Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa
File:                     3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa (raw, json)
Hash identifier:          T5qcA5Hg+4yxfH7EqrPAjjz2OExW8ImItq8qjroLAnQ=
Subject key identifier:   50:D8:9A:CF:B9:C0:4E:2E:9B:A9:55:48:8C:17:5F:A1:E6:3F:09:B7
Certificate issuer:       /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
Certificate serial:       0CA2C7F1D2E799A7F8F3D24C097BA48F4781E707
Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa
Signing time:             Thu 05 Jun 2025 21:21:07 +0000
ROA not before:           Thu 05 Jun 2025 21:16:07 +0000
ROA not after:            Thu 04 Jun 2026 21:21:07 +0000
asID:                     270115
IP address blocks:        187.102.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a2:c7:f1:d2:e7:99:a7:f8:f3:d2:4c:09:7b:a4:8f:47:81:e7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
        Validity
            Not Before: Jun  5 21:16:07 2025 GMT
            Not After : Jun  4 21:21:07 2026 GMT
        Subject: CN=50D89ACFB9C04E2E9BA955488C175FA1E63F09B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:c5:29:bd:b5:12:6a:75:ca:52:65:e4:53:
                    51:c6:cc:99:6c:5c:22:74:64:34:83:4f:bd:21:42:
                    2d:6e:32:2f:8f:95:7e:0f:7a:73:e7:45:44:f4:2d:
                    5a:85:04:47:9e:f1:cb:01:f8:f6:d9:e6:04:a6:51:
                    69:c6:06:09:f9:bf:3c:52:95:71:30:80:d1:6f:38:
                    61:db:31:57:70:73:63:2a:bb:2e:14:bf:69:54:00:
                    e4:95:2a:29:ca:85:13:4d:5a:47:02:56:23:e9:19:
                    b5:2c:f9:22:e5:4b:16:3f:59:6e:b3:a8:a8:97:f5:
                    40:e5:78:ef:da:60:9b:c2:c2:ef:39:11:3a:e6:cd:
                    4b:03:fd:15:d7:0a:17:83:57:a9:aa:a5:52:39:5f:
                    38:04:b0:e0:1b:e9:17:f8:93:42:eb:88:bc:ea:b7:
                    dc:ac:b1:5e:13:13:f9:2f:c5:9e:27:f1:9c:ed:a9:
                    80:4c:e1:28:e2:fa:dc:a8:82:b7:29:a3:64:6e:87:
                    01:b4:5b:f7:ba:ed:82:13:19:cf:9f:25:d6:c5:9c:
                    e7:df:a2:72:ee:82:2c:7e:3e:34:63:09:71:17:72:
                    12:ea:5b:f9:e8:95:2a:43:1c:b7:c8:a6:ab:8f:d7:
                    3c:32:41:bd:bd:a0:6b:0f:18:d5:2c:ec:76:d1:72:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D8:9A:CF:B9:C0:4E:2E:9B:A9:55:48:8C:17:5F:A1:E6:3F:09:B7
            X509v3 Authority Key Identifier:
                keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:01:4e:79:ea:d2:eb:42:3e:81:c1:3a:72:8b:97:a5:2e:70:
         35:fc:3b:57:d6:4e:94:72:a7:4c:ee:4d:52:fb:25:51:34:1e:
         a0:70:28:a8:58:56:fe:3d:aa:db:17:08:ce:d0:61:7e:32:ca:
         7c:5f:dc:ac:96:29:69:35:5d:1d:bb:80:a9:5f:dd:23:91:d1:
         b4:61:f9:6d:8b:ea:56:88:7a:71:36:74:c9:3f:8a:e0:28:70:
         89:e0:8b:d0:54:ce:90:82:8e:e2:5a:69:19:6e:b2:26:23:7a:
         0c:77:2e:a1:e0:c0:cf:d9:a3:f6:66:df:dd:4f:22:c8:1e:a5:
         51:4e:ff:10:02:83:97:43:f5:b0:08:5e:cd:f6:ae:5a:32:97:
         8d:f0:87:90:af:4b:12:bd:6d:14:68:42:ee:72:b6:c8:73:cc:
         5f:49:4f:eb:a1:b4:54:03:28:50:77:9a:50:48:65:12:37:3b:
         5f:02:f8:70:71:56:48:dc:c3:cc:4b:cd:3c:21:87:13:3c:90:
         db:89:8c:08:a4:c4:54:be:22:a7:b7:bd:36:1f:c8:9f:bf:ac:
         10:78:d2:e3:6f:45:ad:f2:ae:ed:ac:31:f7:c1:ed:03:72:12:
         db:25:9e:e1:b7:42:99:2f:dc:e0:2c:36:26:ec:94:60:bb:0c:
         20:e8:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:36:28 2025 by rpki-client