Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231342e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231342e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          aICsVG7qd4YnyHymR8x2DiWd5dCfKdIE2q9/5yxvM6Y=
Subject key identifier:   42:EA:84:4A:80:07:54:F1:93:2E:ED:F5:72:90:A3:1B:27:90:58:CE
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       30944A944EB5053347963338CF5CB6A33B0BC73E
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231342e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 04 Feb 2025 18:36:28 +0000
ROA not before:           Tue 04 Feb 2025 18:31:28 +0000
ROA not after:            Tue 03 Feb 2026 18:36:28 +0000
asID:                     52348
IP address blocks:        190.52.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:94:4a:94:4e:b5:05:33:47:96:33:38:cf:5c:b6:a3:3b:0b:c7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Feb  4 18:31:28 2025 GMT
            Not After : Feb  3 18:36:28 2026 GMT
        Subject: CN=42EA844A800754F1932EEDF57290A31B279058CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:29:76:a9:21:6f:45:8c:d9:28:c3:56:7d:
                    7d:ce:5e:31:41:24:49:ed:f3:69:31:0d:22:b9:39:
                    82:de:f9:52:27:4e:09:15:82:61:ba:a6:d6:42:77:
                    f5:16:d1:5a:a3:c7:a8:56:d7:a2:9f:3c:85:cc:87:
                    fc:86:17:93:d0:c5:2d:ae:67:90:0b:a2:14:51:b7:
                    a5:b6:0a:12:6e:5f:e3:92:3a:49:d8:8e:a0:d8:30:
                    09:4d:ab:31:36:fa:bb:f3:84:8b:ac:4c:09:47:62:
                    b2:e2:92:3f:01:96:3d:68:7e:e0:2b:df:81:8e:98:
                    b2:12:fb:6d:6a:eb:e9:bf:87:c3:10:f5:8c:dd:f4:
                    f5:4c:c0:2b:82:15:c8:a4:ed:ac:a1:be:c8:7d:cc:
                    05:49:4c:d3:f6:83:f4:3e:d5:4d:9f:80:d1:26:94:
                    25:1c:d8:d5:ed:95:b0:f8:8b:dc:64:d4:a6:71:2b:
                    5e:77:79:27:03:95:30:69:5d:53:37:d2:85:0b:48:
                    56:49:91:77:9e:14:f3:73:3f:9c:a6:37:05:b6:7b:
                    26:79:86:28:e2:7f:84:54:ed:d9:2b:66:60:cd:94:
                    dc:d4:e3:26:02:c7:13:27:e4:96:ad:bc:84:3f:73:
                    c5:de:3a:bd:df:ae:cb:5e:d4:45:1f:e5:90:6d:92:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EA:84:4A:80:07:54:F1:93:2E:ED:F5:72:90:A3:1B:27:90:58:CE
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231342e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:8d:38:ad:09:7c:97:39:bf:7b:05:2f:7c:e8:10:2c:0d:94:
         55:11:23:15:52:3f:dc:f6:40:24:7a:ac:27:66:50:b6:ae:2d:
         86:af:df:81:90:5d:3a:c9:b2:97:5b:1e:e7:36:c7:6e:0d:9f:
         1e:d6:39:e1:63:13:a7:46:08:d1:d1:a0:c7:db:ce:a4:be:d2:
         06:34:ec:25:b0:ed:5b:05:5d:ca:ff:72:03:42:3d:11:bb:da:
         f6:af:f2:b0:75:3f:a6:e3:ce:11:4e:f9:ba:b3:4d:b2:e3:d2:
         c5:09:d4:58:99:10:98:2a:9e:5e:85:64:1b:3f:54:6f:54:6e:
         c2:4c:de:8b:42:72:2e:af:31:51:cd:9e:80:89:4a:65:6f:0d:
         6d:d9:76:5b:83:a2:9e:b8:bb:61:3b:54:a0:98:26:46:c5:b5:
         e6:5a:44:2f:46:24:61:00:ad:8f:a1:3c:dc:bb:dd:2c:09:4f:
         22:4b:d8:69:df:3d:f0:7d:a0:db:b3:9f:dc:0d:15:c0:6b:5b:
         5c:1c:f9:ec:9a:2f:59:97:dd:10:0a:9b:f4:9c:29:67:0f:83:
         a4:b9:19:fc:c0:3f:58:62:4b:3c:23:49:59:75:c3:76:a8:a7:
         38:92:ce:aa:9a:fd:0e:a4:24:c9:19:37:93:cc:9d:67:3a:18:
         73:9e:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:04 2025 by rpki-client on console.sobornost.net