Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa
File:                     3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa (raw, json)
Hash identifier:          a0k+CwYndo/yJVuwlwMwgfTqpZBa1L3iIsbKzuB2Ssk=
Subject key identifier:   6D:E2:DE:9E:D5:BD:65:69:8D:F2:D4:B3:2F:DB:43:8E:32:C3:7E:28
Certificate issuer:       /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
Certificate serial:       7F60CB1844D1280E79F0DD177827443F58ADECF5
Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa
Signing time:             Thu 12 Jun 2025 00:21:47 +0000
ROA not before:           Thu 12 Jun 2025 00:16:47 +0000
ROA not after:            Thu 11 Jun 2026 00:21:47 +0000
asID:                     270160
IP address blocks:        187.102.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:60:cb:18:44:d1:28:0e:79:f0:dd:17:78:27:44:3f:58:ad:ec:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
        Validity
            Not Before: Jun 12 00:16:47 2025 GMT
            Not After : Jun 11 00:21:47 2026 GMT
        Subject: CN=6DE2DE9ED5BD65698DF2D4B32FDB438E32C37E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:1d:99:2b:11:7e:f8:ca:48:73:27:9b:f5:
                    ec:74:02:79:2b:8d:2f:1e:9d:c8:54:95:3d:e4:f8:
                    17:3e:10:9e:b9:49:e8:1c:34:6d:04:00:ab:b2:c9:
                    24:92:5d:f8:78:55:ee:96:7a:d7:aa:9f:1c:66:97:
                    2d:1a:b4:09:03:f2:35:6b:b9:29:e7:33:65:2e:c7:
                    41:14:e8:9d:7e:75:50:2e:f4:b1:ca:ed:c8:2e:5f:
                    25:53:ae:a2:b1:81:c2:37:85:99:f4:65:f5:1c:4e:
                    e5:ae:81:de:dd:1f:47:d3:0d:91:7a:6f:de:0a:fa:
                    90:f8:63:dc:db:44:5d:1c:28:d9:ab:48:e8:70:03:
                    a4:80:2c:52:ca:c9:25:a8:1d:8c:66:75:d8:ae:35:
                    94:0c:d8:c7:1b:ad:27:63:e5:31:80:97:2a:3d:0e:
                    5d:68:cd:bb:86:23:71:45:41:49:9d:d2:4a:40:c8:
                    96:38:f7:95:a2:c2:ae:1f:50:92:c5:78:c7:ca:a9:
                    d8:b6:0f:40:b3:9c:cc:ee:b9:0b:b7:cd:9a:ea:8d:
                    2f:50:11:2d:06:38:6f:11:c7:14:71:4b:fb:95:89:
                    55:53:87:7f:98:c2:0c:c8:c1:6e:20:84:4c:cd:12:
                    4c:28:69:bd:45:80:b7:c9:ad:d7:82:99:f3:28:2e:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E2:DE:9E:D5:BD:65:69:8D:F2:D4:B3:2F:DB:43:8E:32:C3:7E:28
            X509v3 Authority Key Identifier:
                keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3233302e302f32342d3234203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:c2:09:f5:7c:ea:a2:36:bc:30:c7:5f:c1:07:05:5a:c4:
         3d:1b:5a:63:34:91:a4:f0:a1:69:3a:f0:38:b6:6f:45:3f:76:
