Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33332e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e33332e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          dsmdEkVBq1r2/aYP7lt76lej8mTHlU451BbO/AQu/Gw=
Subject key identifier:   2A:5D:B3:FD:E7:79:3C:F8:3B:55:7D:0D:8D:58:D6:EB:32:A3:AC:4E
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       7C70B1F4C0D7F1B298C2116E814AFCE1F4D677DC
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33332e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:57 +0000
ROA not before:           Mon 28 Apr 2025 20:11:57 +0000
ROA not after:            Mon 27 Apr 2026 20:16:57 +0000
asID:                     22313
IP address blocks:        190.103.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:70:b1:f4:c0:d7:f1:b2:98:c2:11:6e:81:4a:fc:e1:f4:d6:77:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:57 2025 GMT
            Not After : Apr 27 20:16:57 2026 GMT
        Subject: CN=2A5DB3FDE7793CF83B557D0D8D58D6EB32A3AC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:0f:b8:e2:f1:f5:f9:1b:00:a8:d9:8c:63:
                    93:f6:d8:cc:01:a7:b1:31:6e:1d:f3:92:e2:34:c8:
                    b8:53:1e:b6:97:86:fd:9c:7a:87:db:c0:65:72:a4:
                    c4:f7:ca:66:61:5d:96:6d:54:4b:3f:95:48:04:00:
                    de:75:ad:92:05:2c:43:14:65:72:3b:61:26:2c:46:
                    1b:1f:a7:69:84:29:b4:08:03:aa:ad:f5:7c:cd:8b:
                    cd:53:9f:8e:71:ef:68:28:ed:b4:06:4d:e8:52:a3:
                    50:69:82:a3:a4:7e:04:26:f4:84:00:03:70:43:8e:
                    f3:32:77:dc:36:0f:7e:5c:de:df:be:e9:4d:dd:e0:
                    07:db:cd:d3:d6:02:75:25:77:56:ca:74:91:1c:e6:
                    38:cd:41:de:fb:a5:42:bb:20:bc:d8:79:7c:79:aa:
                    a2:65:dc:a3:a2:53:93:75:b2:d7:c3:1e:56:b3:a5:
                    b2:b5:00:f4:fc:8e:df:31:c0:19:0f:e1:85:5b:a9:
                    24:0d:64:06:3f:cc:3d:d4:c5:80:7c:85:36:1b:27:
                    ec:87:81:eb:75:8c:a5:e9:f9:34:53:fc:6f:c1:f7:
                    5e:e7:0e:fe:40:35:d8:37:65:ca:4f:4d:7a:bb:95:
                    7f:cd:e7:fe:f0:14:8d:85:2f:1a:00:05:25:ba:bd:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5D:B3:FD:E7:79:3C:F8:3B:55:7D:0D:8D:58:D6:EB:32:A3:AC:4E
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33332e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:77:8a:47:52:66:34:d2:99:f8:0c:17:99:d5:8d:f5:b3:
         c3:06:2f:82:8c:19:aa:7c:0f:5d:92:49:1e:c5:a6:aa:2b:f5:
         10:52:b7:29:ed:bb:9d:7a:f8:89:04:34:27:d9:0c:57:c6:86:
         23:2b:29:5e:58:bd:a4:46:25:ac:97:b2:ba:11:6d:7c:63:38:
         1d:21:a3:6a:e9:56:90:b3:d9:c6:23:fe:32:88:13:95:bb:2b:
         4f:63:51:61:0c:aa:c6:0d:98:24:4d:17:ec:b5:66:3b:7e:fc:
         f8:da:2c:a1:8d:3a:43:92:ba:ce:05:ee:15:8a:e6:da:ea:91:
         c4:f9:13:38:7d:d1:36:fc:d3:fa:c7:d3:59:fb:2d:f8:bf:59:
         81:3d:40:60:e9:fb:33:e6:24:aa:f2:4e:c9:b7:5e:de:78:07:
         eb:78:96:ce:6b:a9:c6:48:80:cd:cd:2c:64:61:43:0b:e4:22:
         36:21:d7:87:c3:ae:8c:01:41:4d:84:cd:6c:3d:7a:0a:d0:a6:
         40:c4:35:73:93:dc:7c:f8:31:04:06:db:65:8d:a0:ca:96:b1:
         e7:e5:15:f9:90:b0:88:ed:03:f0:b5:60:24:14:20:01:02:30:
         72:39:8f:81:43:d4:1c:48:73:1f:e2:99:36:93:62:d7:a2:a1:
         cb:fb:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net