Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139352e302f32342d3234203d3e20323733393533.roa
File:                     3138372e3130322e3139352e302f32342d3234203d3e20323733393533.roa (raw, json)
Hash identifier:          uFptcQKpZQFf4BiuHYWGXbcaA+FH9Z6RhqSB7HzpDek=
Subject key identifier:   1B:E7:25:5C:12:DD:25:61:0F:5B:53:08:C6:D2:2C:E7:66:BB:CB:8A
Certificate issuer:       /CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
Certificate serial:       52D8AD3983D9E6099A3C531937D063D7F42B16A8
Authority key identifier: 9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139352e302f32342d3234203d3e20323733393533.roa
Signing time:             Sat 22 Mar 2025 16:30:00 +0000
ROA not before:           Sat 22 Mar 2025 16:25:00 +0000
ROA not after:            Sat 21 Mar 2026 16:30:00 +0000
asID:                     273953
IP address blocks:        187.102.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d8:ad:39:83:d9:e6:09:9a:3c:53:19:37:d0:63:d7:f4:2b:16:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
        Validity
            Not Before: Mar 22 16:25:00 2025 GMT
            Not After : Mar 21 16:30:00 2026 GMT
        Subject: CN=1BE7255C12DD25610F5B5308C6D22CE766BBCB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:0d:0a:dc:92:7c:69:09:a7:a2:44:b5:62:
                    f6:e0:4a:fe:a0:af:19:e2:44:ce:49:62:6e:a3:da:
                    3d:a9:d7:c7:65:66:a1:cf:92:18:ec:7a:25:06:19:
                    e8:bb:e5:8a:2f:aa:06:7f:41:4b:7b:be:70:41:eb:
                    54:28:9f:ae:ed:af:dd:a1:af:95:bc:9a:4f:ec:1a:
                    34:19:4c:b4:43:f7:b4:aa:cd:2d:27:47:6d:0c:c6:
                    50:16:1e:c9:da:46:3e:9f:8b:75:62:4c:e2:aa:5e:
                    eb:c2:63:0d:5a:8e:78:63:ce:12:79:55:44:a4:ff:
                    01:dd:c8:a9:74:6b:ba:5e:7b:49:35:d3:6c:4c:16:
                    60:6a:74:cf:68:62:d2:28:70:e2:29:8d:74:36:ba:
                    d3:f5:5f:8b:cf:f0:16:d2:f1:cb:ce:c6:27:85:6c:
                    13:7e:39:9c:96:68:c9:6b:c8:e1:f6:a5:74:ec:c6:
                    8a:86:3c:58:48:90:29:94:0f:66:4b:3e:b8:db:b0:
                    38:db:34:5a:01:fc:01:07:30:91:5d:1b:53:b5:85:
                    fd:34:dd:ea:7a:26:40:5c:57:33:2c:0d:b5:c3:05:
                    42:bd:e7:48:61:88:53:7c:b1:67:57:c6:f9:8d:1c:
                    28:29:cf:a4:87:74:7d:23:1d:0f:ec:d3:e3:3d:9b:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E7:25:5C:12:DD:25:61:0F:5B:53:08:C6:D2:2C:E7:66:BB:CB:8A
            X509v3 Authority Key Identifier:
                keyid:9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139352e302f32342d3234203d3e20323733393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:47:26:1e:46:fe:da:4e:d7:b6:ee:ac:74:95:56:e1:9f:
         54:9e:e5:7d:83:ff:2c:37:35:29:41:a2:f5:39:85:49:6d:af:
         2b:de:26:13:09:5c:d8:a3:b6:f7:f1:bd:94:8e:30:82:d6:3b:
         7d:87:fe:e6:1d:50:08:f7:ab:27:16:70:32:ae:fc:ff:f9:ef:
         f0:59:7b:18:2c:0f:0a:a5:f4:e0:d8:09:fd:34:ae:87:20:f5:
         41:57:24:a2:70:13:29:84:c6:31:a2:28:ed:fe:bc:dc:12:4f:
         27:59:c4:79:89:56:6f:77:32:b3:b0:b6:f9:84:c2:aa:cf:66:
         95:87:84:7b:85:03:fe:61:c7:18:01:ac:90:d6:fd:f2:06:08:
         41:de:79:49:34:1c:ac:a7:f0:f3:dd:da:13:92:77:a5:90:2f:
         bb:11:51:31:9b:b8:36:92:b0:59:84:0d:e7:27:4c:ff:54:a4:
         b0:49:8c:6e:f2:70:53:5c:50:80:f1:01:72:55:82:01:db:bd:
         15:83:7a:f9:0a:1c:b8:47:13:8c:38:13:5b:10:ae:66:35:0f:
         ce:29:fe:96:31:5c:c6:8c:e9:30:1e:23:04:8a:8d:99:28:a3:
         42:ec:7a:fb:a8:1c:fa:ca:f4:98:c9:19:1a:86:ae:3f:09:b5:
         1c:67:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:38 2025 by rpki-client