Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3231312e3234322e302f32342d3234203d3e203238313033.roa
File:                     3139302e3231312e3234322e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          nqoi6GugTg3ncXcPUjf9z1+RsQyGMF1X/BMGqxveHSY=
Subject key identifier:   9C:A1:FD:6E:0D:2E:DC:31:4E:61:E9:64:AB:9D:C3:29:B6:49:16:6E
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       2B73E168F820743FD6A4F3AD165C0F0B70F63C54
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3231312e3234322e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:12 +0000
ROA not before:           Mon 14 Jul 2025 13:20:12 +0000
ROA not after:            Mon 13 Jul 2026 13:25:12 +0000
asID:                     28103
IP address blocks:        190.211.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:73:e1:68:f8:20:74:3f:d6:a4:f3:ad:16:5c:0f:0b:70:f6:3c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:12 2025 GMT
            Not After : Jul 13 13:25:12 2026 GMT
        Subject: CN=9CA1FD6E0D2EDC314E61E964AB9DC329B649166E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:b9:46:5d:d2:9d:eb:19:57:32:fa:41:06:
                    0d:03:b9:7f:2d:01:7d:93:57:cc:cd:23:b4:62:cb:
                    e7:7a:94:5a:b8:b3:18:a8:d4:33:85:16:ad:dd:84:
                    6a:b3:71:72:58:2f:df:8f:4f:c5:5d:75:5b:96:f6:
                    8f:35:d3:13:69:99:cc:a5:3b:f6:ee:9d:2e:7c:46:
                    45:55:c8:78:6e:49:03:c7:17:3a:97:ad:65:b0:11:
                    f0:01:d8:4b:31:f2:84:89:44:00:82:10:d3:55:cc:
                    e0:94:4f:67:4f:9a:48:1d:89:81:c4:48:a6:7f:e0:
                    59:ef:1e:91:88:04:8a:05:c2:a3:d3:f9:72:ea:06:
                    8e:cf:ae:74:60:c1:f5:37:0a:8f:03:cc:cf:ab:32:
                    4f:c9:43:4e:3f:3b:af:ec:19:11:d6:a7:8b:ff:ee:
                    ed:a0:05:d3:38:14:b8:49:f5:0a:3d:d5:56:ba:39:
                    14:03:62:8c:e7:47:d3:00:41:f1:3d:2b:8c:d3:a9:
                    ce:d9:fe:a9:7a:f1:99:cf:5a:ea:d2:5a:96:d0:07:
                    e6:2e:b7:cf:b6:56:30:f1:f6:b9:fc:71:fd:cc:c7:
                    4b:06:91:d9:79:62:f1:4a:5a:94:8b:4c:8d:d3:8c:
                    b2:ac:fc:6a:f3:f4:43:7a:4f:1a:8b:8d:f5:83:46:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:FD:6E:0D:2E:DC:31:4E:61:E9:64:AB:9D:C3:29:B6:49:16:6E
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3231312e3234322e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:3e:14:69:e8:42:59:54:18:3c:09:54:39:44:fc:3c:ec:
         47:19:63:6e:94:3a:76:21:d9:7e:70:4e:81:97:ec:e8:f2:f6:
         05:d4:41:ba:17:92:f6:d8:cd:b4:a9:bc:93:3c:e1:16:7c:ea:
         85:f0:f2:b8:f0:76:9d:ef:f8:e8:ed:b0:51:b5:82:5d:85:a1:
         eb:f4:28:a7:d6:0f:4d:45:5e:00:6d:8f:36:f6:ae:31:95:8c:
         1e:53:27:e1:af:b0:d8:00:49:90:1a:fb:76:41:0d:42:1a:ae:
         6e:9c:44:29:6a:82:26:93:36:36:d9:20:ed:82:de:37:8a:4c:
         5f:e2:67:ed:97:e5:c0:dc:3e:11:fd:f8:0c:c0:71:32:fc:63:
         26:27:b8:36:30:20:90:02:db:c2:4e:f2:7c:ad:7e:54:c1:57:
         f8:96:b3:93:d0:68:de:52:87:ff:e9:6a:d7:83:c8:03:94:2d:
         f7:ce:db:1a:f7:8e:0d:3e:8b:9e:ef:e7:36:4b:7c:5f:71:b6:
         a4:54:4d:5f:d8:ca:87:cb:28:19:10:2d:6d:fc:94:3f:78:17:
         66:64:cc:1c:09:17:64:b7:11:ac:22:55:65:e2:d6:bb:6a:84:
         e0:cb:3c:bd:3f:ce:a6:39:e3:48:03:62:a1:67:df:fc:30:d5:
         46:b9:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:55:24 2025 by rpki-client