Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33322e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e33322e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          uVK1H49WyXbJ36HMAIuu1vktLCVoGc8jzr5L7nJ3YZc=
Subject key identifier:   F9:18:93:2A:B9:64:76:BA:1C:9A:CB:27:06:F9:AC:91:B6:EB:90:4F
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       3DC9C49329F4C3F8A4229B3DCCBA46C322AAEEFA
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33322e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:54 +0000
ROA not before:           Mon 28 Apr 2025 20:11:54 +0000
ROA not after:            Mon 27 Apr 2026 20:16:54 +0000
asID:                     22313
IP address blocks:        190.103.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c9:c4:93:29:f4:c3:f8:a4:22:9b:3d:cc:ba:46:c3:22:aa:ee:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:54 2025 GMT
            Not After : Apr 27 20:16:54 2026 GMT
        Subject: CN=F918932AB96476BA1C9ACB2706F9AC91B6EB904F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:18:b3:0a:b4:75:b2:79:1c:7c:2a:c9:54:
                    81:79:52:a7:82:4d:8a:3f:c0:ec:eb:d7:3d:e5:48:
                    50:ed:64:e1:af:35:f4:5d:21:b7:24:6e:05:8c:49:
                    8c:28:af:52:d1:4c:52:e8:09:0a:83:f6:c3:0d:e7:
                    50:2a:eb:c6:61:92:bb:95:ea:53:8b:9f:7d:21:31:
                    d6:74:fe:7b:62:5e:86:67:20:a5:8a:8b:34:06:e4:
                    b3:a9:cb:0e:75:ab:cf:53:66:19:4c:4f:73:8e:20:
                    27:d1:1c:a3:c8:98:e1:5d:70:6c:9f:e5:f9:39:f2:
                    40:c0:9c:3b:de:12:f2:9d:42:88:2c:53:37:fc:60:
                    ec:7e:30:e1:2a:0d:86:ff:41:3e:85:1b:f0:88:7f:
                    3d:72:db:21:eb:66:a9:0a:25:20:a3:7a:58:be:e4:
                    e6:96:b5:59:eb:44:ab:b1:2c:2e:25:74:91:c1:3c:
                    e6:af:78:cf:2a:0c:c0:92:e5:eb:b7:9c:a2:14:7b:
                    4e:18:bf:12:b8:dc:e7:70:b5:2f:d4:be:4d:c8:df:
                    32:06:d4:8e:1f:bf:7b:f9:fc:2d:f7:6d:d4:45:f2:
                    e5:8a:b0:04:38:a5:5d:e8:93:b2:ad:5a:fc:7d:82:
                    e7:dd:24:76:f3:aa:4f:e0:54:ed:c7:24:89:49:38:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:18:93:2A:B9:64:76:BA:1C:9A:CB:27:06:F9:AC:91:B6:EB:90:4F
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33322e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:85:21:7e:5c:f5:34:e5:b0:be:2f:b4:c6:b3:02:e0:37:99:
         28:8b:b2:fd:c0:c1:58:1b:ef:65:ad:94:71:e8:89:77:7a:c0:
         19:42:4a:b0:48:92:b8:ac:c3:1a:e6:23:fb:6d:9c:24:af:2b:
         aa:93:f6:cd:ac:ac:7d:1d:ca:4a:4f:01:08:f0:1f:51:fb:f6:
         a4:16:d3:f8:86:ba:92:e2:c9:ef:c3:39:91:fd:e9:93:22:5d:
         12:98:bb:c1:a0:82:5b:fe:12:de:13:53:49:46:47:5a:7f:e1:
         3f:d7:ae:54:a1:37:b0:59:5b:50:ca:84:b5:71:e8:ce:be:51:
         70:13:07:6f:b1:74:53:1b:d7:c4:a1:ac:a5:c2:3e:45:a5:95:
         8c:63:54:1e:f1:bc:58:21:3e:e9:64:fa:2a:72:2b:7e:fd:9b:
         35:7f:d4:bb:aa:57:8f:85:8d:ca:0e:af:56:89:e6:97:3f:fe:
         d0:6a:8a:56:23:65:bb:70:a7:23:fb:71:be:da:47:9b:c6:9b:
         16:a5:47:28:17:a8:2d:5a:92:5e:e5:81:f9:f5:b3:32:d6:ff:
         c7:2a:c1:04:5e:d4:44:5d:c8:33:1f:8d:53:a4:08:1b:69:26:
         86:12:82:e1:23:e1:74:51:c7:4f:74:98:f8:c9:12:81:7b:6d:
         33:cd:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net