Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa
File:                     3138372e36322e3132302e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          peP/1BzNFRtaD+BzuoZ5Vl16njOYDIf81y8sMlQZcow=
Subject key identifier:   46:ED:C2:88:57:8F:06:B2:0B:9D:7B:09:D8:0A:F7:D7:53:D1:F8:29
Certificate issuer:       /CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
Certificate serial:       1AB92F20EE21A6F4A4D7A8D444EA26FB8064D436
Authority key identifier: EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa
Signing time:             Tue 23 Jun 2026 01:48:55 +0000
ROA not before:           Tue 23 Jun 2026 01:43:55 +0000
ROA not after:            Tue 22 Jun 2027 01:48:55 +0000
asID:                     28394
IP address blocks:        187.62.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b9:2f:20:ee:21:a6:f4:a4:d7:a8:d4:44:ea:26:fb:80:64:d4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
        Validity
            Not Before: Jun 23 01:43:55 2026 GMT
            Not After : Jun 22 01:48:55 2027 GMT
        Subject: CN=46EDC288578F06B20B9D7B09D80AF7D753D1F829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:59:0d:e1:fe:1d:85:8a:61:9e:d6:23:9f:
                    e5:20:83:1c:0b:05:1f:ac:f8:e7:8e:d4:b9:2d:40:
                    d3:12:cf:ca:98:8f:bc:ce:a3:e9:2d:7a:c6:92:90:
                    98:12:d7:6e:b1:3c:d2:b7:f2:c1:bd:f4:85:55:97:
                    be:04:1b:57:ed:70:1f:f3:2c:34:8c:64:ca:fe:ca:
                    84:e3:1f:d0:ef:d8:e7:7a:32:7a:31:55:2e:98:f3:
                    13:6e:04:51:07:e8:2d:9a:47:cf:c1:92:d4:17:a7:
                    af:f9:b3:09:bc:4f:da:ee:88:8d:ef:99:d0:b2:31:
                    07:2d:87:79:ac:c9:31:ec:a2:2e:fb:f8:ab:07:98:
                    63:79:e0:cd:1e:42:f3:62:19:31:73:66:ea:11:57:
                    11:1a:b6:1c:b3:17:56:92:de:47:18:33:f0:d2:7c:
                    40:01:5c:8d:f4:40:18:69:f0:a0:8a:c1:63:4c:cc:
                    dd:c5:dc:5d:e9:b5:e6:1b:48:99:2c:26:36:57:a1:
                    99:38:5d:a7:c3:e0:34:e3:59:92:1b:91:21:21:2f:
                    ff:9c:71:e9:01:6d:2a:11:85:c3:7c:d3:11:7d:b6:
                    45:7f:d0:54:f4:7c:7d:aa:38:49:cd:25:8e:70:ed:
                    ca:0f:c2:a9:10:90:cc:d4:1a:81:76:7e:17:20:cb:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:ED:C2:88:57:8F:06:B2:0B:9D:7B:09:D8:0A:F7:D7:53:D1:F8:29
            X509v3 Authority Key Identifier:
                keyid:EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:cb:a1:1c:88:ff:9d:79:1f:eb:0d:68:84:1b:67:43:da:
         f5:7d:63:ca:f3:33:31:7c:39:10:9c:24:1f:41:3c:a2:e9:28:
         53:24:65:d2:4f:1f:c0:3b:ca:07:9a:8b:44:bb:b2:a1:b3:a5:
         bf:9d:c6:a1:96:95:cb:a4:57:3e:02:0f:a9:c9:a6:0f:9b:c3:
         e7:ae:b6:cf:1d:b8:e5:a4:7f:15:2f:ab:49:2a:bc:f3:ec:cd:
         5c:5e:db:52:10:94:f2:a5:da:82:1b:dc:c9:0e:c4:55:c7:38:
         44:69:59:7a:a5:83:33:50:5d:1b:b6:ce:aa:1e:2a:e9:7e:1a:
         4b:6d:26:e9:c9:11:8a:01:6a:46:d9:70:a3:8c:2e:4e:9e:10:
         1f:78:99:f0:c5:de:4b:9d:b8:2e:86:c3:7f:df:82:a9:39:1a:
         ff:a2:47:08:c0:9c:e7:d1:a9:9c:a0:50:7a:36:2d:30:8c:8a:
         22:88:3c:75:04:2c:ca:42:6b:de:17:f6:38:06:4b:e5:79:08:
         b9:8c:69:02:31:8d:84:1a:30:38:59:19:f3:05:72:b5:d0:c1:
         9d:ed:ae:b5:e0:88:aa:8f:bd:4d:70:a1:90:d2:12:a0:01:69:
         68:9c:24:db:62:5b:ba:61:3b:e7:47:99:79:8d:5a:53:79:95:
         b5:35:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:40:12 2026 by rpki-client