Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa
File:                     3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa (raw, json)
Hash identifier:          uc+FH6RYvmaKWiDrL5sC8HlD2gUQLsohAudgO3vw5HE=
Subject key identifier:   8B:19:73:6E:5D:70:36:0D:13:11:88:B0:F8:C6:34:CD:71:D5:43:4E
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       3F11183BCEB6D0BC9FB716812C1DED7B8E7F67C0
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:16 +0000
ROA not before:           Mon 14 Jul 2025 13:20:16 +0000
ROA not after:            Mon 13 Jul 2026 13:25:16 +0000
asID:                     28103
IP address blocks:        190.110.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:11:18:3b:ce:b6:d0:bc:9f:b7:16:81:2c:1d:ed:7b:8e:7f:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:16 2025 GMT
            Not After : Jul 13 13:25:16 2026 GMT
        Subject: CN=8B19736E5D70360D131188B0F8C634CD71D5434E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:d8:c1:dc:2a:de:56:ab:6f:7c:ac:db:78:
                    47:0d:b6:d1:d5:ff:52:d4:3d:41:c9:95:54:66:c4:
                    28:cf:ce:37:a2:74:50:43:97:e8:96:fd:eb:43:71:
                    cd:ee:8d:fb:a4:ce:e1:d0:b2:f8:fe:4c:99:db:a6:
                    ed:9d:a5:3f:7e:4e:d4:39:3e:3f:f4:93:3a:b4:7f:
                    88:38:41:93:de:47:79:ad:2f:cc:5c:cc:ed:12:e4:
                    24:83:79:5a:50:74:11:7f:b8:72:5d:87:e6:03:05:
                    0c:d8:18:0e:bb:30:4a:5c:74:50:80:92:69:5f:dd:
                    e1:9a:5f:3e:75:6c:42:15:d7:d8:7f:6c:09:bf:dd:
                    df:82:a3:5a:12:c1:b7:0f:32:10:13:7e:a4:72:da:
                    4b:98:c9:42:67:67:d9:af:69:41:e7:84:a1:8c:16:
                    4d:96:ea:32:e7:58:55:e8:83:80:e9:3b:49:90:78:
                    2f:95:f5:84:ef:dd:2f:24:15:c6:07:b5:a1:e7:65:
                    85:c7:11:5b:30:d4:c6:75:16:4c:95:99:20:53:f4:
                    4e:ab:38:c8:1e:ec:33:77:80:71:30:d2:4a:8e:aa:
                    e1:f0:d9:08:1b:6a:a0:07:a7:d2:ea:57:d5:83:0b:
                    e3:48:10:64:76:3d:dd:57:a9:b3:5a:26:ae:6f:ce:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:73:6E:5D:70:36:0D:13:11:88:B0:F8:C6:34:CD:71:D5:43:4E
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:19:7f:a6:10:85:14:17:78:4e:b8:fe:23:60:8d:24:d8:f1:
         88:6f:fb:69:2a:49:48:df:45:c5:36:34:9d:67:38:04:ba:40:
         58:fb:9a:54:3d:e1:a0:87:d1:16:66:3a:00:06:d4:1c:79:1d:
         f1:ca:3c:d0:c7:69:8c:ad:a0:58:11:de:c4:a8:aa:56:5f:17:
         31:0a:fc:27:24:cf:16:4a:df:76:fa:77:f7:cc:54:59:60:2a:
         29:43:f7:96:49:14:a5:04:90:d3:4a:82:3a:9d:b9:e9:dc:e9:
         5c:75:98:63:ac:86:bb:52:22:19:17:da:16:13:45:57:88:66:
         6e:4f:02:70:96:ba:be:39:8e:75:5e:80:1f:55:c3:5e:45:49:
         29:fb:fa:22:15:4d:3e:9e:ee:4a:18:2f:23:84:44:1c:b1:b9:
         d2:d6:62:8d:d0:1d:8f:54:08:72:b7:27:46:97:69:6a:ea:c7:
         d2:14:95:02:71:3e:ec:3e:95:41:cf:3d:23:7a:a9:cb:6a:ae:
         10:97:5f:5a:1a:a3:8e:56:cc:9c:c0:83:0e:2d:02:a4:e9:55:
         6d:50:84:15:5b:2c:3d:ac:49:bb:4f:38:d2:1c:4d:a3:e3:09:
         93:cd:13:bf:97:a1:90:f8:fa:98:fe:a5:d5:13:f0:8d:bb:3a:
         a9:98:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:54:30 2025 by rpki-client