Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa
File:                     3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          kjPMCPxqxf1s60ILvV01IvLpg4ZcE0+AoACfw6r+6rQ=
Subject key identifier:   D6:72:5D:41:F4:EF:72:C7:56:51:88:F6:88:43:62:84:B0:1D:1D:4C
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       7E4F5227B86E9B44FEC96A11E9819BA095288170
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:14 +0000
ROA not before:           Mon 14 Jul 2025 13:20:14 +0000
ROA not after:            Mon 13 Jul 2026 13:25:14 +0000
asID:                     28103
IP address blocks:        190.110.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4f:52:27:b8:6e:9b:44:fe:c9:6a:11:e9:81:9b:a0:95:28:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:14 2025 GMT
            Not After : Jul 13 13:25:14 2026 GMT
        Subject: CN=D6725D41F4EF72C7565188F688436284B01D1D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:de:2b:ab:62:9b:80:e7:43:97:28:ca:02:
                    ed:5a:d9:fb:78:31:15:b4:c9:fc:94:bd:c2:a2:22:
                    cd:f2:4e:b8:5d:b2:3d:ac:1e:78:d7:10:28:14:27:
                    96:8b:54:79:16:65:ea:91:9b:98:02:72:ec:34:70:
                    cc:21:a5:9a:77:16:a3:a5:51:ae:08:01:40:a7:34:
                    24:0c:92:f9:b4:b0:72:48:0b:7f:91:00:33:77:e4:
                    3a:3a:d8:56:08:7e:42:c5:26:c8:f7:6a:5d:2a:4a:
                    38:e4:d6:c6:2e:8d:56:3e:e3:a3:8f:fb:b3:0c:ca:
                    bd:43:03:0c:45:e3:93:54:4e:75:c6:af:50:76:df:
                    d2:60:5e:41:bc:e3:0e:2f:97:2e:81:52:2a:44:08:
                    9a:63:b8:8d:dc:6b:65:c5:de:30:12:97:d7:ce:74:
                    d4:19:db:74:e6:32:a2:d3:52:de:ec:7c:f6:73:8b:
                    14:93:38:39:1f:6e:25:d8:45:80:48:00:3b:37:cb:
                    62:02:8f:4f:c0:dd:5a:1f:f6:b6:35:4c:b1:cc:27:
                    ed:96:a2:ab:23:5f:71:c3:0f:2e:c2:9e:95:f1:c7:
                    82:60:a9:49:92:69:e3:eb:48:a1:5d:dc:f2:e5:f0:
                    5f:6a:e2:fc:a5:d0:a1:29:36:0d:0a:3f:7e:af:af:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:72:5D:41:F4:EF:72:C7:56:51:88:F6:88:43:62:84:B0:1D:1D:4C
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:26:f4:a5:76:1b:e9:c3:dd:51:be:d1:a1:78:f3:56:ff:
         4a:62:80:5a:ce:d0:4f:7b:77:6a:eb:78:26:2a:b8:d3:44:61:
         e1:91:da:95:93:87:75:31:55:bf:fe:86:80:0a:83:e3:30:c6:
         8b:d1:61:c1:e4:79:16:91:15:7e:53:64:40:04:f9:a0:b1:ba:
         c6:57:b7:28:91:3f:3b:31:46:4e:04:31:cc:a7:12:74:23:03:
         0d:29:1a:a6:f1:ff:4a:f4:cf:fa:94:d2:6c:a8:d9:04:c5:94:
         ba:4f:9c:ee:a0:70:b9:0f:8a:49:6f:4c:d9:7c:8c:5f:7e:fd:
         f0:0f:db:3f:42:d2:1c:12:ef:f2:3a:99:ff:e5:b6:bf:91:1f:
         32:ff:9d:ea:7a:68:42:ed:c3:9c:ea:b4:f1:90:33:db:45:91:
         79:48:7e:c7:49:57:ca:cd:43:30:29:9c:41:a9:55:84:26:4e:
         13:e3:8e:4a:ec:e0:57:ab:19:f3:75:53:01:b0:44:ae:02:62:
         05:8c:16:00:f9:3c:69:60:a8:72:4a:b3:a5:ef:0b:47:d7:8c:
         f8:a1:79:da:76:13:39:d1:20:36:1f:db:13:72:56:23:1e:79:
         28:b3:22:bb:6b:22:2e:e1:fd:c5:7a:df:7a:49:27:c2:6a:f0:
         32:6e:1c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:57:35 2025 by rpki-client