Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139322e302f32322d3234203d3e20323634383237.roa
File:                     3138372e3130322e3139322e302f32322d3234203d3e20323634383237.roa (raw, json)
Hash identifier:          9cBcKPLlIcqoJnux/lukDIoXu7bHWVdiYKp+PxKfZRQ=
Subject key identifier:   8D:59:6C:28:71:93:7B:27:B5:3F:33:AD:9B:0D:B1:B2:C4:54:55:0B
Certificate issuer:       /CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
Certificate serial:       5F15EF3042E907F16ED281972754368F56136DA4
Authority key identifier: 9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139322e302f32322d3234203d3e20323634383237.roa
Signing time:             Tue 04 Feb 2025 19:58:21 +0000
ROA not before:           Tue 04 Feb 2025 19:53:21 +0000
ROA not after:            Tue 03 Feb 2026 19:58:21 +0000
asID:                     264827
IP address blocks:        187.102.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:15:ef:30:42:e9:07:f1:6e:d2:81:97:27:54:36:8f:56:13:6d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
        Validity
            Not Before: Feb  4 19:53:21 2025 GMT
            Not After : Feb  3 19:58:21 2026 GMT
        Subject: CN=8D596C2871937B27B53F33AD9B0DB1B2C454550B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:e3:da:c4:60:79:87:9a:8e:54:7b:56:40:
                    24:5e:d2:97:3d:ac:77:b0:21:d2:f6:00:c1:e1:f9:
                    29:29:c7:ad:7c:e9:80:d1:9a:72:e0:1b:58:1c:71:
                    c3:12:93:3f:62:63:33:14:54:77:30:33:88:98:5a:
                    8f:8b:1b:dd:b3:0f:5b:64:8d:f7:34:29:5f:92:f4:
                    14:fa:e3:c5:51:92:e0:c1:90:d2:a7:6b:69:83:e8:
                    1f:5e:88:cc:48:72:8d:5e:1a:50:ad:e1:5c:88:91:
                    0e:5f:44:f5:f3:0d:6b:5f:88:e9:cd:4b:40:38:92:
                    59:3b:32:b7:e0:ff:28:43:11:c3:20:31:46:d5:32:
                    f7:83:9f:42:17:53:d8:97:29:3f:dc:ae:dc:aa:a5:
                    da:f1:31:be:ad:1b:db:86:47:33:fd:a8:08:9d:06:
                    62:4a:0f:fd:0e:04:42:4b:58:42:e4:c6:68:6a:79:
                    54:df:f8:00:75:4a:1d:04:a4:64:b6:70:d9:01:96:
                    64:05:34:02:1a:39:3b:17:5d:08:6f:e5:94:db:62:
                    aa:ce:90:5c:f1:cd:e4:03:96:aa:a9:40:a6:cc:7e:
                    b4:f8:f7:b7:88:5a:d2:2f:9f:93:c5:46:e4:64:1f:
                    be:f4:4a:bf:e1:27:a6:e8:c2:6b:4c:f1:f5:ca:ac:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:6C:28:71:93:7B:27:B5:3F:33:AD:9B:0D:B1:B2:C4:54:55:0B
            X509v3 Authority Key Identifier:
                keyid:9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139322e302f32322d3234203d3e20323634383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:c9:19:7a:bd:87:90:c7:6a:61:4e:9e:f4:9f:9c:10:64:
         92:a4:5e:24:b7:8b:b0:47:e0:3c:f9:ee:66:4e:ea:bf:86:f0:
         83:b4:82:19:ec:b4:7d:58:3f:2b:ae:83:b1:45:d7:96:73:f6:
         1c:f9:5f:11:82:70:bb:5c:36:3c:d5:54:d8:90:30:26:3d:06:
         02:09:9d:4e:cb:07:e8:16:71:33:a1:1c:70:8c:9b:8f:c2:c4:
         5f:81:8e:3e:ff:2b:3e:22:3d:ea:0c:98:5b:6a:25:61:ce:4e:
         89:df:6f:7f:33:24:4e:49:db:5f:25:05:71:f0:46:23:b9:90:
         c9:c5:1c:27:99:c5:5e:3c:04:47:3f:20:ea:ef:d4:bf:9c:65:
         16:55:68:85:c4:f4:25:f9:2d:23:c0:b0:dc:7c:27:26:1b:7b:
         89:a6:55:6d:16:2f:24:99:63:f7:cb:0f:ec:68:7a:12:06:e0:
         39:6a:d0:73:a7:51:6e:95:b7:25:8e:c4:32:08:c3:c7:b6:bc:
         a8:dd:67:de:30:44:3b:37:2a:ce:63:d8:20:15:a6:bd:e9:64:
         d7:e2:c7:ad:fe:01:20:d1:0c:73:f4:b4:3c:68:b5:5b:cb:66:
         33:fe:c9:9d:6d:7b:6c:b9:d5:cb:09:1e:3a:b2:7b:7a:dd:e4:
         8f:e6:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:15 2025 by rpki-client