Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e35322e302f32342d3234203d3e203238313033.roa
File:                     3230312e3232322e35322e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          Tt4LbQywQbjgPtizjes6bn3sKQakfd6d3D4B4MgJuAY=
Subject key identifier:   9B:BA:99:9B:94:3C:A8:6C:E6:E4:82:7F:93:2E:71:3E:98:E2:D0:0B
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       778E4DE1638AF217B446D8D1DF344D549409A351
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e35322e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 14 Jul 2025 13:25:16 +0000
ROA not before:           Mon 14 Jul 2025 13:20:16 +0000
ROA not after:            Mon 13 Jul 2026 13:25:16 +0000
asID:                     28103
IP address blocks:        201.222.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8e:4d:e1:63:8a:f2:17:b4:46:d8:d1:df:34:4d:54:94:09:a3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jul 14 13:20:16 2025 GMT
            Not After : Jul 13 13:25:16 2026 GMT
        Subject: CN=9BBA999B943CA86CE6E4827F932E713E98E2D00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:bb:0e:f6:46:eb:8e:20:9c:7f:55:24:68:
                    6c:55:87:b7:4a:88:63:1f:96:df:29:d5:31:20:89:
                    e1:3d:1a:4e:08:98:4e:c8:8d:13:4e:85:71:5c:02:
                    3f:51:27:60:49:ca:8a:97:46:51:32:6a:89:66:8a:
                    aa:3b:20:a3:0c:64:ff:40:e4:1a:3f:37:01:ec:e5:
                    ee:0f:5d:72:34:7f:44:46:a4:39:d0:3c:9e:5f:d2:
                    e6:6c:9a:d9:25:39:4b:1f:b2:11:0b:85:14:04:2b:
                    ca:0d:dd:d2:8f:d5:75:71:18:72:5e:1c:84:06:b8:
                    4e:ac:96:3c:71:42:f7:22:7d:4e:e5:08:a6:55:48:
                    3e:74:7f:20:6b:4c:c6:eb:92:f4:a3:21:1c:59:35:
                    94:3a:c7:20:4a:3a:4b:f1:3d:3b:74:cb:a5:77:f4:
                    c5:c4:8c:df:f5:cb:89:04:b7:e4:1c:d5:7e:81:5d:
                    9d:59:3c:58:c8:39:d5:70:28:5b:c7:da:c7:a2:0b:
                    1c:e0:f0:02:1b:44:0c:18:34:49:f0:c2:29:d1:22:
                    d6:12:23:5c:69:6b:d3:80:c1:62:09:47:8e:cb:a3:
                    ce:db:a0:42:31:4c:39:95:37:7f:6e:5f:17:d4:d9:
                    88:70:37:5c:e5:cd:b6:6b:34:ca:79:42:2a:79:a4:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:99:9B:94:3C:A8:6C:E6:E4:82:7F:93:2E:71:3E:98:E2:D0:0B
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e35322e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d1:3e:41:81:24:fa:ab:51:31:b0:df:65:ca:b6:8d:c0:f1:
         1b:44:51:f0:be:0a:30:de:77:70:40:9d:ec:3c:f4:4b:57:28:
         e5:c7:e6:60:a4:b8:53:09:67:a5:8f:af:31:24:f0:fc:e3:d5:
         cd:cc:35:5c:74:b8:07:b8:c1:e8:32:6a:10:f2:b6:46:b8:a7:
         d6:dd:b4:3a:20:f8:c6:11:7b:96:c7:01:6f:d4:59:11:4c:d4:
         99:01:89:87:a0:13:d9:25:eb:14:26:5a:8c:c7:64:40:4e:75:
         c2:89:2b:d0:47:a3:27:0b:3e:8a:46:18:c4:5e:40:6e:7c:51:
         98:01:ca:e2:f8:fd:8a:82:73:e3:24:bb:47:c1:6a:d7:f0:aa:
         1f:85:46:61:bf:63:af:b1:d2:43:6f:b9:fa:e0:49:49:f6:63:
         64:2c:9d:74:0d:aa:f4:f3:06:82:2c:cb:72:cb:8d:54:15:eb:
         b7:b9:c9:a0:c3:6e:a9:ad:91:b2:8b:ce:2c:22:bc:9f:77:63:
         ce:76:cf:f3:0c:75:92:72:d6:06:5e:a5:1d:84:e3:ba:1f:8f:
         e3:98:80:ac:72:af:fb:20:c1:f1:95:69:4a:4d:44:22:4a:71:
         ab:dd:f8:4b:22:22:63:b8:81:61:5e:20:4d:61:b1:54:f0:a2:
         62:ed:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:04:42 2025 by rpki-client