Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa
File:                     3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          fwrM+wkI6gBfeug532JMjZRV+o8wujE+jb51EjX2qr8=
Subject key identifier:   8E:45:E1:A1:B0:45:8D:3A:2D:EF:45:C1:36:5F:24:FF:60:DF:08:F8
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       1FC4739336C56E2EAB04FD87D34047C8004FB36A
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:12 +0000
ROA not before:           Mon 14 Jul 2025 13:20:12 +0000
ROA not after:            Mon 13 Jul 2026 13:25:12 +0000
asID:                     28103
IP address blocks:        179.189.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c4:73:93:36:c5:6e:2e:ab:04:fd:87:d3:40:47:c8:00:4f:b3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:12 2025 GMT
            Not After : Jul 13 13:25:12 2026 GMT
        Subject: CN=8E45E1A1B0458D3A2DEF45C1365F24FF60DF08F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:ed:53:84:2d:f2:1c:9c:53:bf:ff:4a:96:
                    59:59:e5:3f:9b:89:46:13:7a:4a:ff:65:46:0f:be:
                    2d:48:1c:92:f2:63:1f:1a:3f:b2:37:3b:e8:5f:af:
                    e6:a7:06:d6:9f:e7:54:7a:11:c6:f1:86:d9:e2:f3:
                    be:d1:8e:ea:e3:20:92:85:42:5d:e4:f6:e0:94:de:
                    d2:30:0a:79:17:81:54:8a:2b:dd:41:be:82:3b:59:
                    24:48:f9:42:96:33:4b:61:d6:89:db:a1:d1:7c:ff:
                    a4:56:b7:f9:b3:eb:59:d2:bf:42:8b:7a:58:81:5a:
                    e0:90:cd:1a:b3:96:6b:20:52:2c:2d:b6:4e:56:1d:
                    21:96:b0:08:16:70:20:8f:a2:94:74:c8:96:f7:52:
                    b1:b3:10:88:9b:35:c5:e1:c8:7e:f2:a9:c2:3f:76:
                    03:2d:25:bd:df:01:cb:8a:d2:a6:8f:0e:99:71:10:
                    eb:e6:12:f2:80:c4:a9:3e:4c:b4:00:30:fb:b6:52:
                    92:58:f1:85:be:22:57:e6:ac:1d:70:db:7a:28:07:
                    e9:36:2c:b4:0a:69:33:8d:f8:6f:51:16:dc:cf:a9:
                    47:5e:4a:65:f1:67:6a:88:40:c9:c4:9c:e9:d8:64:
                    1f:40:56:2a:47:05:09:0c:aa:e1:a6:80:9e:a1:a5:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:45:E1:A1:B0:45:8D:3A:2D:EF:45:C1:36:5F:24:FF:60:DF:08:F8
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231392e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:fa:70:97:eb:e3:f9:58:2b:0a:cf:c6:cc:aa:f9:43:15:
         2f:82:cb:5b:8c:72:71:a7:02:e5:65:84:47:86:51:37:92:38:
         6b:92:b3:ac:ab:6f:0e:a2:79:af:bb:42:d7:85:f7:c6:95:0b:
         0c:ad:f7:85:0c:3c:9f:ea:b3:c6:84:7a:d6:7c:bf:26:9a:2f:
         91:39:c5:f9:f5:be:f6:4b:5f:48:54:34:93:7b:a2:99:b6:b9:
         9e:ad:7b:dc:bf:70:37:d6:c1:82:6e:e7:76:bc:cb:41:b5:db:
         43:c4:27:72:63:55:c1:b9:9c:cc:a4:4a:0e:d5:80:54:fd:89:
         4e:c2:aa:f2:25:e1:23:f9:fd:da:7c:97:8b:ee:96:7b:86:d2:
         60:76:8c:c2:e2:90:87:4d:2c:83:d0:0f:e1:1b:17:18:be:1b:
         ab:99:e9:33:9c:86:03:04:9a:19:6f:a9:e8:5f:95:07:db:5f:
         88:16:29:72:9c:be:fc:42:b1:ff:d9:f7:2d:e0:8d:93:b3:d8:
         47:2b:d2:3d:00:0d:64:e1:23:59:ce:81:62:22:96:c5:dd:05:
         e5:03:c9:9c:48:1e:f8:3b:c4:55:62:89:f4:cb:50:92:2c:9f:
         1d:c9:07:81:0b:62:af:6f:f7:a6:e5:dc:d4:77:81:ab:09:a5:
         9b:0b:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:55:35 2025 by rpki-client