Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa
File:                     3138372e36322e3132302e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          NXqW0zP7ejoqd1p/FUxo0DHErFM5tXV7/L/guyAWFeY=
Subject key identifier:   61:31:5A:90:28:9F:04:7A:41:DC:51:39:B6:9C:7E:9C:C8:0F:EE:C2
Certificate issuer:       /CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
Certificate serial:       66B45FC5010F905F42F410FBFF7EEE0CACBCF436
Authority key identifier: EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa
Signing time:             Tue 22 Jul 2025 01:26:05 +0000
ROA not before:           Tue 22 Jul 2025 01:21:05 +0000
ROA not after:            Tue 21 Jul 2026 01:26:05 +0000
asID:                     28394
IP address blocks:        187.62.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 09:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:5f:c5:01:0f:90:5f:42:f4:10:fb:ff:7e:ee:0c:ac:bc:f4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
        Validity
            Not Before: Jul 22 01:21:05 2025 GMT
            Not After : Jul 21 01:26:05 2026 GMT
        Subject: CN=61315A90289F047A41DC5139B69C7E9CC80FEEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:a9:f8:bf:40:b1:9d:9e:f3:e3:bd:d6:e2:
                    18:97:3d:f9:58:f2:c0:51:9e:a3:bb:da:0e:bb:63:
                    e5:b3:a3:45:11:70:42:ef:3d:77:57:a8:73:5a:91:
                    22:e3:ea:eb:4c:e1:5d:a6:15:76:3e:0d:a3:dc:6c:
                    b9:42:51:e2:cc:6d:c2:a9:bb:b3:1c:56:4d:7a:9b:
                    30:f3:c4:18:e5:2c:8d:67:35:a6:3e:b4:4b:a6:7a:
                    cb:25:a6:86:64:1d:31:fa:fa:3e:02:e6:3f:3a:5f:
                    3c:d2:1f:96:7d:cf:b9:8a:72:77:3a:cb:58:93:0a:
                    17:48:fc:89:7c:3c:e5:7b:41:82:e8:c2:e6:a1:ff:
                    2e:e3:46:de:44:b3:a9:1a:14:c2:21:d7:fd:61:47:
                    54:8b:b5:28:29:09:55:a1:b5:e0:29:90:86:95:2c:
                    5c:47:70:7b:6c:66:9b:92:6b:de:ce:d0:c1:94:5f:
                    13:cb:cb:bd:c7:31:43:e1:29:43:24:5d:07:f0:a6:
                    82:05:e5:ba:b0:f2:10:65:23:e4:96:25:5b:8c:2b:
                    13:60:29:72:98:b9:1a:62:17:f2:b8:f8:88:d0:26:
                    51:2d:4f:63:28:f4:0b:d7:28:c6:01:02:73:f2:77:
                    77:f5:9b:90:27:5c:72:99:31:e5:c0:ec:68:79:32:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:31:5A:90:28:9F:04:7A:41:DC:51:39:B6:9C:7E:9C:C8:0F:EE:C2
            X509v3 Authority Key Identifier:
                keyid:EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:bc:19:11:5b:2e:9e:5b:e0:35:6a:9b:28:54:16:32:35:
         fe:03:64:4b:15:37:27:55:30:71:ce:27:1d:49:a9:a7:21:b8:
         4a:f0:11:ca:da:f1:c8:a6:91:48:39:37:49:89:22:94:1d:68:
         b4:e0:58:4c:82:c5:42:d9:e5:0c:90:c7:f3:3c:c4:91:84:3f:
         a9:2a:7a:d7:76:bf:a5:d9:41:4a:0d:a6:46:29:d6:6d:12:a0:
         a0:d1:cf:37:7e:81:57:40:dd:e3:a5:38:3a:2f:88:e8:44:47:
         e7:50:69:f1:cd:fa:34:12:64:b8:0d:28:75:db:47:ca:27:fa:
         91:ee:07:37:27:52:61:f9:33:71:e9:e1:52:3a:78:3d:33:43:
         a9:93:9b:b6:a6:c0:15:79:ac:9b:0d:57:94:02:f7:c0:5c:8a:
         a4:71:da:95:62:39:9b:72:63:03:e1:ae:97:d0:62:85:41:eb:
         f8:3f:04:9d:74:6e:7c:74:0e:bf:72:32:d7:c9:57:c0:bb:94:
         a6:69:6c:7f:56:c0:c5:ac:ec:d8:d5:0e:50:fa:e0:9e:36:47:
         72:06:be:55:ee:40:91:92:f6:4e:36:36:30:12:04:0a:0c:51:
         13:25:1c:14:f0:0a:c1:39:39:51:0b:67:e2:5e:18:35:1e:f1:
         d6:c1:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:26:42 2025 by rpki-client