Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235332e302f32342d3234203d3e203238313033.roa
File:                     3133312e3136312e3235332e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          7Bks37q0toCrXym1Ti/J60IatImOLH9TF/cZ5Wpgk8w=
Subject key identifier:   67:28:33:82:5E:7C:8A:9E:7B:99:3C:38:DB:F1:C3:38:C7:7C:8E:65
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       536A1D915FE1EB2CF99B20984121E3EEBED16EAA
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235332e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:08 +0000
ROA not before:           Mon 14 Jul 2025 13:20:08 +0000
ROA not after:            Mon 13 Jul 2026 13:25:08 +0000
asID:                     28103
IP address blocks:        131.161.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6a:1d:91:5f:e1:eb:2c:f9:9b:20:98:41:21:e3:ee:be:d1:6e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:08 2025 GMT
            Not After : Jul 13 13:25:08 2026 GMT
        Subject: CN=672833825E7C8A9E7B993C38DBF1C338C77C8E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:17:3e:7f:bd:e5:93:de:8f:c7:b1:1e:69:
                    7b:01:02:8b:1f:30:a6:37:4b:c4:ae:84:ef:07:3b:
                    81:69:ae:cf:cb:5a:08:b5:46:aa:ba:f3:6f:10:e8:
                    83:ee:2b:c1:74:9b:e5:26:58:c3:52:96:e8:8e:d5:
                    14:90:96:a4:b2:55:32:04:7e:4a:c5:62:7c:6d:54:
                    fe:54:95:58:9d:33:67:27:ab:bb:fc:82:b3:ba:50:
                    64:f6:8a:d0:57:5a:4c:e3:05:ce:34:db:03:0a:6e:
                    37:b3:0d:e3:21:09:54:2d:3b:e0:5d:59:88:bf:f9:
                    3f:4e:25:fd:01:76:30:a3:5a:2f:51:ba:04:21:bd:
                    50:c3:1e:60:78:18:2a:0f:cf:87:f3:7b:13:85:fa:
                    dd:07:7d:67:98:00:9a:46:f4:ff:3f:82:bf:11:aa:
                    1d:a5:25:90:b9:3d:fa:7f:c7:70:a5:47:f8:51:09:
                    77:3c:54:b1:24:89:07:f4:2f:2c:a8:43:ea:02:83:
                    47:1c:ad:4c:a3:2a:71:61:e6:08:4a:af:6a:8d:83:
                    3a:9f:93:01:1b:de:c2:13:c5:bd:39:a1:63:f7:bd:
                    0f:dc:77:08:14:ba:30:4a:c4:51:bb:10:f0:93:79:
                    fb:8e:6b:3c:9e:e6:14:1a:63:55:df:06:56:07:37:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:28:33:82:5E:7C:8A:9E:7B:99:3C:38:DB:F1:C3:38:C7:7C:8E:65
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235332e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:14:9d:2d:95:2b:86:16:03:e4:68:91:a1:0f:1e:4a:4f:b2:
         cc:0c:84:a4:13:96:4a:33:14:e1:f2:2f:9b:e8:d1:14:60:1a:
         08:cb:c0:71:48:41:cf:58:ad:55:25:2b:47:dc:d8:8e:22:75:
         56:80:fc:88:70:f6:c4:80:e8:ab:7f:56:d7:fb:85:b2:cd:87:
         4a:17:18:e5:d6:49:e2:0c:48:ce:2e:f0:c3:30:ac:85:9c:7e:
         47:c1:1b:88:a7:6f:5d:74:08:12:06:c5:06:5c:e1:c2:ce:33:
         26:4c:89:95:fa:69:e9:c1:d3:bb:4c:c0:68:55:d5:19:21:e4:
         a9:80:b8:fa:13:80:f5:98:83:3d:82:00:0f:08:31:4a:cf:5f:
         5a:14:41:f2:6c:71:38:a2:69:9f:cb:0d:ce:03:c5:6c:14:8e:
         52:b0:be:5a:65:27:36:9c:21:c2:f9:49:cf:bc:37:66:6c:0e:
         14:c5:e7:53:a8:1f:14:6a:10:8b:b8:e4:a5:e6:c6:35:3c:31:
         1c:2f:84:10:8c:15:9b:b9:18:13:ab:9f:ff:18:9a:f2:20:f5:
         aa:8f:7c:b5:26:68:a2:4a:e2:70:17:44:09:53:51:78:86:db:
         88:65:c0:d6:8f:e5:1c:a9:25:67:83:ab:cf:a4:b6:39:6b:f0:
         68:23:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:24 2025 by rpki-client