Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/3138372e3130322e3232342e302f32332d3234203d3e203238333934.roa
File:                     3138372e3130322e3232342e302f32332d3234203d3e203238333934.roa (raw, json)
Hash identifier:          5CdU6QAXjJa4aH3Jgt7OtbNVsGph2wamnZgJjp0n6iY=
Subject key identifier:   72:5F:17:15:0B:CD:16:0C:B4:93:52:46:2E:D6:AC:4B:3E:3F:EF:C7
Certificate issuer:       /CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
Certificate serial:       5638A78EE4F206EEC541D154F8B9470EA8C3F465
Authority key identifier: A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/3138372e3130322e3232342e302f32332d3234203d3e203238333934.roa
Signing time:             Wed 12 Aug 2026 02:25:09 +0000
ROA not before:           Wed 12 Aug 2026 02:20:09 +0000
ROA not after:            Wed 11 Aug 2027 02:25:09 +0000
asID:                     28394
IP address blocks:        187.102.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:38:a7:8e:e4:f2:06:ee:c5:41:d1:54:f8:b9:47:0e:a8:c3:f4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
        Validity
            Not Before: Aug 12 02:20:09 2026 GMT
            Not After : Aug 11 02:25:09 2027 GMT
        Subject: CN=725F17150BCD160CB49352462ED6AC4B3E3FEFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:3b:11:8c:c3:1f:ef:53:c4:04:0e:6c:d9:
                    17:6e:6e:2c:ad:31:be:98:3d:97:32:47:39:2f:c0:
                    99:bc:af:51:7a:81:3f:ba:42:66:f1:ba:dc:b8:f7:
                    e1:47:e0:9f:5a:3c:cc:5b:da:eb:b8:a1:4c:45:3b:
                    41:f8:b7:91:d9:7e:31:67:50:64:93:6d:a4:54:bc:
                    1f:59:1a:92:3a:d9:26:f0:b0:03:d7:ee:4d:32:4d:
                    f2:d9:be:d3:7b:29:59:18:e4:7c:7a:0b:54:9b:71:
                    f6:ca:e0:b3:b1:ba:7f:55:67:27:4c:7f:2e:7e:99:
                    d9:65:85:c4:33:73:85:ec:32:79:eb:b2:0e:32:34:
                    81:7a:4b:79:4c:bc:f9:fb:da:48:7a:39:da:cd:ac:
                    6e:f3:d4:99:0c:15:39:db:01:db:99:f5:02:fd:af:
                    1b:1d:23:97:b4:cd:02:37:95:2f:e0:29:74:d5:4e:
                    3c:6a:34:96:5c:ce:df:ea:89:11:5f:3b:cd:cf:fa:
                    40:e3:92:5e:2b:94:ca:16:5c:39:da:ac:2e:9c:ab:
                    83:fd:4a:5d:54:62:d1:68:af:cc:7b:4e:34:c4:0f:
                    cd:94:14:6e:72:f1:17:cd:fa:45:b1:01:c8:a7:1a:
                    e7:4d:1c:12:9b:e8:fc:17:b8:da:45:20:72:9b:5a:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5F:17:15:0B:CD:16:0C:B4:93:52:46:2E:D6:AC:4B:3E:3F:EF:C7
            X509v3 Authority Key Identifier:
                keyid:A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/3138372e3130322e3232342e302f32332d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:81:b8:3a:8b:b6:82:f4:d0:de:4b:a5:6e:8f:9e:93:e0:49:
         92:02:e8:7d:fe:50:c9:77:94:6d:b0:00:f7:84:d6:1c:e0:12:
         98:a8:37:12:a5:7a:37:77:ea:a6:ca:d5:73:3f:22:a7:62:aa:
         5d:4d:35:fd:68:7e:1d:2d:05:28:13:6d:76:a0:60:68:fd:01:
         3e:37:74:9e:e5:3f:26:9a:be:41:17:c5:e6:c9:0c:13:07:28:
         44:ce:88:97:93:2e:5e:2f:ae:e1:da:ca:44:be:96:d0:51:72:
         0b:fe:67:da:fb:17:7b:8b:64:21:ad:d6:89:b4:03:22:aa:f8:
         19:74:59:5d:d3:b1:97:77:73:27:30:e5:8c:2c:83:02:b3:93:
         10:a9:95:15:a0:b8:29:6c:a8:e5:09:61:f8:cd:40:84:9b:59:
         fc:2d:0d:00:28:35:aa:3d:f1:c3:69:e4:18:b6:a5:67:8c:77:
         20:35:a0:ea:9b:0e:fc:93:34:1e:37:eb:bc:8c:97:9c:64:a8:
         1d:eb:fa:94:cd:33:90:32:e4:8d:94:af:a2:b7:1d:ee:72:32:
         b7:33:45:1f:51:ae:27:9e:2a:81:ab:f1:36:2a:fe:f8:84:c3:
         9e:38:77:23:88:42:41:e7:c3:5a:01:2b:9e:57:a2:1c:74:4d:
         81:2c:e1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:57:18 2026 by rpki-client