Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa
File:                     3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa (raw, json)
Hash identifier:          Y0dtlRqKWffOVpYc8nj97EbWllkDVJYKBgfP9Fk1qoc=
Subject key identifier:   0F:77:E0:6A:D0:CA:98:54:1F:FF:F1:EA:A5:8F:E0:7F:33:2F:21:28
Certificate issuer:       /CN=6CA60F8C86AE97CFC070767C44A39A611589F61A
Certificate serial:       42CBD8341BBB5038266DA5D5DAF7E186BFFE38A5
Authority key identifier: 6C:A6:0F:8C:86:AE:97:CF:C0:70:76:7C:44:A3:9A:61:15:89:F6:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa
Signing time:             Wed 07 May 2025 03:17:53 +0000
ROA not before:           Wed 07 May 2025 03:12:53 +0000
ROA not after:            Wed 06 May 2026 03:17:53 +0000
asID:                     270113
IP address blocks:        187.102.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 07:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:d8:34:1b:bb:50:38:26:6d:a5:d5:da:f7:e1:86:bf:fe:38:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA60F8C86AE97CFC070767C44A39A611589F61A
        Validity
            Not Before: May  7 03:12:53 2025 GMT
            Not After : May  6 03:17:53 2026 GMT
        Subject: CN=0F77E06AD0CA98541FFFF1EAA58FE07F332F2128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:80:08:41:82:39:5e:96:0e:30:eb:58:b6:
                    79:27:f5:67:ba:03:26:b4:8b:3b:42:7f:8d:0e:50:
                    9d:d4:99:2b:af:02:72:c5:b9:5a:66:03:ed:5e:1c:
                    d3:74:d0:e4:77:bf:36:19:93:5f:93:94:05:0d:77:
                    60:b9:02:ba:cc:c7:ac:9a:dc:ea:6a:6c:a5:4e:8c:
                    fb:20:e1:70:0d:46:ed:e1:eb:a0:db:d5:45:25:bf:
                    98:f5:5c:54:7a:10:53:88:46:b6:2d:53:18:76:20:
                    8e:29:aa:55:e8:d6:ed:49:2e:ce:5c:90:d7:1a:b4:
                    16:21:9d:91:26:14:61:b0:6e:76:c8:bb:38:4f:e1:
                    46:5c:99:3d:94:88:0e:0b:d1:e4:b7:92:4a:6d:07:
                    2a:1a:61:52:14:7a:b8:fe:ee:e2:df:89:be:29:ec:
                    58:ba:39:3e:5f:2f:35:05:38:a6:f2:fc:ca:14:bc:
                    2b:7a:da:34:ee:4a:9b:20:43:3e:e7:ad:fa:89:01:
                    d7:5c:bf:17:f9:41:83:08:8b:93:dd:65:af:98:d7:
                    e7:b3:a8:eb:5f:32:99:4c:03:8a:38:69:36:9e:48:
                    57:05:7e:fd:e6:f1:bd:a6:59:80:62:af:13:18:4e:
                    85:81:c1:30:4f:63:b5:55:5b:8b:df:10:79:9c:be:
                    29:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:77:E0:6A:D0:CA:98:54:1F:FF:F1:EA:A5:8F:E0:7F:33:2F:21:28
            X509v3 Authority Key Identifier:
                keyid:6C:A6:0F:8C:86:AE:97:CF:C0:70:76:7C:44:A3:9A:61:15:89:F6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:25:92:cd:91:c3:7e:45:c2:3e:ca:bc:a0:90:8e:f4:8e:
         2d:e3:37:db:b5:ea:ba:a5:77:4a:34:7d:8a:4b:26:78:2d:25:
         10:ba:86:c1:41:18:da:74:82:6a:8e:24:0f:19:91:a2:af:92:
         93:a2:81:61:47:1d:39:64:34:3a:2c:11:85:a0:6f:1e:36:70:
         d9:16:c0:54:c9:7f:01:c5:48:31:cb:18:a6:9e:75:d8:63:5c:
         31:9e:90:13:6d:78:c4:c4:bd:39:40:ef:50:81:a8:88:36:9c:
         69:6c:c4:fe:90:11:e2:be:26:da:a0:5d:6a:a1:fe:bf:c6:01:
         82:53:d4:b9:a0:16:6b:db:d8:e1:7c:7c:ed:51:b6:27:49:c1:
         98:ea:f3:39:b3:fd:11:6c:97:15:9a:eb:27:c3:e8:23:ff:ee:
         7c:8c:6e:1a:c8:25:0f:7c:be:20:69:9e:d0:f1:f3:d5:de:be:
         32:82:2c:ed:52:e9:24:32:c2:ec:94:c5:f2:8d:6b:a1:3f:c4:
         27:59:8c:52:d7:f3:26:ef:54:81:40:0c:fc:59:92:bc:15:03:
         d4:bc:13:4c:89:84:90:f8:c9:7e:42:d0:a9:6d:d6:3a:17:13:
         39:c2:e4:df:25:1b:69:29:33:28:bf:5b:45:0b:26:0b:38:14:
         6a:4d:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:39:39 2025 by rpki-client