Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32322d3234203d3e203238313033.roa
File:                     3133382e3138362e36302e302f32322d3234203d3e203238313033.roa (raw, json)
Hash identifier:          tGVK3FDcE9Yx/z9pf20nB+M/UU5QdDpzF6pV4zfOAGw=
Subject key identifier:   FE:AA:7E:03:24:71:ED:7C:AD:80:04:47:0C:F8:7F:13:74:F5:44:12
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       5AE6D93DCF09D85FBC3FF21D61C2D98DBEAF7BC3
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32322d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:11 +0000
ROA not before:           Mon 14 Jul 2025 13:20:11 +0000
ROA not after:            Mon 13 Jul 2026 13:25:11 +0000
asID:                     28103
IP address blocks:        138.186.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e6:d9:3d:cf:09:d8:5f:bc:3f:f2:1d:61:c2:d9:8d:be:af:7b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:11 2025 GMT
            Not After : Jul 13 13:25:11 2026 GMT
        Subject: CN=FEAA7E032471ED7CAD8004470CF87F1374F54412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:34:ef:71:13:54:58:cd:84:87:39:48:8b:
                    10:07:1e:d5:6f:dc:2e:58:e6:d4:be:9d:63:0e:b5:
                    6b:ff:f3:95:7c:c1:f8:64:6e:a2:15:4b:59:f1:5e:
                    76:8a:2f:21:24:87:56:cc:bb:43:36:f5:a6:ed:c6:
                    55:ad:46:e0:91:02:11:7d:20:a2:55:be:b9:5e:be:
                    52:22:0d:e6:85:ec:59:5c:f4:92:e6:97:38:35:5d:
                    cd:d7:94:08:5d:d4:58:97:7a:1e:97:27:68:d1:87:
                    90:4d:79:5d:cb:cf:b6:00:f8:90:e8:0d:c3:f5:37:
                    19:40:57:e6:de:7e:d5:54:44:1f:2a:52:8f:5d:1d:
                    fd:0f:00:55:d2:4a:1c:46:cd:e8:83:d1:c6:7a:50:
                    ce:b8:e9:6f:09:36:8c:90:45:82:07:a3:b1:d1:f5:
                    3a:e8:f5:59:e5:42:1f:81:1b:77:d0:ef:0d:d7:77:
                    cb:da:02:a2:94:4c:08:c8:b2:b3:82:37:ef:e5:ec:
                    72:f6:f9:4c:25:ca:44:34:53:3a:9d:87:18:f9:5b:
                    3b:87:db:b0:a2:e8:8a:96:0e:60:ec:c2:28:5d:4c:
                    a8:6b:b9:af:0d:26:f3:a9:b1:cf:38:52:0d:b0:3d:
                    24:3a:0d:34:d0:f4:a4:3c:f3:40:6f:00:eb:37:e9:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AA:7E:03:24:71:ED:7C:AD:80:04:47:0C:F8:7F:13:74:F5:44:12
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32322d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:a8:e3:53:9f:2e:93:6e:a1:a7:67:37:19:05:c6:6f:47:
         e3:2c:a4:cc:ef:17:7e:89:38:75:5b:93:4c:9f:7b:75:b9:a9:
         49:86:63:50:f1:d3:78:bb:ad:3b:f6:77:18:2c:ff:73:ab:5f:
         11:e7:9d:93:32:f4:f7:f7:2c:e7:46:77:37:25:ff:be:bc:65:
         31:ff:7d:21:39:d0:61:d0:f3:05:97:72:ec:91:f7:c8:9d:d4:
         b3:e9:73:a1:20:1e:c5:22:85:52:e1:f7:55:66:13:2c:21:3a:
         c7:c1:fe:76:80:5d:a2:4c:05:1e:14:e2:cc:34:d0:3d:ad:16:
         67:0d:3c:41:7e:d9:8a:8a:d1:ef:cc:1d:e4:1c:fb:09:65:25:
         63:cd:fc:9e:57:17:33:e3:26:39:c6:b2:34:c6:0c:e5:34:3f:
         9a:f0:93:7c:7f:1d:49:41:6f:a5:07:df:a5:2b:e5:ca:a5:41:
         88:e8:36:0a:d6:70:4f:ec:ed:e9:4d:e2:47:e7:66:19:08:7b:
         ec:45:ea:07:25:7a:40:45:d8:0b:99:94:59:ba:d1:a0:3e:2e:
         08:6c:49:fb:8c:04:40:3c:75:30:cf:3c:c1:e7:c1:0e:ec:dd:
         88:70:0b:31:2e:e2:f4:c1:07:7b:81:db:27:e6:93:90:9e:c3:
         78:f7:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:04:10 2025 by rpki-client