Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32332d3233203d3e203336353131.roa
File:                     3137302e3233332e37322e302f32332d3233203d3e203336353131.roa (raw, json)
Hash identifier:          k6HUmMMLPNNgGJDtGxxrfh1I5mbof/peWIclOfP0nLM=
Subject key identifier:   97:45:84:56:B5:BA:5C:1F:29:D4:2A:2D:23:B6:C6:A0:4E:74:9C:4C
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       732949642B593999C0F12B79F0AECDD012A35F24
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32332d3233203d3e203336353131.roa
Signing time:             Thu 19 Jun 2025 20:22:49 +0000
ROA not before:           Thu 19 Jun 2025 20:17:49 +0000
ROA not after:            Thu 18 Jun 2026 20:22:49 +0000
asID:                     36511
IP address blocks:        170.233.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 03:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:49:64:2b:59:39:99:c0:f1:2b:79:f0:ae:cd:d0:12:a3:5f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Jun 19 20:17:49 2025 GMT
            Not After : Jun 18 20:22:49 2026 GMT
        Subject: CN=97458456B5BA5C1F29D42A2D23B6C6A04E749C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:a2:60:33:e6:13:41:fb:7b:84:a3:b5:41:
                    b5:81:e2:1e:66:99:2c:fe:4f:69:e9:62:b7:99:3e:
                    42:7f:de:24:24:24:50:b0:68:bb:c1:15:0c:bb:2a:
                    3e:e3:24:8d:78:27:bb:34:a0:c9:48:00:59:4e:4f:
                    4f:20:d4:00:99:66:8a:ac:ee:eb:c7:18:50:2b:e8:
                    78:06:ba:bf:a6:93:81:4e:a8:94:2c:bc:ae:17:a6:
                    c5:f1:90:0e:88:20:43:eb:d1:c5:fd:b9:34:a4:3f:
                    e4:1e:6a:08:68:f8:3a:b7:ad:42:47:3b:e0:ac:2b:
                    3e:1c:80:7a:6e:6b:98:82:ee:1b:a7:b7:98:ba:36:
                    a5:08:47:28:61:87:89:ca:4b:13:a3:ec:9d:db:5b:
                    20:b9:82:c9:c5:be:a3:1d:63:4a:c6:d5:92:6b:5b:
                    73:1b:7e:2b:b5:3b:0c:40:d6:37:05:3f:6f:1b:ca:
                    b5:8a:e4:a5:11:74:ff:b7:94:8f:95:04:03:fb:fb:
                    87:18:cb:ef:f8:e5:ec:47:9f:75:fc:f2:8d:9b:9d:
                    8f:db:cc:5e:f7:33:40:30:71:36:90:96:31:d3:12:
                    4e:71:7f:59:49:fa:93:9b:21:fc:c6:23:62:49:dd:
                    63:8a:3f:b4:64:ed:a5:8d:e8:78:91:e1:f8:c2:92:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:45:84:56:B5:BA:5C:1F:29:D4:2A:2D:23:B6:C6:A0:4E:74:9C:4C
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32332d3233203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:8f:7a:89:49:90:90:0c:43:79:e9:ad:10:e1:15:3c:3d:
         dd:3c:8f:9d:19:ea:a0:4d:27:aa:8e:a6:f1:c0:f2:19:a7:87:
