Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235342e302f32342d3234203d3e203238313033.roa
File:                     3133312e3136312e3235342e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          oF/KwqMROLAp5rhmv1w29P+nySR3K/uD0Lr+uH7lGT4=
Subject key identifier:   E8:8F:B0:FA:52:BE:A2:0F:04:32:9C:FD:DC:BE:F2:6C:91:A4:01:72
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       7FD0A3FBABB20FBDE31445060B77FF303F8BDE9D
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235342e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:10 +0000
ROA not before:           Mon 14 Jul 2025 13:20:10 +0000
ROA not after:            Mon 13 Jul 2026 13:25:10 +0000
asID:                     28103
IP address blocks:        131.161.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d0:a3:fb:ab:b2:0f:bd:e3:14:45:06:0b:77:ff:30:3f:8b:de:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:10 2025 GMT
            Not After : Jul 13 13:25:10 2026 GMT
        Subject: CN=E88FB0FA52BEA20F04329CFDDCBEF26C91A40172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:a2:f3:2b:91:7d:40:df:d3:fb:14:e4:3c:
                    8c:93:c4:51:9f:92:82:48:07:a9:f2:d1:dc:fc:ec:
                    6e:64:7b:4a:26:31:22:96:44:b7:6c:a6:77:f8:30:
                    9a:59:86:1b:12:90:e6:8e:c8:91:5c:28:c5:e2:51:
                    c2:89:17:42:85:f7:72:3a:41:51:24:50:37:c9:8b:
                    04:52:93:ba:e4:77:0f:ba:a4:5b:95:8b:31:ba:17:
                    fd:4f:32:bc:c6:d2:7f:46:25:d4:92:ad:2c:0e:9e:
                    18:06:cd:6a:b6:9d:e5:2e:e3:1b:a5:e6:3f:4b:49:
                    97:45:65:2d:14:f8:ee:5a:61:22:dd:d5:6f:c5:21:
                    5d:69:91:ef:7c:49:82:65:dd:f7:ef:6e:04:0b:67:
                    24:56:bc:76:bd:18:a3:3f:30:6b:13:de:09:7c:cb:
                    56:f4:c3:5d:6b:26:d6:f7:d0:06:74:b1:a9:02:1c:
                    a1:4b:39:cd:c2:37:5e:c3:35:b7:13:b0:98:1c:be:
                    dc:33:de:b4:8a:ef:0c:ea:be:b2:2d:7e:49:fd:06:
                    8e:74:09:38:56:00:7c:ad:5a:46:72:fe:5d:6c:bc:
                    a5:c4:ae:26:fa:9b:f9:1d:a8:b8:91:a4:d8:df:44:
                    a3:8b:d4:7f:22:89:1b:04:03:51:df:70:ad:2c:10:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:B0:FA:52:BE:A2:0F:04:32:9C:FD:DC:BE:F2:6C:91:A4:01:72
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235342e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:46:1e:26:54:67:65:d8:fb:79:80:6d:61:d8:dd:40:1b:e1:
         25:d8:4b:86:c5:c1:96:92:70:ed:9d:5d:dd:48:3f:5c:e0:97:
         cb:c7:ea:6e:16:ce:70:03:4e:70:94:e7:a6:39:f0:40:21:b3:
         27:21:34:39:31:b7:38:f8:7f:d3:42:f4:05:de:c7:bb:71:52:
         3b:75:3b:ce:95:80:cf:1e:cf:02:41:28:de:7c:65:6b:36:8c:
         fd:63:ed:88:aa:4b:29:b4:af:f2:ab:eb:4b:f8:c0:2c:f8:48:
         c1:60:ad:23:d1:19:31:fe:f3:27:a6:72:56:93:c3:88:d8:b5:
         08:84:69:7c:3a:ab:01:e7:24:c3:50:c0:57:78:48:5d:2a:ce:
         0e:1d:9f:de:bf:e0:bf:0e:57:21:7d:e2:2b:f7:37:7a:0a:bc:
         25:d9:cc:a3:d2:8e:fc:fd:24:57:88:53:e2:f5:36:b3:7d:61:
         23:a0:22:08:52:fd:09:cb:5e:bf:e0:18:f4:c6:9c:54:9f:07:
         c0:65:13:58:c7:b1:7f:24:f4:2d:f6:04:3c:cd:b0:06:fc:ca:
         65:3f:2c:19:35:f1:ee:7d:41:91:14:d8:13:d6:fb:ac:23:6a:
         b5:63:8b:b4:c4:75:43:d5:11:d0:be:31:16:be:08:c0:23:84:
         70:b3:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:51:53 2025 by rpki-client