFBMUZC
M0E2NzhFNTAeFw0yNTA4MDcyMTAwMDFaFw0yNjA4MDYyMTA1MDFaMDMxMTAvBgNV
BAMTKDg2RTlBNEM4RTVEODBGMzc4ODgyMzg1MUVDOTA2MzQzRTVBMzQ2RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGB7s93JmKhD7fTREWz4g40RRT
eT36W7WR2EYkWbilWFXVvCkOLOdji4als+aAjl/BT1XcqewlqiZ9YGFQNyNbpKLR
ZLdal8nYaffniMJqZtXNk6lGFZ1F66gRoi/RclAowWvpFIFVcziFMfbM3Q2QxRxp
03HBHGY5SQBQUI0ZTRndGJgqcVMuiL0CSYagd+HRihA/HdhhlCtMJEh25WOsiKHB
c+Hsv/Pb9Mkr7P1iNpV5IEi8PPp9XhDk52nBDlm+RQLhrHBSOsD28G1C425rEqXK
5GxSNFYkfvgd80QXOG7j+EianqCYFUIfLMDa9Y9xF1yz4AX1XWrxh0M1/NslAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUhumkyOXYDzeIgjhR7JBjQ+WjRtYwHwYDVR0j
BBgwFoAUKxwbe4GDYAW0VcT/Jt2qH7OmeOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRkM2MzIxMUE4RjlDNkZGNTY3OTcyRTkxNEI4NjZCN0U0
QkQ2RjlFNTYxMjU5NzQyMEVFNzBCNjFBNEM3MjNGLzAvMkIxQzFCN0I4MTgzNjAw
NUI0NTVDNEZGMjZEREFBMUZCM0E2NzhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjFDMUI3QjgxODM2MDA1QjQ1
NUM0RkYyNkREQUExRkIzQTY3OEU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0ZDNjMyMTFBOEY5QzZGRjU2Nzk3MkU5MTRCODY2QjdFNEJENkY5RTU2
MTI1OTc0MjBFRTcwQjYxQTRDNzIzRi8wLzMxMzkzMDJlMzgyZTMxMzUzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+CJ0wDQYJ
KoZIhvcNAQELBQADggEBAAPRM3V/P/T4NdMI71vx3JOAROyYn/8JdBAePfU5ewN6
FqI/p3zn/Elq2Xh019IohZYBsmAcJXxAt7yj3MwNWiCvzw6VHGInwmJCDAn6xGki
JCAn3Oj9cRq8gIS0JNxaPQG2NqfKcQD4WOVOI03KrmRk3XkDl4SHsrV3eGsj3M45
cLz2lUS+w2WIZlMF6YNAvLeH82GBngE4kaDPx78Y9vTzMVhAMpUk22ck5i0ZuGui
5bDt22RSovjBH5YJro6PfOTLtJW7rSXqOAA/dMNrw2CVBz0LBuPnLzr9SZUm0uFS
k49a9Pd+ju2XDVcv3ye/yCRev1uKNev/fixFRxsxwCE=
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:31 2025 by rpki-client