         c6:5d:a7:e3:14:c6:f2:37:42:a6:06:d0:d3:f7:6f:bd:84:37:
         a7:53:f0:2a:d6:fb:af:c1:a6:9f:14:28:22:e0:b4:63:e8:99:
         0b:46:2d:e3:4a:e1:f5:8b:a8:6e:24:d9:ea:80:fc:97:c1:56:
         fd:10:a3:2f:e1:84:7a:f7:de:30:f2:c4:ea:38:27:d2:9c:0d:
         c7:e4:bd:2e:19:48:df:1f:8f:ba:8b:83:43:45:73:fd:9f:c9:
         75:b0:78:b5:e4:33:bb:6c:df:4b:0d:4c:c4:ab:e9:1f:b5:04:
         68:0a:3c:44:f8:f8:eb:60:e6:5b:ca:ca:ec:8a:10:1f:a6:c9:
         bd:5e:fc:15:1e:39:3f:e6:62:c0:3e:d5:52:dc:01:64:0d:d6:
         10:00:2c:28:7b:a5:d5:7e:bc:2b:14:12:8b:89:af:c9:22:bf:
         43:c5:d3:ca:f6:f2:cb:6c:d3:0d:e9:07:8b:db:a0:1b:ed:db:
         97:c5:4b:6a:20:c6:1e:34:f1:d8:f0:d4:4f:46:b7:73:09:da:
         9f:c5:14:a8:04:d3:d4:c4:9b:72:e0:6b:10:fd:88:2e:92:3d:
         fa:51:98:e4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcylJZCtZOZnA8St58K7N0BKjXyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1MUYxRTRCNjQ4MEQxOTYyNkU3ODRDQTFBOEYwQUJD
OTRDMTQ4NzAeFw0yNTA2MTkyMDE3NDlaFw0yNjA2MTgyMDIyNDlaMDMxMTAvBgNV
BAMTKDk3NDU4NDU2QjVCQTVDMUYyOUQ0MkEyRDIzQjZDNkEwNEU3NDlDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdf6JgM+YTQft7hKO1QbWB4h5m
mSz+T2npYreZPkJ/3iQkJFCwaLvBFQy7Kj7jJI14J7s0oMlIAFlOT08g1ACZZoqs
7uvHGFAr6HgGur+mk4FOqJQsvK4XpsXxkA6IIEPr0cX9uTSkP+Qeagho+Dq3rUJH
O+CsKz4cgHpua5iC7hunt5i6NqUIRyhhh4nKSxOj7J3bWyC5gsnFvqMdY0rG1ZJr
W3Mbfiu1OwxA1jcFP28byrWK5KURdP+3lI+VBAP7+4cYy+/45exHn3X88o2bnY/b
zF73M0AwcTaQljHTEk5xf1lJ+pObIfzGI2JJ3WOKP7Rk7aWN6HiR4fjCkjlLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUl0WEVrW6XB8p1CotI7bGoE50nEwwHwYDVR0j
BBgwFoAUllHx5LZIDRlibnhMoajwq8lMFIcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjhFMjE3RjY5REU5OUQ1MkFCM0I2Mzg1RDEzNEI5M0Mz
RDREODI2MEYxRTI0QzAyMzE0OTNFODlDMkZGMTBGLzAvOTY1MUYxRTRCNjQ4MEQx
OTYyNkU3ODRDQTFBOEYwQUJDOTRDMTQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjUxRjFFNEI2NDgwRDE5NjI2
RTc4NENBMUE4RjBBQkM5NEMxNDg3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY4RTIxN0Y2OURFOTlENTJBQjNCNjM4NUQxMzRCOTNDM0Q0RDgyNjBG
MUUyNEMwMjMxNDkzRTg5QzJGRjEwRi8wLzMxMzczMDJlMzIzMzMzMmUzNzMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzNjM1MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAarpSDAN
BgkqhkiG9w0BAQsFAAOCAQEAnHyPeolJkJAMQ3nprRDhFTw93TyPnRnqoE0nqo6m
8cDyGaeHxl2n4xTG8jdCpgbQ0/dvvYQ3p1PwKtb7r8GmnxQoIuC0Y+iZC0Yt40rh
9YuobiTZ6oD8l8FW/RCjL+GEevfeMPLE6jgn0pwNx+S9LhlI3x+PuouDQ0Vz/Z/J
dbB4teQzu2zfSw1MxKvpH7UEaAo8RPj462DmW8rK7IoQH6bJvV78FR45P+ZiwD7V
UtwBZA3WEAAsKHul1X68KxQSi4mvySK/Q8XTyvbyy2zTDekHi9ugG+3bl8VLaiDG
HjTx2PDUT0a3cwnan8UUqATT1MSbcuBrEP2ILpI9+lGY5A==
-----END CERTIFICATE-----
Generated at Fri Jun 20 19:44:30 2025 by rpki-client