Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235322e302f32322d3234203d3e203238313033.roa
File:                     3133312e3136312e3235322e302f32322d3234203d3e203238313033.roa (raw, json)
Hash identifier:          1kJIYHChgz7I/OKsFN6AnR6o4zWHSsFFZLKdnJ4tAVM=
Subject key identifier:   54:09:91:A5:FD:D3:A8:7F:76:D9:45:1C:A1:4B:5E:92:8A:3F:7A:23
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       4B00FFEB4C784481FB8ECDA0D29B0ECABF9F24B5
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235322e302f32322d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:17 +0000
ROA not before:           Mon 14 Jul 2025 13:20:17 +0000
ROA not after:            Mon 13 Jul 2026 13:25:17 +0000
asID:                     28103
IP address blocks:        131.161.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:00:ff:eb:4c:78:44:81:fb:8e:cd:a0:d2:9b:0e:ca:bf:9f:24:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:17 2025 GMT
            Not After : Jul 13 13:25:17 2026 GMT
        Subject: CN=540991A5FDD3A87F76D9451CA14B5E928A3F7A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:d2:09:20:19:58:d9:92:d9:4a:cc:c2:59:
                    ff:57:df:80:cc:64:43:d8:68:dc:39:63:d4:25:64:
                    18:13:3e:82:45:b9:19:bc:74:f9:bc:c1:db:11:17:
                    54:35:23:5c:04:99:10:79:f0:39:df:68:de:8c:88:
                    85:e7:44:50:3e:54:47:a4:6e:40:b6:ba:a3:23:37:
                    07:f6:a5:72:52:72:d7:d2:f4:55:76:e6:dd:b4:d5:
                    ae:89:90:04:05:31:73:80:09:05:f2:2a:ef:fb:18:
                    e9:d7:1e:bf:ea:08:10:9a:0f:be:e7:0a:a1:4e:87:
                    73:9f:be:b2:8e:04:6d:44:5d:49:60:2a:f9:7c:ff:
                    9d:64:06:77:7b:0a:ca:92:58:93:89:32:54:f0:a4:
                    6e:99:ee:16:ab:17:35:13:49:1f:c0:a2:13:d8:85:
                    d8:23:5f:a1:f5:fd:8d:ca:fc:62:8d:86:6a:af:55:
                    b2:ce:66:cb:19:31:7a:07:0c:55:3f:0d:34:a8:29:
                    76:52:37:61:5a:5e:18:fe:a7:b8:31:70:66:36:e0:
                    3c:68:5d:4d:a2:26:c4:ef:f0:bb:ff:c6:f3:3b:f7:
                    56:17:7f:0e:41:ad:87:9f:8a:4d:9d:00:03:00:de:
                    8e:68:2d:90:72:ea:4f:bd:0b:36:da:7b:bf:e9:14:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:91:A5:FD:D3:A8:7F:76:D9:45:1C:A1:4B:5E:92:8A:3F:7A:23
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235322e302f32322d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:f5:c6:11:61:02:38:48:c0:81:ca:ab:d6:18:4c:8f:8e:79:
         f5:9d:89:3c:07:c7:35:42:0d:29:5f:10:9b:df:12:66:96:65:
         52:b1:ee:59:27:86:6c:a6:32:b4:c4:7c:68:3d:22:f3:b7:45:
         d5:77:35:45:6c:26:5b:a0:25:fd:62:92:26:0e:b2:b5:2d:79:
         9d:56:84:9b:bc:cc:1c:e3:ac:2f:31:b5:f1:76:5b:5e:c5:35:
         33:09:72:66:8c:3c:1d:9b:d9:63:27:1d:cf:fa:d2:ec:c8:00:
         84:bb:42:31:c9:05:28:06:89:08:a6:a1:c4:ee:fb:3b:ee:cb:
         94:af:dd:f3:69:1a:f3:c1:9f:26:7b:c0:dc:12:43:1f:07:47:
         0b:86:bc:3a:14:c5:af:69:96:16:35:90:53:6e:04:79:fe:1b:
         55:60:f7:3e:7f:27:01:ce:66:7e:39:c6:a0:3b:b6:46:a6:8d:
         92:55:b2:8a:02:1e:ff:c4:0c:3e:3f:6d:71:eb:cb:f7:b3:f1:
         38:bf:aa:e1:81:9d:ca:da:b4:ac:94:58:80:f2:91:45:9e:6b:
         81:51:91:b2:02:80:f8:2e:e9:8a:75:a4:5d:ac:7b:32:81:45:
         05:e4:18:54:f8:86:9c:a5:a3:b4:36:c0:3f:e6:fd:8b:cf:f7:
         c2:00:40:be
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSwD/60x4RIH7js2g0psOyr+fJLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNTA3MTQxMzIwMTdaFw0yNjA3MTMxMzI1MTdaMDMxMTAvBgNV
BAMTKDU0MDk5MUE1RkREM0E4N0Y3NkQ5NDUxQ0ExNEI1RTkyOEEzRjdBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXbdIJIBlY2ZLZSszCWf9X34DM
ZEPYaNw5Y9QlZBgTPoJFuRm8dPm8wdsRF1Q1I1wEmRB58DnfaN6MiIXnRFA+VEek
bkC2uqMjNwf2pXJSctfS9FV25t201a6JkAQFMXOACQXyKu/7GOnXHr/qCBCaD77n
CqFOh3OfvrKOBG1EXUlgKvl8/51kBnd7CsqSWJOJMlTwpG6Z7harFzUTSR/AohPY
hdgjX6H1/Y3K/GKNhmqvVbLOZssZMXoHDFU/DTSoKXZSN2FaXhj+p7gxcGY24Dxo
XU2iJsTv8Lv/xvM791YXfw5BrYefik2dAAMA3o5oLZBy6k+9Czbae7/pFH/7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVAmRpf3TqH922UUcoUtekoo/eiMwHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMxMzMzMTJlMzEzNjMxMmUzMjM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzEzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg6H8
MA0GCSqGSIb3DQEBCwUAA4IBAQCz9cYRYQI4SMCByqvWGEyPjnn1nYk8B8c1Qg0p
XxCb3xJmlmVSse5ZJ4ZspjK0xHxoPSLzt0XVdzVFbCZboCX9YpImDrK1LXmdVoSb
vMwc46wvMbXxdltexTUzCXJmjDwdm9ljJx3P+tLsyACEu0IxyQUoBokIpqHE7vs7
7suUr93zaRrzwZ8me8DcEkMfB0cLhrw6FMWvaZYWNZBTbgR5/htVYPc+fycBzmZ+
OcagO7ZGpo2SVbKKAh7/xAw+P21x68v3s/E4v6rhgZ3K2rSslFiA8pFFnmuBUZGy
AoD4LumKdaRdrHsygUUF5BhU+IacpaO0NsA/5v2Lz/fCAEC+
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:39 2025 by rpki-client