Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e35312e302f32342d3234203d3e203238313033.roa
File:                     3230312e3232322e35312e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          vXMhZdqOK4pIUY21gbbc8R0AqAKSDt8JLmYLLoIvGwA=
Subject key identifier:   50:0B:11:4D:0A:4F:DA:E0:9D:90:30:63:E5:54:00:3E:DB:F1:3A:6A
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       47B1D30CAFAB292B32C0FD08F3EAE15C1FEDCFF2
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e35312e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:08 +0000
ROA not before:           Mon 14 Jul 2025 13:20:08 +0000
ROA not after:            Mon 13 Jul 2026 13:25:08 +0000
asID:                     28103
IP address blocks:        201.222.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:d3:0c:af:ab:29:2b:32:c0:fd:08:f3:ea:e1:5c:1f:ed:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:08 2025 GMT
            Not After : Jul 13 13:25:08 2026 GMT
        Subject: CN=500B114D0A4FDAE09D903063E554003EDBF13A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:ed:2e:e1:2d:c2:56:25:15:bc:65:28:15:
                    04:3a:89:af:bf:18:2e:ad:bd:94:8f:80:ed:2a:29:
                    e8:48:87:4c:ed:1d:d0:42:fe:70:75:45:97:65:4f:
                    5e:ed:65:ed:d2:3c:f4:27:7c:d9:01:11:35:cf:0f:
                    f1:33:96:4e:9a:30:f3:92:90:4f:cd:f5:34:9c:77:
                    68:c8:34:38:bd:17:28:91:d1:e5:b1:25:b7:af:7c:
                    56:f5:b9:7d:0c:19:b5:cf:51:f5:2f:49:c5:70:4b:
                    2a:7c:fb:a2:1c:d5:8d:41:d1:7c:d2:90:8b:8c:7b:
                    2f:d1:e5:1d:3c:f3:6e:b4:82:29:89:cc:eb:fe:bf:
                    28:6a:d2:bf:bf:e6:23:2a:b8:ef:27:c5:2e:ff:89:
                    5e:ed:c4:09:22:2d:7e:45:d8:ca:c4:68:99:54:e6:
                    ef:06:56:9c:a4:6b:fd:25:8c:fe:e8:31:09:19:27:
                    83:9a:ae:f5:69:38:c0:8d:df:fc:95:cb:a1:28:26:
                    e3:cc:da:89:26:40:74:eb:5d:a2:f0:01:b3:73:9c:
                    c8:09:5b:9c:56:78:92:c5:68:df:1d:b3:26:7b:ee:
                    31:b5:1a:d8:c3:49:97:8e:ea:b0:8a:59:bb:85:8a:
                    0e:b2:c9:ce:fc:9c:66:48:8d:02:55:0e:c6:97:57:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0B:11:4D:0A:4F:DA:E0:9D:90:30:63:E5:54:00:3E:DB:F1:3A:6A
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e35312e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:fe:d2:82:8c:9b:89:74:d0:20:80:30:09:c6:2f:f6:c4:
         24:c6:b2:d1:6d:4b:a7:7a:6e:25:3b:02:b1:b7:51:25:43:90:
         75:b4:e9:11:78:eb:80:bd:94:9c:26:08:f9:a9:da:9f:18:60:
         ff:6a:65:52:0a:75:3d:3f:c3:d4:1b:d1:ac:b9:c0:87:3a:a4:
         8e:c7:41:c6:ab:4e:66:b2:4b:c7:b5:de:d6:69:06:74:4f:f5:
         75:d3:a0:4b:e9:95:0e:fb:d4:ee:c2:2b:65:35:e5:5b:9c:a8:
         ba:c4:3d:74:9f:cc:6a:08:26:c1:35:5d:50:70:51:f0:bf:32:
         66:78:2e:29:ef:d0:87:6d:4f:48:b1:5a:95:63:66:5b:32:0a:
         4c:5b:20:b5:a0:7c:13:61:8c:cc:42:33:0c:81:a2:58:a7:a2:
         64:90:a7:b5:46:e3:bc:58:06:bf:42:76:de:aa:53:6b:f7:0f:
         f5:ab:24:d1:12:f5:62:80:15:83:2f:3d:d0:ff:8e:21:cb:dd:
         a4:c3:6f:35:7c:f7:7e:ee:7a:97:09:24:af:12:b4:7e:7b:ac:
         bc:e0:aa:34:da:53:da:9b:cf:06:73:fe:f6:2f:74:df:db:85:
         f9:a0:51:06:a0:04:6b:3f:dc:71:78:ca:f3:59:8d:44:1f:e7:
         04:37:bb:e7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUR7HTDK+rKSsywP0I8+rhXB/tz/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNTA3MTQxMzIwMDhaFw0yNjA3MTMxMzI1MDhaMDMxMTAvBgNV
BAMTKDUwMEIxMTREMEE0RkRBRTA5RDkwMzA2M0U1NTQwMDNFREJGMTNBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTeu0u4S3CViUVvGUoFQQ6ia+/
GC6tvZSPgO0qKehIh0ztHdBC/nB1RZdlT17tZe3SPPQnfNkBETXPD/Ezlk6aMPOS
kE/N9TScd2jINDi9FyiR0eWxJbevfFb1uX0MGbXPUfUvScVwSyp8+6Ic1Y1B0XzS
kIuMey/R5R088260gimJzOv+vyhq0r+/5iMquO8nxS7/iV7txAkiLX5F2MrEaJlU
5u8GVpyka/0ljP7oMQkZJ4OarvVpOMCN3/yVy6EoJuPM2okmQHTrXaLwAbNznMgJ
W5xWeJLFaN8dsyZ77jG1GtjDSZeO6rCKWbuFig6yyc78nGZIjQJVDsaXV5hpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUAsRTQpP2uCdkDBj5VQAPtvxOmowHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMyMzAzMTJlMzIzMjMyMmUzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMneMzAN
BgkqhkiG9w0BAQsFAAOCAQEAqFj+0oKMm4l00CCAMAnGL/bEJMay0W1Lp3puJTsC
sbdRJUOQdbTpEXjrgL2UnCYI+ananxhg/2plUgp1PT/D1BvRrLnAhzqkjsdBxqtO
ZrJLx7Xe1mkGdE/1ddOgS+mVDvvU7sIrZTXlW5yousQ9dJ/MaggmwTVdUHBR8L8y
ZnguKe/Qh21PSLFalWNmWzIKTFsgtaB8E2GMzEIzDIGiWKeiZJCntUbjvFgGv0J2
3qpTa/cP9ask0RL1YoAVgy890P+OIcvdpMNvNXz3fu56lwkkrxK0fnusvOCqNNpT
2pvPBnP+9i9039uF+aBRBqAEaz/ccXjK81mNRB/nBDe75w==
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:16:26 2025 by rpki-client