Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36322e302f32342d3234203d3e203238313033.roa
File:                     3133382e3138362e36322e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          yTQPTo86L9aJcoGBq/ZrrXf73k66PV5yeXArnMOQ9U0=
Subject key identifier:   1E:80:AF:66:02:A7:95:BB:73:AC:13:D7:16:5B:A1:E2:F9:62:20:6F
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       09F3F1D0014B4373554252D2F4FF3577719F2D95
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36322e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:11 +0000
ROA not before:           Mon 14 Jul 2025 13:20:11 +0000
ROA not after:            Mon 13 Jul 2026 13:25:11 +0000
asID:                     28103
IP address blocks:        138.186.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f3:f1:d0:01:4b:43:73:55:42:52:d2:f4:ff:35:77:71:9f:2d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:11 2025 GMT
            Not After : Jul 13 13:25:11 2026 GMT
        Subject: CN=1E80AF6602A795BB73AC13D7165BA1E2F962206F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:b2:48:27:0e:f6:47:07:11:51:c9:2a:16:
                    eb:ed:43:63:2f:f3:77:73:19:62:1d:01:2b:d8:14:
                    63:d3:39:bb:ca:b9:c3:a0:42:46:52:e8:84:9c:a6:
                    20:16:71:69:7f:0b:d7:4d:81:f9:59:c7:e8:6f:dd:
                    5f:c8:17:bd:88:cb:5b:a9:c9:20:71:45:10:c6:e6:
                    76:40:3a:ac:3b:88:4e:5c:50:1a:c4:91:99:0d:b9:
                    ad:11:c9:2e:17:28:b5:2b:c2:1d:08:6b:93:83:23:
                    b3:f0:29:e1:d3:99:ba:2c:46:02:b7:53:44:3b:33:
                    20:e3:65:eb:38:99:66:dd:ff:2a:42:a5:bd:df:98:
                    d2:80:8d:41:ac:d2:40:23:aa:17:df:14:fa:0f:55:
                    9b:24:95:10:ae:95:8a:35:66:c0:39:3b:3a:37:7f:
                    75:3a:f2:4a:c7:2a:0f:0c:0a:22:2f:de:b9:1a:b9:
                    cb:6f:47:18:a3:32:0f:a3:d7:5f:49:33:d3:86:27:
                    20:c8:dc:1a:54:3b:27:00:5e:28:a8:12:b9:fd:27:
                    c2:3b:e5:4c:64:98:5e:0d:5b:b4:fc:65:d9:3a:71:
                    73:f5:8f:76:b0:8a:8a:21:19:f9:21:5a:57:61:19:
                    82:c0:66:59:1a:21:fe:32:4e:e2:4d:d7:de:24:88:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:AF:66:02:A7:95:BB:73:AC:13:D7:16:5B:A1:E2:F9:62:20:6F
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36322e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:59:6a:36:8e:34:fe:22:a1:34:a2:0e:90:31:64:92:8d:b7:
         fc:b7:2d:f8:8d:14:9b:26:4d:2c:21:d7:52:28:60:a1:5b:63:
         a5:01:05:7c:ab:7d:23:5a:02:7d:d5:87:5b:85:de:f8:ae:bc:
         05:be:52:91:48:4d:1a:92:d7:35:6f:ff:45:0a:aa:87:12:d6:
         0e:1c:11:6c:b0:b9:5f:16:ca:c8:3a:2a:e4:d9:23:b7:4f:e2:
         08:8b:d2:c7:e3:2f:f6:50:a4:a0:a9:0c:24:9c:78:85:66:0f:
         c2:79:0d:ca:c4:20:49:50:e1:68:e7:dd:55:75:00:13:c6:03:
         1a:7f:71:00:8c:09:8a:64:37:8e:19:9a:1c:3c:f8:7d:81:b7:
         29:58:d6:e5:ce:c9:4e:7e:e9:f1:08:e6:35:26:5e:7a:17:de:
         44:dc:06:b7:ee:c1:f0:05:15:b9:14:d5:c6:b1:23:47:07:93:
         a9:94:de:38:f0:ee:b9:06:7d:25:ea:f3:8a:8f:10:7e:38:6d:
         01:a1:4f:eb:87:2a:c9:55:05:c9:b0:c6:bb:fc:83:53:e4:1c:
         de:7f:19:78:e4:a8:22:18:da:de:14:98:06:54:65:ab:4d:5f:
         d4:32:e9:6d:50:1a:1a:e1:4f:c9:b3:0a:25:e1:31:ef:7b:33:
         29:e9:0c:38
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCfPx0AFLQ3NVQlLS9P81d3GfLZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNTA3MTQxMzIwMTFaFw0yNjA3MTMxMzI1MTFaMDMxMTAvBgNV
BAMTKDFFODBBRjY2MDJBNzk1QkI3M0FDMTNENzE2NUJBMUUyRjk2MjIwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjbJIJw72RwcRUckqFuvtQ2Mv
83dzGWIdASvYFGPTObvKucOgQkZS6IScpiAWcWl/C9dNgflZx+hv3V/IF72Iy1up
ySBxRRDG5nZAOqw7iE5cUBrEkZkNua0RyS4XKLUrwh0Ia5ODI7PwKeHTmbosRgK3
U0Q7MyDjZes4mWbd/ypCpb3fmNKAjUGs0kAjqhffFPoPVZsklRCulYo1ZsA5Ozo3
f3U68krHKg8MCiIv3rkauctvRxijMg+j119JM9OGJyDI3BpUOycAXiioErn9J8I7
5UxkmF4NW7T8Zdk6cXP1j3awioohGfkhWldhGYLAZlkaIf4yTuJN194kiAgTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHoCvZgKnlbtzrBPXFluh4vliIG8wHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMxMzMzODJlMzEzODM2MmUzNjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq6PjAN
BgkqhkiG9w0BAQsFAAOCAQEAullqNo40/iKhNKIOkDFkko23/Lct+I0UmyZNLCHX
UihgoVtjpQEFfKt9I1oCfdWHW4Xe+K68Bb5SkUhNGpLXNW//RQqqhxLWDhwRbLC5
XxbKyDoq5Nkjt0/iCIvSx+Mv9lCkoKkMJJx4hWYPwnkNysQgSVDhaOfdVXUAE8YD
Gn9xAIwJimQ3jhmaHDz4fYG3KVjW5c7JTn7p8QjmNSZeehfeRNwGt+7B8AUVuRTV
xrEjRweTqZTeOPDuuQZ9Jerzio8QfjhtAaFP64cqyVUFybDGu/yDU+Qc3n8ZeOSo
Ihja3hSYBlRlq01f1DLpbVAaGuFPybMKJeEx73szKekMOA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:55:04 2025 by rpki-client