Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32332d3234203d3e203238313033.roa
File:                     3139302e3131302e3233302e302f32332d3234203d3e203238313033.roa (raw, json)
Hash identifier:          iNmukkwvWk1CKcXpkEG2mL7lpfsmuWID0OQlwQ2NHJA=
Subject key identifier:   F5:E0:35:B4:8B:15:67:BE:9F:94:CF:E4:C2:0B:1B:AB:B4:D6:10:24
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       35A51E2739D44EF2C0CDDD013D8E90DD7676851E
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32332d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:13 +0000
ROA not before:           Mon 14 Jul 2025 13:20:13 +0000
ROA not after:            Mon 13 Jul 2026 13:25:13 +0000
asID:                     28103
IP address blocks:        190.110.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a5:1e:27:39:d4:4e:f2:c0:cd:dd:01:3d:8e:90:dd:76:76:85:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:13 2025 GMT
            Not After : Jul 13 13:25:13 2026 GMT
        Subject: CN=F5E035B48B1567BE9F94CFE4C20B1BABB4D61024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:9f:9c:a0:5b:89:65:8d:fa:17:f2:2a:5a:
                    22:ed:1d:9a:a1:dc:d1:47:58:f2:81:5e:12:cd:20:
                    b3:02:8e:e1:36:9c:03:1e:2a:46:cb:2c:15:fe:87:
                    64:06:36:01:11:81:3e:a4:76:2f:19:19:0a:fc:79:
                    ef:29:1f:08:c4:99:dd:ae:cf:ac:44:2d:b1:ce:96:
                    bc:f4:59:70:3f:9d:cd:bc:d4:90:b9:63:5b:fd:9c:
                    07:67:93:37:9f:8e:82:60:d3:e9:94:4a:ae:d0:1d:
                    3b:54:bb:0b:ba:9a:dd:0b:75:bf:5c:f6:86:30:28:
                    42:4f:64:a3:fe:43:b7:5a:ab:85:41:c9:a5:6b:94:
                    d6:3c:2a:0d:1f:27:e4:c6:0a:fa:24:8c:e4:55:98:
                    8d:e1:01:64:b7:bb:bf:3e:3d:1a:05:bc:07:6c:95:
                    d7:60:73:f8:86:81:e0:8e:52:58:01:71:09:d7:bb:
                    80:bf:b1:96:1f:1c:9e:ee:30:d0:1e:d9:df:0e:cb:
                    b8:4b:b7:eb:f9:98:ac:b5:a6:e9:a4:53:a3:68:66:
                    3d:e0:4f:eb:21:5c:87:1b:89:c0:8f:52:9a:6c:72:
                    c4:4f:d4:93:7a:3e:5b:3f:56:7b:94:26:e8:1a:9c:
                    1e:4b:75:03:e8:b7:38:cf:c7:95:3a:27:38:ac:50:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:35:B4:8B:15:67:BE:9F:94:CF:E4:C2:0B:1B:AB:B4:D6:10:24
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32332d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:50:7c:1d:3a:3e:5b:c4:e5:d6:73:1f:73:18:3c:47:1d:
         05:8c:31:b8:34:bd:0c:7c:72:f6:0b:98:b9:b0:4d:fd:81:15:
         0b:7f:c8:b5:b3:4b:e2:c6:be:97:fb:f8:58:92:4c:20:1f:78:
         fd:70:71:b4:d9:99:b3:34:6e:5d:bd:fd:d6:35:4e:42:c9:19:
         f2:db:0f:a7:73:d7:ec:64:cf:69:0f:62:1d:f4:85:6c:ce:20:
         43:5a:e6:ba:4a:c1:5e:98:75:a2:8f:7f:6d:a9:11:81:65:64:
         e2:4a:88:12:bf:cf:ef:0b:61:5e:9b:be:b4:d1:5f:06:3d:4b:
         6c:06:b9:00:17:39:a8:27:17:6c:b3:11:8b:ad:b5:b2:88:d1:
         7b:ae:f2:c4:b0:d1:d6:4f:0b:35:68:3d:f1:22:55:82:fa:fc:
         25:ec:8b:05:ac:d4:cb:c6:89:dd:da:b2:53:4a:3b:97:84:73:
         d0:1c:4f:a9:36:98:c5:c4:2e:30:07:b6:cd:e7:80:37:57:e7:
         ef:34:01:9d:0f:ff:50:93:98:f3:36:f8:66:c5:65:a4:00:73:
         68:ce:10:ef:fe:69:0b:cb:13:44:65:ce:10:1a:ad:cb:20:c8:
         d2:3e:a6:fb:8f:a4:a3:52:6a:71:97:7a:e4:b6:10:6b:81:03:
         ff:ca:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:56:35 2025 by rpki-client