         a7:32:3a:87:eb:49:c6:42:bb:ab:67:8f:ea:15:e6:3a:e4:af:
         61:b5:4e:a8:ef:18:cc:0f:12:80:07:63:1f:92:a4:4e:e4:7f:
         ad:62:6a:59:48:b0:d0:ff:0a:5f:98:3f:5a:6a:1f:b8:10:06:
         06:7b:2f:24:eb:34:1b:a3:03:54:4a:da:16:b8:ec:25:a7:f2:
         9f:f9:1f:2f:1a:15:ba:58:fa:7b:69:d0:17:ff:38:30:b0:57:
         87:ed:76:98:21:c3:e6:df:85:f5:d9:c8:5c:e5:26:c6:10:fd:
         2d:4b:1a:87:d7:90:dd:37:ed:cd:9f:3e:55:78:a7:b6:e8:f0:
         b4:38:47:4d:46:54:f9:d6:73:3e:0d:9f:91:38:e3:74:e7:92:
         2c:76:ef:39:82:71:d6:61:f1:97:fb:ca:21:28:4c:77:2f:d4:
         40:4e:52:55:3f:08:56:d8:82:3a:ff:35:07:2d:9f:0e:71:41:
         0d:71:65:36:1d:ee:86:6f:17:01:29:09:52:a2:d6:0b:14:f8:
         e7:9b:c1:6d:b0:c1:fb:12:53:c5:39:01:f5:98:77:7e:e4:94:
         92:d0:1f:70
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUf2DLGETRKA558N0XeCdEP1it7PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0QTI5REVCRDU5QzdBMDRFNjE5M0E0MkE1RUZDM0My
NDRCMkQyNzAeFw0yNTA2MTIwMDE2NDdaFw0yNjA2MTEwMDIxNDdaMDMxMTAvBgNV
BAMTKDZERTJERTlFRDVCRDY1Njk4REYyRDRCMzJGREI0MzhFMzJDMzdFMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSB2ZKxF++MpIcyeb9ex0Ankr
jS8enchUlT3k+Bc+EJ65SegcNG0EAKuyySSSXfh4Ve6Weteqnxxmly0atAkD8jVr
uSnnM2Uux0EU6J1+dVAu9LHK7cguXyVTrqKxgcI3hZn0ZfUcTuWugd7dH0fTDZF6
b94K+pD4Y9zbRF0cKNmrSOhwA6SALFLKySWoHYxmddiuNZQM2McbrSdj5TGAlyo9
Dl1ozbuGI3FFQUmd0kpAyJY495Wiwq4fUJLFeMfKqdi2D0CznMzuuQu3zZrqjS9Q
ES0GOG8RxxRxS/uViVVTh3+YwgzIwW4ghEzNEkwoab1FgLfJrdeCmfMoLj9xAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUbeLentW9ZWmN8tSzL9tDjjLDfigwHwYDVR0j
BBgwFoAUOkop3r1Zx6BOYZOkKl78PCRLLScwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQ0FBQ0RCQzIyMkQ2NEQ0OUU1QzJFQkJCN0YyN0Y4NjEw
ODU4OTBFMjY1QjhDNjUxQ0FGNTlDNzI1QUE3RDFFLzAvM0E0QTI5REVCRDU5QzdB
MDRFNjE5M0E0MkE1RUZDM0MyNDRCMkQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTRBMjlERUJENTlDN0EwNEU2
MTkzQTQyQTVFRkMzQzI0NEIyRDI3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0NBQUNEQkMyMjJENjRENDlFNUMyRUJCQjdGMjdGODYxMDg1ODkwRTI2
NUI4QzY1MUNBRjU5QzcyNUFBN0QxRS8wLzMxMzgzNzJlMzEzMDMyMmUzMjMzMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMTM2MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC7
ZuYwDQYJKoZIhvcNAQELBQADggEBAH7Fwgn1fOqiNrwwx1/BBwVaxD0bWmM0kaTw
oWk68Di2b0U/dqcyOofrScZCu6tnj+oV5jrkr2G1TqjvGMwPEoAHYx+SpE7kf61i
allIsND/Cl+YP1pqH7gQBgZ7LyTrNBujA1RK2ha47CWn8p/5Hy8aFbpY+ntp0Bf/
ODCwV4ftdpghw+bfhfXZyFzlJsYQ/S1LGofXkN037c2fPlV4p7bo8LQ4R01GVPnW
cz4Nn5E443Tnkix27zmCcdZh8Zf7yiEoTHcv1EBOUlU/CFbYgjr/NQctnw5xQQ1x
ZTYd7oZvFwEpCVKi1gsU+OebwW2wwfsSU8U5AfWYd37klJLQH3A=
-----END CERTIFICATE-----
Generated at Sun Jun 22 10:31:47 2025 by rpki-client