Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32342d3234203d3e203238313033.roa
File:                     3133382e3138362e36302e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          JEiokZu7RBUuWAZbBuelxhuFWkpJp0mXR2jGYvsDAh8=
Subject key identifier:   14:D7:49:93:FB:54:BC:6D:6E:3D:31:CC:DB:03:C0:8A:2F:A4:F3:7A
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       64FF557D92CB2671D7CC991DD2199296BF0990D0
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:17 +0000
ROA not before:           Mon 14 Jul 2025 13:20:17 +0000
ROA not after:            Mon 13 Jul 2026 13:25:17 +0000
asID:                     28103
IP address blocks:        138.186.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ff:55:7d:92:cb:26:71:d7:cc:99:1d:d2:19:92:96:bf:09:90:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:17 2025 GMT
            Not After : Jul 13 13:25:17 2026 GMT
        Subject: CN=14D74993FB54BC6D6E3D31CCDB03C08A2FA4F37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a5:44:5d:0b:55:68:1a:1f:bb:6c:05:f7:65:
                    90:38:f7:3d:ca:bf:4f:3e:e0:36:f1:7a:4e:4f:9a:
                    39:d5:99:48:36:5d:0d:84:2c:1b:55:53:1c:54:f0:
                    22:01:5b:d6:80:e9:eb:cc:12:58:dd:03:d4:4d:a8:
                    43:f6:ea:6b:04:d9:4f:16:7b:5b:5f:f8:20:29:32:
                    91:d4:30:1e:dd:41:43:c3:57:93:85:55:67:58:ac:
                    79:42:da:03:7e:9d:e4:08:2d:e6:5b:f1:63:a6:a5:
                    b2:73:43:2f:08:9a:b7:4e:8f:34:19:02:7f:a7:0f:
                    f3:27:e3:e0:61:89:1f:02:6d:bc:6c:05:ff:7d:3a:
                    b6:09:19:09:02:d6:2a:b6:dd:75:26:9d:fc:4b:3f:
                    54:88:f9:fd:03:35:39:41:de:a3:43:de:43:d7:2b:
                    64:d2:62:c5:58:94:1e:ea:a6:44:62:97:7c:0b:70:
                    1e:fb:d5:a7:f2:0e:a1:fd:da:d5:6d:8a:05:ce:7b:
                    d6:01:a4:a7:85:87:30:f2:98:55:3a:15:59:ec:91:
                    40:28:bb:9a:ad:76:83:8c:9e:96:59:96:fb:ec:ed:
                    22:15:e3:34:7e:14:48:5d:ca:c2:08:ba:97:70:ee:
                    02:a7:e0:35:7f:91:22:de:81:cd:54:db:1d:a1:88:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:49:93:FB:54:BC:6D:6E:3D:31:CC:DB:03:C0:8A:2F:A4:F3:7A
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:5a:12:73:4f:94:44:20:69:a4:9c:2c:19:2f:c8:15:f3:
         33:b9:31:57:6d:a5:bb:cc:8e:40:48:4e:a9:1e:f7:45:db:97:
         02:e5:9d:4c:d2:8a:91:4f:db:ee:f4:57:d3:60:da:33:96:b1:
         27:c3:03:2e:dd:74:f9:ac:97:f5:69:fe:08:07:5f:93:f2:aa:
         75:af:6f:c0:3f:27:e3:93:54:9b:01:0c:30:e5:03:93:02:3d:
         16:3e:1a:7d:fc:19:c3:b6:ad:fc:02:37:a3:7d:39:e3:90:5b:
         e0:42:b7:f9:20:9e:cf:7c:97:09:54:80:3b:ed:89:48:08:6c:
         0a:86:ec:80:46:7e:a4:5d:b2:7c:12:c4:f8:56:ed:68:68:3e:
         0e:d3:db:90:0c:06:83:9e:08:18:86:bc:73:67:5a:47:f2:40:
         db:fb:64:31:18:6c:ce:61:cf:c7:81:1a:f6:a9:08:28:3c:c0:
         8f:00:d0:08:eb:80:fc:25:fd:73:b5:58:44:64:53:8a:1a:15:
         8f:cf:6f:a5:66:c1:cd:ef:67:9c:5a:e8:59:de:27:fb:1d:b0:
         6b:24:02:c3:8f:c7:0d:a7:93:10:47:b7:32:ce:c8:ca:55:65:
         7c:0d:56:51:22:1e:c0:47:3b:dd:69:98:11:e6:e7:2c:50:91:
         7c:d7:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:04:13 2025 by rpki-client