Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36332e302f32342d3234203d3e203238313033.roa
File:                     3133382e3138362e36332e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          6yUCvN4AwAqKoV5ZYHcaRFY05EjZhutVxsI6nRdEs7E=
Subject key identifier:   11:39:48:D5:0A:2B:50:0F:D4:20:1A:03:30:C5:4D:D6:A1:37:0A:62
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       75DF20E646B5870CC390E90A8AAF4390A362ECF3
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36332e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:15 +0000
ROA not before:           Mon 14 Jul 2025 13:20:15 +0000
ROA not after:            Mon 13 Jul 2026 13:25:15 +0000
asID:                     28103
IP address blocks:        138.186.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:df:20:e6:46:b5:87:0c:c3:90:e9:0a:8a:af:43:90:a3:62:ec:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:15 2025 GMT
            Not After : Jul 13 13:25:15 2026 GMT
        Subject: CN=113948D50A2B500FD4201A0330C54DD6A1370A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:7c:61:11:40:cc:b6:1e:29:f2:01:f8:e2:
                    c4:4a:94:f8:83:cb:4c:a2:16:ff:3c:4e:6b:37:2a:
                    fc:cd:55:4f:4c:56:f8:10:0c:98:61:cf:e1:ea:8f:
                    d3:80:55:8d:ff:33:c3:35:e1:81:03:01:cf:3c:0c:
                    40:9f:ab:2b:4e:34:dc:4d:03:67:0f:ba:04:98:0d:
                    cb:82:1f:92:a2:90:ff:a5:f5:30:c9:d4:8e:98:3a:
                    b4:44:cd:3e:4a:0b:f4:c8:46:0c:9a:10:f6:21:29:
                    a6:c6:bc:21:70:51:ad:24:00:d8:fd:cf:a4:0f:89:
                    eb:40:3f:6e:5d:bf:21:d6:6c:c1:59:18:00:f4:6a:
                    92:5c:cb:68:48:55:aa:fb:84:d2:b3:30:63:33:c0:
                    a4:f0:79:20:00:32:de:5f:e1:d6:86:4b:fa:62:49:
                    b3:39:e4:46:a9:6d:d0:05:8e:40:67:b4:97:5e:b3:
                    b3:37:35:c7:15:86:8d:5d:3e:aa:bf:16:16:21:22:
                    e6:bf:8c:94:40:8c:d0:b5:4e:20:3f:22:28:d4:5f:
                    06:6d:38:8e:c2:d3:b2:5f:56:34:c2:2b:4c:69:1e:
                    c4:b5:4d:dd:d5:42:28:c5:4e:d9:c6:4b:50:67:ca:
                    43:21:ff:bf:0b:bb:ae:b1:3d:0a:ee:ed:68:ab:2e:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:48:D5:0A:2B:50:0F:D4:20:1A:03:30:C5:4D:D6:A1:37:0A:62
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36332e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:b8:ba:db:89:5b:83:0c:c0:e7:f9:c9:5f:d6:bf:df:82:
         1d:37:95:8d:ca:8b:58:5b:a9:45:18:58:f7:81:55:b9:ea:83:
         ef:d8:f7:8f:04:8c:fe:89:a4:71:92:94:c0:e6:18:75:30:e8:
         0e:09:6b:54:ee:aa:ea:75:72:65:93:c2:56:01:b8:5a:d0:1a:
         0c:da:7a:8b:db:dc:eb:f1:ff:f0:61:15:fc:ea:58:2e:c0:5b:
         56:72:e8:01:aa:f0:2a:ce:08:78:f6:04:bc:70:a7:49:c3:6a:
         09:95:86:fe:9f:6f:0e:23:68:eb:4b:6c:2c:f6:ad:f8:13:51:
         1b:c4:ed:4e:31:3a:15:d8:e6:3b:9b:ca:2f:27:2f:a9:c8:58:
         8f:4d:3e:37:5c:c5:b1:cc:90:da:d3:96:76:aa:b9:bb:9e:60:
         0b:9a:76:f6:6e:86:c0:0f:88:b4:ca:93:59:96:8e:fa:de:78:
         97:23:4a:1b:ed:28:ae:27:6a:97:f8:2b:38:7c:33:00:0f:d1:
         4a:3f:e8:c4:fb:53:89:3f:b4:bd:39:06:f9:51:b7:31:e3:92:
         c2:f3:33:46:79:9d:08:e8:e9:6c:02:19:bd:a4:84:c1:e8:b4:
         c9:f9:99:3c:5b:ca:c0:25:69:f4:56:5d:61:a2:be:b6:eb:e6:
         37:74:56:fd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdd8g5ka1hwzDkOkKiq9DkKNi7PMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNTA3MTQxMzIwMTVaFw0yNjA3MTMxMzI1MTVaMDMxMTAvBgNV
BAMTKDExMzk0OEQ1MEEyQjUwMEZENDIwMUEwMzMwQzU0REQ2QTEzNzBBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLp3xhEUDMth4p8gH44sRKlPiD
y0yiFv88Tms3KvzNVU9MVvgQDJhhz+Hqj9OAVY3/M8M14YEDAc88DECfqytONNxN
A2cPugSYDcuCH5KikP+l9TDJ1I6YOrREzT5KC/TIRgyaEPYhKabGvCFwUa0kANj9
z6QPietAP25dvyHWbMFZGAD0apJcy2hIVar7hNKzMGMzwKTweSAAMt5f4daGS/pi
SbM55EapbdAFjkBntJdes7M3NccVho1dPqq/FhYhIua/jJRAjNC1TiA/IijUXwZt
OI7C07JfVjTCK0xpHsS1Td3VQijFTtnGS1BnykMh/78Lu66xPQru7WirLmaDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUETlI1QorUA/UIBoDMMVN1qE3CmIwHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMxMzMzODJlMzEzODM2MmUzNjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq6PzAN
BgkqhkiG9w0BAQsFAAOCAQEACQy4utuJW4MMwOf5yV/Wv9+CHTeVjcqLWFupRRhY
94FVueqD79j3jwSM/omkcZKUwOYYdTDoDglrVO6q6nVyZZPCVgG4WtAaDNp6i9vc
6/H/8GEV/OpYLsBbVnLoAarwKs4IePYEvHCnScNqCZWG/p9vDiNo60tsLPat+BNR
G8TtTjE6FdjmO5vKLycvqchYj00+N1zFscyQ2tOWdqq5u55gC5p29m6GwA+ItMqT
WZaO+t54lyNKG+0oridql/grOHwzAA/RSj/oxPtTiT+0vTkG+VG3MeOSwvMzRnmd
COjpbAIZvaSEwei0yfmZPFvKwCVp9FZdYaK+tuvmN3RW/Q==
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:04:17 2025 by rpki-client