Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/3132382e3230312e38382e302f32322d3234203d3e20323635373435.roa
File:                     3132382e3230312e38382e302f32322d3234203d3e20323635373435.roa (raw, json)
Hash identifier:          p0DiE8JBVambE5Idg9hrDoCNNjT1xgysN8/FJ/GJjQI=
Subject key identifier:   C8:30:08:3B:D2:3B:A3:8F:BF:FA:6A:1B:01:05:CD:DA:DE:E8:75:7D
Certificate issuer:       /CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
Certificate serial:       6C9295FBA67B7702EFA04676C8BC545AD30CF22F
Authority key identifier: B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/3132382e3230312e38382e302f32322d3234203d3e20323635373435.roa
Signing time:             Tue 15 Jul 2025 14:25:22 +0000
ROA not before:           Tue 15 Jul 2025 14:20:22 +0000
ROA not after:            Tue 14 Jul 2026 14:25:22 +0000
asID:                     265745
IP address blocks:        128.201.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:92:95:fb:a6:7b:77:02:ef:a0:46:76:c8:bc:54:5a:d3:0c:f2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
        Validity
            Not Before: Jul 15 14:20:22 2025 GMT
            Not After : Jul 14 14:25:22 2026 GMT
        Subject: CN=C830083BD23BA38FBFFA6A1B0105CDDADEE8757D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:40:a7:68:7e:35:14:ff:0e:01:29:b7:fe:
                    36:55:ba:6d:0d:cd:3d:d1:c8:d5:4c:9b:1f:c7:da:
                    28:29:68:f2:5c:8d:7c:29:c9:b3:fe:d6:5f:4b:48:
                    d2:f1:03:45:7f:54:c3:f8:a9:d6:09:29:63:c1:c6:
                    81:93:60:55:1e:35:66:e4:09:04:6a:af:74:74:5d:
                    e8:a4:47:2b:fe:39:bf:7e:31:4e:6d:d4:9c:c5:2f:
                    69:30:90:22:7d:99:0e:c3:56:be:3a:76:69:42:e0:
                    c4:69:17:09:d8:84:0d:5c:8b:4d:7b:00:7b:e4:f0:
                    1b:d6:fa:61:7b:d9:b3:27:f9:62:65:4a:fc:36:48:
                    5f:d3:75:2c:68:9a:bf:d5:56:c3:21:d5:a2:92:1d:
                    7a:4c:d4:74:26:0d:d4:8e:ca:39:72:c5:f1:99:3a:
                    87:be:c7:7d:48:a8:6f:b2:42:f0:aa:2f:e4:ec:97:
                    d2:ce:57:e4:fd:c7:3e:a4:06:1c:15:98:7f:73:8f:
                    f9:50:79:27:69:c2:b7:98:7c:07:19:4a:09:ee:5f:
                    80:12:4b:bd:fa:92:de:81:91:37:c3:b1:90:ba:4a:
                    65:b5:31:bb:f5:c4:c5:d8:dc:b4:08:d3:75:31:89:
                    d5:78:7d:d3:84:0d:64:ab:be:04:b0:ea:ae:e2:e1:
                    a8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:30:08:3B:D2:3B:A3:8F:BF:FA:6A:1B:01:05:CD:DA:DE:E8:75:7D
            X509v3 Authority Key Identifier:
                keyid:B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/3132382e3230312e38382e302f32322d3234203d3e20323635373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:63:60:08:f9:e8:95:66:b5:da:b7:fc:49:c3:43:0c:e2:4d:
         f9:b7:b0:2c:9f:09:7e:74:53:00:e4:dd:60:01:0a:6b:13:49:
         b6:b4:4d:db:1d:5a:52:c3:9b:10:67:a4:5a:03:07:f3:af:81:
         47:b4:82:df:8f:b6:fc:7f:6b:cc:4d:36:ed:0f:4e:b8:51:91:
         8f:50:40:77:d7:0f:18:ad:c6:74:55:44:01:55:ae:f3:c8:2b:
         0e:0d:63:90:14:9c:0a:01:b6:5b:69:1d:de:d7:bc:05:66:73:
         38:40:4c:4c:ca:76:3a:60:0d:73:67:50:66:b3:0d:10:52:e0:
         b3:2a:ba:0f:7a:e4:b1:4c:97:ab:c9:e4:26:b4:2c:12:c6:54:
         f2:b8:e4:c2:7c:c2:cb:d7:11:de:9d:2b:7e:a4:92:38:fd:d5:
         60:a8:36:23:e7:7f:a9:9e:18:b1:5f:aa:59:c8:6f:4b:e2:0f:
         74:95:a8:ec:be:98:65:08:b9:62:7d:90:fe:c0:57:a9:8e:aa:
         96:31:14:1a:15:b2:eb:97:ea:fa:2a:98:6c:0d:46:91:ab:c6:
         e5:97:e5:10:da:6b:c2:63:ba:ec:5c:7a:d5:0b:f5:e6:97:c2:
         67:a7:31:f0:0d:fd:d3:b0:f1:ac:d1:a8:06:2a:bb:f0:85:6f:
         31:6c:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:59 2025 by rpki-client