Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/3139322e36372e32332e302f32342d3234203d3e20323637363930.roa
File:                     3139322e36372e32332e302f32342d3234203d3e20323637363930.roa (raw, json)
Hash identifier:          E9QxwSPmLtfajy9KYd/w4TSVYcXhZn4mq3ZjZMijX9M=
Subject key identifier:   67:56:3F:DA:32:BB:C0:44:AD:6E:51:43:5D:AA:22:C1:DC:E8:EC:A7
Certificate issuer:       /CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
Certificate serial:       150086B44D8A5EFCC66D8D56EB5476BF78C29E73
Authority key identifier: 58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/3139322e36372e32332e302f32342d3234203d3e20323637363930.roa
Signing time:             Tue 22 Apr 2025 18:30:00 +0000
ROA not before:           Tue 22 Apr 2025 18:25:00 +0000
ROA not after:            Tue 21 Apr 2026 18:30:00 +0000
asID:                     267690
IP address blocks:        192.67.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:00:86:b4:4d:8a:5e:fc:c6:6d:8d:56:eb:54:76:bf:78:c2:9e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
        Validity
            Not Before: Apr 22 18:25:00 2025 GMT
            Not After : Apr 21 18:30:00 2026 GMT
        Subject: CN=67563FDA32BBC044AD6E51435DAA22C1DCE8ECA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:3f:04:3b:1b:93:ba:34:b4:0e:c7:e0:3c:
                    e6:17:6a:87:67:36:fb:db:1c:aa:12:40:44:37:3c:
                    82:da:db:4a:1d:53:91:ed:06:3f:05:42:9e:f1:4a:
                    18:ff:8c:c6:be:01:6c:eb:f0:81:86:6d:fb:da:b8:
                    37:4c:ce:ad:41:f3:79:09:a9:23:c5:97:01:5d:23:
                    72:bb:8b:af:c5:b5:fc:be:fb:84:53:bf:f6:cd:bf:
                    96:71:d5:94:ac:72:c9:52:1e:8a:cc:2e:47:3c:1a:
                    7e:9a:10:28:48:6b:2f:22:dd:97:6b:a6:19:41:a5:
                    d2:9e:92:c3:19:7e:24:26:be:08:64:82:64:60:ec:
                    83:97:92:8d:33:e4:07:9f:8e:7a:b9:79:1e:1f:9f:
                    b4:29:fc:2e:df:10:b1:fb:90:ba:48:da:0f:4f:42:
                    4f:f5:1b:33:3f:79:ac:af:09:37:8f:f3:8f:de:05:
                    5d:91:5f:59:11:a9:47:b4:46:58:b5:29:0b:61:b8:
                    fe:3b:bb:c9:62:09:73:75:1f:0c:3b:bc:81:9d:a5:
                    2c:63:8f:54:35:08:16:05:36:4b:70:8a:d4:3f:d2:
                    ff:b4:d6:6d:0d:68:34:02:81:b2:eb:06:bb:11:4a:
                    18:39:6b:41:18:82:76:9f:14:8b:46:e0:49:10:8b:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:3F:DA:32:BB:C0:44:AD:6E:51:43:5D:AA:22:C1:DC:E8:EC:A7
            X509v3 Authority Key Identifier:
                keyid:58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/3139322e36372e32332e302f32342d3234203d3e20323637363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:df:dc:7f:64:c9:20:98:ec:be:f7:02:41:43:ec:40:1e:
         cc:e7:ce:1e:66:b6:88:ec:db:69:11:42:8b:33:ca:b4:ab:5b:
         d1:25:06:73:63:22:7c:e4:25:ee:e5:30:f0:74:1a:e9:8a:b7:
         a5:e5:b1:e3:14:a2:5b:8a:84:4c:b7:49:1c:43:c3:9b:0c:d9:
         d9:6e:9f:5d:8e:d6:62:ca:2b:8d:1a:74:1d:d6:6e:18:24:7a:
         22:94:11:00:e3:65:62:ce:ea:1a:c0:1c:4c:c7:fc:3d:7f:b7:
         44:ff:34:d5:0d:7e:f3:57:3e:9b:0c:c0:bf:8c:52:f4:fd:d3:
         bd:f1:55:33:19:99:85:17:a2:fb:a5:d2:5f:33:5f:f8:d1:63:
         1e:34:e4:a9:83:0f:ed:01:02:9d:aa:23:fc:af:0f:dd:ef:a4:
         43:57:5a:c4:1c:be:3d:e8:9f:92:85:4a:25:ce:38:09:a0:59:
         cc:db:bd:83:f4:3b:c7:d6:08:b9:b3:38:8b:37:5a:d9:19:bf:
         eb:87:fb:8b:54:10:3d:41:09:44:a1:92:c9:57:7d:14:97:a5:
         92:96:ee:63:02:cd:55:ad:25:e2:9d:99:02:07:dd:00:cb:65:
         71:91:50:c9:47:6c:c5:af:00:34:5d:77:c3:90:dd:7a:a2:3a:
         b7:3f:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:09 2025 by rpki-client on console.sobornost.net