Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa
File:                     3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa (raw, json)
Hash identifier:          6NGjgX08VIPuV5pHh9aRLAzun84pp4y6OMZzSIAz6Qs=
Subject key identifier:   EC:5E:54:37:DC:F0:65:2C:B9:3E:43:7E:83:8F:62:3C:CF:55:46:F8
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       6FD40D0CD139E5E5D110017155A1479703A3C07A
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:16 +0000
ROA not before:           Mon 14 Jul 2025 13:20:16 +0000
ROA not after:            Mon 13 Jul 2026 13:25:16 +0000
asID:                     28103
IP address blocks:        179.189.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d4:0d:0c:d1:39:e5:e5:d1:10:01:71:55:a1:47:97:03:a3:c0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:16 2025 GMT
            Not After : Jul 13 13:25:16 2026 GMT
        Subject: CN=EC5E5437DCF0652CB93E437E838F623CCF5546F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:b9:47:50:a1:61:b9:25:18:e9:55:2d:e6:
                    db:05:ba:b8:2b:e7:51:b3:f4:6b:c7:3d:4e:86:bc:
                    07:81:ca:47:e9:21:31:fb:8a:d3:5f:64:e8:62:0e:
                    ee:4c:7d:db:ca:5e:64:fd:c7:8f:09:ac:3d:09:ec:
                    8f:d6:ba:e4:84:8f:09:53:17:20:0b:6f:ac:d1:b5:
                    db:75:5a:45:d9:38:87:8f:95:c8:98:c5:22:ab:cf:
                    57:86:3b:19:bc:99:f5:22:1b:b6:64:9c:3c:75:41:
                    e3:b2:24:9c:96:49:87:67:91:95:60:2b:fb:d2:ef:
                    26:ed:c2:e5:f8:f1:2b:4c:69:6c:e0:4a:07:ef:3b:
                    ee:ff:2c:81:f2:5e:11:04:7c:ef:81:c1:1f:68:5f:
                    5d:70:2b:47:1b:de:ef:ca:46:21:d6:74:7e:f6:58:
                    ee:cf:da:b7:d9:88:8e:99:f4:1d:19:2f:f7:a1:9a:
                    d4:7b:b9:9b:03:4a:b5:8f:8b:dc:42:d2:77:d1:e7:
                    0a:75:1d:2c:b6:7c:67:77:96:15:bf:24:15:7e:c9:
                    ac:f4:da:ef:ec:73:f2:2a:b0:fd:77:3a:2a:5c:bd:
                    6a:52:c3:15:2d:2e:cd:c9:da:36:e8:2f:af:04:01:
                    a2:be:53:7d:82:76:64:c2:a8:13:fc:4d:2f:95:66:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:54:37:DC:F0:65:2C:B9:3E:43:7E:83:8F:62:3C:CF:55:46:F8
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:ae:ca:6f:ec:7f:53:c3:32:6d:c9:ca:e3:68:54:bf:ca:25:
         fc:9c:c7:15:a0:9e:17:09:13:a0:63:ac:0a:16:31:c1:5a:38:
         9f:dc:ef:f8:83:d6:82:da:d7:e7:38:83:4e:17:b0:88:cb:3f:
         71:2f:42:8e:25:c0:bb:ab:ed:d3:75:3d:1e:3f:ee:f3:e9:f0:
         32:6b:3c:e6:c5:30:4e:26:a3:df:91:ce:1d:a1:6a:d6:d1:1b:
         cf:26:58:20:6d:c6:70:af:f7:67:e8:4f:e6:d5:38:e6:d4:be:
         ad:83:aa:ee:f7:e1:57:9f:05:38:4d:20:38:d3:e8:9b:a5:72:
         44:86:0b:94:c9:92:68:d6:38:73:6f:b3:90:4c:e1:0d:bc:7f:
         5f:ec:e6:cd:a5:33:ca:90:fb:53:42:08:e5:af:ec:19:99:7d:
         21:7d:1f:92:05:1a:f3:92:3f:b0:ea:b7:c5:ee:31:bf:96:88:
         32:47:e9:71:05:e0:d7:e9:d1:64:c2:e1:25:7c:63:ce:33:ad:
         8f:03:b7:c3:a6:33:8e:82:6b:0c:b5:29:73:a3:43:07:8e:7a:
         06:42:3a:86:eb:f6:90:bc:74:e9:1b:08:5d:32:44:ec:01:de:
         6d:d1:80:dc:fe:71:06:de:ac:9e:9a:2f:fc:96:08:b0:18:18:
         a7:1a:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:54:40 2025 by rpki-client