Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32342d3234203d3e203238313033.roa
File:                     3137392e3138392e3231382e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          8N3n8ah+k9FBwHSMNo6qqnDOwGNtvqi3PjUiyZM8It8=
Subject key identifier:   F2:85:10:B8:9D:52:B1:E4:28:73:FC:A5:4C:00:23:82:17:43:85:19
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       081A801E79C134116570D610A6F095E5270A3CE7
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:17 +0000
ROA not before:           Mon 14 Jul 2025 13:20:17 +0000
ROA not after:            Mon 13 Jul 2026 13:25:17 +0000
asID:                     28103
IP address blocks:        179.189.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:80:1e:79:c1:34:11:65:70:d6:10:a6:f0:95:e5:27:0a:3c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:17 2025 GMT
            Not After : Jul 13 13:25:17 2026 GMT
        Subject: CN=F28510B89D52B1E42873FCA54C00238217438519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:bf:15:3f:b7:87:a7:ef:81:7b:98:a4:23:
                    3a:ee:05:48:d7:0a:da:ab:80:ef:d9:31:a9:cc:7b:
                    a8:b2:c7:cb:72:c0:61:2c:c8:7b:da:1d:dd:66:31:
                    28:9d:ab:2f:f6:61:cf:0c:6a:d4:46:c4:14:c5:25:
                    80:73:77:0d:83:17:c4:af:85:54:93:4c:a3:7f:6f:
                    f9:f0:17:4a:95:a0:75:d9:6b:50:48:96:9f:9f:43:
                    fc:79:1b:f9:05:d7:fc:3f:a1:a4:2e:69:40:08:cc:
                    0b:7e:ec:9d:6f:93:e3:23:c7:23:7e:2a:cb:bc:44:
                    9e:cb:45:65:0f:35:2e:dc:fd:d4:15:b0:4d:69:59:
                    4f:c5:00:25:05:c5:9c:fc:5f:f0:a4:32:55:9a:e0:
                    5f:cf:45:ab:07:ad:fe:68:f3:c8:b2:59:ff:de:e1:
                    fb:5c:80:bc:8f:c6:82:b5:bb:bf:d8:04:ca:cc:cf:
                    4f:5a:35:1e:52:45:c8:fc:50:cc:9d:0b:43:18:4d:
                    67:40:ad:1d:e3:57:b9:fa:cd:8c:65:28:6f:cc:8b:
                    ae:fa:59:d2:5d:ef:5f:c4:7f:7a:b0:41:99:bd:e9:
                    30:94:88:7f:e0:5c:ef:7a:6e:01:ed:95:42:e6:6e:
                    c7:58:02:b3:f6:97:15:96:51:eb:3a:98:9e:0c:c9:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:85:10:B8:9D:52:B1:E4:28:73:FC:A5:4C:00:23:82:17:43:85:19
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:70:78:23:04:0d:9a:1d:68:48:f4:47:10:c7:2a:1a:18:ec:
         55:2e:80:0b:6d:a3:76:ed:58:c0:f6:a7:43:b9:75:c1:aa:e6:
         82:93:6a:1d:5a:c9:d2:3e:05:20:fc:75:be:83:4f:f7:6f:b5:
         fd:34:6a:1c:f2:48:c7:e4:ad:a8:cd:6d:63:65:5b:54:5b:7e:
         44:22:d9:e9:da:4d:a7:bd:3a:78:f5:a6:f2:b5:cf:67:f0:e0:
         12:3a:1f:40:64:c8:47:a5:3b:18:3d:54:11:0a:06:b9:1e:1d:
         a4:e5:8e:05:1f:58:6a:19:be:49:a8:73:ba:f6:eb:2c:07:6a:
         cf:d8:eb:77:d9:63:e2:b3:4a:89:08:f4:80:f4:16:9b:e7:2f:
         28:ab:39:cb:3e:78:93:3c:6b:72:84:b3:24:09:1e:7e:60:b0:
         ed:8f:56:cf:9d:32:c0:64:fa:e6:b6:78:14:4b:50:94:43:06:
         3e:54:ed:97:52:53:0c:2f:f9:b7:8e:ac:a0:fa:cd:ac:be:c3:
         eb:51:dd:d1:76:69:6b:e4:5f:4c:14:3c:db:18:8f:fc:ca:05:
         6e:50:e5:6d:4a:44:55:55:eb:d8:a4:f9:c9:6f:5b:ac:bf:98:
         06:7a:80:79:a3:2b:44:81:ac:d2:56:64:4f:fc:ae:25:be:98:
         da:64:b5:0c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCBqAHnnBNBFlcNYQpvCV5ScKPOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNTA3MTQxMzIwMTdaFw0yNjA3MTMxMzI1MTdaMDMxMTAvBgNV
BAMTKEYyODUxMEI4OUQ1MkIxRTQyODczRkNBNTRDMDAyMzgyMTc0Mzg1MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZRb8VP7eHp++Be5ikIzruBUjX
CtqrgO/ZManMe6iyx8tywGEsyHvaHd1mMSidqy/2Yc8MatRGxBTFJYBzdw2DF8Sv
hVSTTKN/b/nwF0qVoHXZa1BIlp+fQ/x5G/kF1/w/oaQuaUAIzAt+7J1vk+MjxyN+
Ksu8RJ7LRWUPNS7c/dQVsE1pWU/FACUFxZz8X/CkMlWa4F/PRasHrf5o88iyWf/e
4ftcgLyPxoK1u7/YBMrMz09aNR5SRcj8UMydC0MYTWdArR3jV7n6zYxlKG/Mi676
WdJd71/Ef3qwQZm96TCUiH/gXO96bgHtlULmbsdYArP2lxWWUes6mJ4MyRC/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8oUQuJ1SseQoc/ylTAAjghdDhRkwHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMxMzczOTJlMzEzODM5MmUzMjMxMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAs73a
MA0GCSqGSIb3DQEBCwUAA4IBAQAZcHgjBA2aHWhI9EcQxyoaGOxVLoALbaN27VjA
9qdDuXXBquaCk2odWsnSPgUg/HW+g0/3b7X9NGoc8kjH5K2ozW1jZVtUW35EItnp
2k2nvTp49abytc9n8OASOh9AZMhHpTsYPVQRCga5Hh2k5Y4FH1hqGb5JqHO69uss
B2rP2Ot32WPis0qJCPSA9Bab5y8oqznLPniTPGtyhLMkCR5+YLDtj1bPnTLAZPrm
tngUS1CUQwY+VO2XUlMML/m3jqyg+s2svsPrUd3Rdmlr5F9MFDzbGI/8ygVuUOVt
SkRVVevYpPnJb1usv5gGeoB5oytEgazSVmRP/K4lvpjaZLUM
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:40:03 2025 by rpki-client