Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231332e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231332e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          WLq8ioXsTySsAgKciOkqBQjlHNrbruBwSPiFQvp2v94=
Subject key identifier:   2D:1D:DA:9C:08:9A:98:8E:EF:33:6E:75:FC:29:09:E2:69:20:65:CB
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       1F7D8D926E4AD898E7EFD1855E208A84B7B348C0
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231332e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 04 Feb 2025 18:36:21 +0000
ROA not before:           Tue 04 Feb 2025 18:31:21 +0000
ROA not after:            Tue 03 Feb 2026 18:36:21 +0000
asID:                     52348
IP address blocks:        190.52.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7d:8d:92:6e:4a:d8:98:e7:ef:d1:85:5e:20:8a:84:b7:b3:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Feb  4 18:31:21 2025 GMT
            Not After : Feb  3 18:36:21 2026 GMT
        Subject: CN=2D1DDA9C089A988EEF336E75FC2909E2692065CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:51:01:d9:e2:1d:de:9a:38:d4:8e:e5:48:
                    07:ab:1c:6d:16:5f:d5:7e:0d:de:7e:fc:22:ff:ce:
                    ec:7d:ce:08:98:4c:cf:06:33:bf:7f:7f:57:16:4b:
                    4c:16:05:f6:41:1c:c3:09:ca:69:ba:7e:16:4e:8d:
                    6d:58:f8:29:ba:4f:af:7d:e4:05:b0:92:ab:a7:83:
                    1d:3a:46:c7:62:6b:01:3f:92:9a:9e:8c:bc:c6:30:
                    24:ce:5c:3c:63:df:c0:93:64:70:91:ce:2e:7d:00:
                    33:65:57:64:80:d5:1c:7c:07:41:82:3c:46:51:7d:
                    62:b8:37:9c:a0:d9:db:47:b9:86:15:f8:16:50:75:
                    b4:8e:c4:7b:d5:76:f8:9f:c9:d5:56:b8:84:7a:b5:
                    31:3f:f3:f3:6d:d5:94:22:5c:af:37:6e:40:90:17:
                    15:4c:d4:e7:22:e8:c1:bf:fb:7b:5a:85:be:a4:ae:
                    95:53:c1:f7:13:3c:b6:61:3f:72:d0:9b:bd:80:1e:
                    a3:fe:4c:04:dc:3f:12:8e:96:95:01:1a:b4:72:2a:
                    ee:89:20:0c:28:43:a5:fd:19:77:55:dc:dd:b3:48:
                    b2:8e:07:0e:23:e7:78:2d:f5:29:03:5b:a3:11:ec:
                    b7:7b:b8:2b:d7:d6:70:0e:47:0a:93:b6:6b:3c:18:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1D:DA:9C:08:9A:98:8E:EF:33:6E:75:FC:29:09:E2:69:20:65:CB
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231332e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:c9:ab:1b:56:ec:8f:e6:fb:b6:59:32:a2:cc:b8:06:17:
         d8:a5:b8:2e:b2:20:d6:ee:fe:30:e6:07:2b:f9:de:47:6a:27:
         95:cc:25:af:14:e9:c2:67:70:b1:22:4c:ab:a4:3c:84:42:22:
         8b:70:0a:bc:4d:3d:d3:25:29:13:5e:40:23:8b:3a:54:2f:47:
         50:fa:e3:69:d6:47:0b:e2:90:b6:c1:82:79:66:4b:ad:c0:a7:
         33:0d:49:87:ec:80:94:32:4a:d1:0a:02:9b:4e:03:c6:4c:f9:
         56:42:a5:b8:d4:5a:3a:6c:91:72:b4:47:8b:5d:ee:ed:21:df:
         30:4e:d9:2f:6c:70:e9:86:6f:0b:a5:eb:9f:a6:ae:d5:4b:a1:
         b4:3a:f4:1e:02:61:0f:e9:dc:e5:aa:6d:84:bd:b8:c3:66:a6:
         6c:43:fa:b1:78:8a:6d:ed:c9:d1:d5:8c:12:12:bb:2c:12:42:
         b9:13:2a:4a:f7:78:72:c7:8d:57:f8:e0:39:86:bb:f2:bd:31:
         20:98:70:db:cc:29:07:f2:23:4d:56:60:c9:51:11:6b:5e:21:
         14:0c:18:e9:fc:60:06:37:bb:cd:45:bc:bf:2c:cb:d7:2c:5c:
         d4:3c:55:4f:1d:65:d7:42:02:3a:0f:88:ad:e9:7d:ba:ae:12:
         d5:d9:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:04 2025 by rpki-client on console.sobornost.net