Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa
File:                     3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa (raw, json)
Hash identifier:          5G9YqkaiZnk9lxZwK/HIA+CwEIb4VJWjQ4BwMikjegI=
Subject key identifier:   86:17:FB:4C:07:00:0F:29:89:93:A4:13:CA:79:D2:EA:F2:C1:47:48
Certificate issuer:       /CN=BAD81EEA76E7D45020375CA26672BEA75D5445E2
Certificate serial:       3BC0C4C242C9ABAFDD948E3F83970DFB180740EE
Authority key identifier: BA:D8:1E:EA:76:E7:D4:50:20:37:5C:A2:66:72:BE:A7:5D:54:45:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa
Signing time:             Tue 04 Feb 2025 18:07:31 +0000
ROA not before:           Tue 04 Feb 2025 18:02:31 +0000
ROA not after:            Tue 03 Feb 2026 18:07:31 +0000
asID:                     270006
IP address blocks:        187.102.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c0:c4:c2:42:c9:ab:af:dd:94:8e:3f:83:97:0d:fb:18:07:40:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD81EEA76E7D45020375CA26672BEA75D5445E2
        Validity
            Not Before: Feb  4 18:02:31 2025 GMT
            Not After : Feb  3 18:07:31 2026 GMT
        Subject: CN=8617FB4C07000F298993A413CA79D2EAF2C14748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:b2:4f:d2:00:d0:f6:9b:2e:c6:d0:bd:00:
                    87:c6:46:08:39:33:f9:98:3d:be:75:6a:c9:41:5f:
                    a4:f3:3f:71:a7:93:b4:d1:13:0c:79:2d:f1:ff:58:
                    c7:71:7a:0d:09:09:49:70:1b:c4:54:84:c1:a9:5e:
                    6a:a5:1f:4b:11:46:92:d2:9d:52:58:7f:50:16:8c:
                    a3:c4:84:5a:a7:c9:ea:41:14:a0:db:53:40:e1:98:
                    c3:ff:c6:1a:22:59:12:e4:d5:1a:df:ed:dc:dd:2e:
                    3d:d3:6a:5e:69:20:38:37:6b:0b:74:a9:09:9a:ea:
                    ac:7a:13:00:14:cc:91:6e:69:87:ec:73:ad:e4:12:
                    75:04:b2:b1:19:c5:54:7c:9a:3f:b6:35:99:3a:57:
                    a2:a7:7b:fd:e1:ea:38:44:0c:7e:f0:b5:75:cf:41:
                    d9:75:4d:e4:13:21:36:16:2a:24:f6:e0:aa:ea:fd:
                    74:67:2f:95:e2:b9:1d:74:da:c8:f2:a0:60:84:83:
                    be:1f:30:ff:37:d3:73:e2:ee:cd:b9:88:a3:d2:42:
                    36:e4:38:f2:bc:10:cf:c5:a8:cd:fb:7b:f1:24:a0:
                    8d:d4:af:cf:4f:68:4f:ef:f9:de:81:41:7d:03:ec:
                    a7:29:db:d8:b6:14:a6:59:73:b3:59:9c:52:ad:9a:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:17:FB:4C:07:00:0F:29:89:93:A4:13:CA:79:D2:EA:F2:C1:47:48
            X509v3 Authority Key Identifier:
                keyid:BA:D8:1E:EA:76:E7:D4:50:20:37:5C:A2:66:72:BE:A7:5D:54:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:26:e0:fa:a4:b1:dc:bc:a4:d8:7d:f3:68:23:5a:1e:89:c2:
         e8:f4:bc:58:ce:25:19:f0:46:0a:64:a2:89:6a:11:6c:84:b7:
         ff:f4:27:4f:e8:27:7a:a2:63:ac:1d:30:3d:28:ac:73:a1:44:
         52:cd:13:15:df:66:17:4c:56:b7:59:b5:ab:7d:13:11:9c:21:
         b1:27:1c:5b:bf:d8:7f:03:4d:06:6f:ec:0c:5f:fc:98:03:28:
         2e:0f:b1:19:fb:24:93:43:03:8b:53:ad:96:c7:95:30:6b:25:
         1e:f4:b4:ee:dd:46:d2:98:8b:58:08:63:42:4b:e3:1a:1f:f6:
         bc:d1:ec:8d:6d:77:9b:ac:1d:6f:e6:ab:12:a1:89:b7:70:d3:
         9a:89:19:a6:0d:b8:8c:6d:bd:01:d8:32:7b:db:5f:3d:e2:1f:
         64:79:d6:6a:6f:bf:0c:3f:41:fd:93:1f:f3:13:0a:4d:b7:24:
         a0:87:57:1c:1e:a4:0e:ad:65:d6:89:7f:fc:fc:02:f5:8c:7a:
         7e:ed:f4:d6:fb:f7:86:88:c3:f8:d4:ad:77:7a:bd:15:36:d9:
         fa:11:21:cd:37:ed:7b:69:75:9f:96:61:4a:4b:0f:d7:f7:48:
         2f:73:30:c5:45:59:9e:1a:94:b7:d9:82:5f:4e:be:3a:b9:03:
         9b:0c:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:35:39 2025 by rpki-client