Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235352e302f32342d3234203d3e203238313033.roa
File:                     3133312e3136312e3235352e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          mdhfg7x9S4wltrmq7v4bwaEnCNtjh9rsImnoGqKtUM0=
Subject key identifier:   BC:97:94:FB:41:DB:94:F6:7A:59:D9:BF:87:1C:36:C0:68:13:88:77
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       3069DA2AE039F0B79BAE0DB22504951F28B5E25C
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235352e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:15 +0000
ROA not before:           Mon 14 Jul 2025 13:20:15 +0000
ROA not after:            Mon 13 Jul 2026 13:25:15 +0000
asID:                     28103
IP address blocks:        131.161.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:69:da:2a:e0:39:f0:b7:9b:ae:0d:b2:25:04:95:1f:28:b5:e2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:15 2025 GMT
            Not After : Jul 13 13:25:15 2026 GMT
        Subject: CN=BC9794FB41DB94F67A59D9BF871C36C068138877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:48:c7:70:8c:c4:00:68:7d:0c:83:36:4a:
                    3c:a1:9d:4b:1a:63:fd:1a:24:37:74:bf:a1:86:29:
                    69:7b:70:12:a9:b5:2d:1b:4d:e5:44:7d:e4:65:69:
                    9d:c2:7c:be:19:67:b6:25:6f:94:e3:36:39:29:42:
                    bc:63:9d:15:11:94:d3:86:ea:a3:67:7b:b5:96:1d:
                    a1:1e:a1:6c:84:1f:de:fd:e1:13:7a:4e:cc:11:86:
                    6d:6f:12:90:6e:92:1a:ce:21:53:c0:1d:28:1f:01:
                    91:04:a1:52:96:0f:c3:16:a1:15:82:e1:ed:7d:3d:
                    65:ef:6d:7d:92:52:03:75:fa:8b:78:6c:19:36:c5:
                    0e:05:cf:d7:4a:4b:fc:10:19:4a:70:58:f0:2b:b9:
                    2f:b9:f5:45:3c:e0:86:c3:b2:bf:30:72:76:4d:83:
                    f8:75:41:56:cf:0c:9f:3b:b9:9e:77:cd:15:0c:14:
                    34:3d:63:a6:d6:95:e5:13:0d:84:9b:ee:e5:ed:25:
                    b5:b3:6e:c3:3e:2d:69:e7:d8:92:71:04:cf:70:30:
                    f1:11:5c:eb:08:f1:fc:f8:7a:64:45:64:a6:63:2b:
                    cd:3e:ff:fa:f6:ea:09:ac:a2:af:f5:fb:08:eb:b7:
                    b7:e9:9d:01:c1:da:c6:3e:b2:7d:3f:3d:c1:63:60:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:97:94:FB:41:DB:94:F6:7A:59:D9:BF:87:1C:36:C0:68:13:88:77
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235352e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f4:16:5e:60:1f:70:bc:ba:22:8a:e1:d2:b5:a7:b3:2a:2b:
         e4:84:e2:12:d4:d0:f9:29:1e:3b:d4:e9:42:fd:75:2a:c9:23:
         15:d4:ef:c4:41:c4:16:da:18:61:11:00:46:81:32:d2:00:dc:
         36:30:8c:b8:32:dd:13:82:57:c4:92:48:51:ca:c5:90:a7:d4:
         bc:ec:50:d2:99:3b:c1:76:8e:f8:cd:d8:c8:b0:e2:7d:5c:56:
         27:d3:6b:38:a8:0e:e2:40:2a:c6:31:dd:53:7c:b5:e1:9b:75:
         5f:26:5e:5d:b4:4b:2f:22:6c:ef:09:55:69:10:95:c2:32:e9:
         2c:2c:10:2b:0b:7b:4c:1b:a8:ee:51:87:69:61:f7:88:f7:65:
         e6:18:f7:f9:33:01:6e:37:19:c1:83:34:44:b8:93:3f:47:b4:
         84:67:a9:25:e2:e3:c7:5e:3f:ff:2d:6d:88:ec:f3:67:cf:5b:
         aa:b9:68:4e:c7:92:d2:b8:c4:62:d0:3f:ac:af:cd:06:22:49:
         1c:ac:5a:0f:48:a1:ee:f1:29:49:10:c5:bb:cd:ac:ad:f3:e1:
         31:67:c6:c6:f3:3c:33:72:cc:d4:b5:9d:6f:dc:4c:71:b0:15:
         3f:8d:d7:4f:2c:14:d6:69:04:a1:85:92:40:91:0c:5b:4e:44:
         ab:5f:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:26 2025 by rpki-client