Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34302e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e34302e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          e3mo9asDoJZFO28wXnM0LvRZA8XBp9OUH7FV2NH6EpI=
Subject key identifier:   03:65:04:A8:84:A1:74:D1:59:9B:D9:5D:5F:12:14:F1:76:0F:40:79
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4F914BB296CEE0666AF8E5C8CB8E489D73F42374
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34302e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:31 +0000
ROA not before:           Mon 28 Apr 2025 20:11:31 +0000
ROA not after:            Mon 27 Apr 2026 20:16:31 +0000
asID:                     22313
IP address blocks:        190.103.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:91:4b:b2:96:ce:e0:66:6a:f8:e5:c8:cb:8e:48:9d:73:f4:23:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:31 2025 GMT
            Not After : Apr 27 20:16:31 2026 GMT
        Subject: CN=036504A884A174D1599BD95D5F1214F1760F4079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7c:43:a2:28:9a:e8:2b:0c:4d:35:ac:98:2d:
                    72:b5:fa:4d:34:6d:93:6a:8b:bd:66:d4:ea:ea:37:
                    64:05:01:6d:62:fd:5f:c9:da:14:64:e3:84:df:4d:
                    c9:cc:56:30:74:6c:a5:94:05:5e:68:03:45:b4:64:
                    e9:cf:f0:2d:3a:54:8a:c8:39:4a:84:6c:47:1a:7a:
                    1e:f0:50:32:9a:ab:b1:d5:ca:1f:1d:33:42:a2:b6:
                    7f:cd:d3:60:24:ec:25:87:0d:2f:a8:bd:67:e8:0d:
                    5e:50:e2:10:4a:46:25:61:cb:26:17:f0:04:01:84:
                    0b:dd:a5:c4:16:7b:45:21:d7:3d:92:2c:ef:f2:f6:
                    5d:0f:1a:61:a9:9d:00:20:3c:06:a4:ba:d2:78:08:
                    79:6a:2e:3b:2a:4d:4d:b7:d5:eb:3b:1a:a3:fc:f1:
                    18:ff:58:2b:9f:83:88:fb:58:b6:93:ce:ad:30:e7:
                    d4:94:b2:66:9b:85:68:64:18:11:bc:e4:9b:7a:52:
                    e7:f3:89:d7:f8:46:6b:b9:67:75:ae:78:6f:52:15:
                    08:84:23:0a:ca:ee:d8:e0:bb:f0:d3:84:22:ff:fc:
                    01:50:ce:b8:9b:77:c5:b4:60:de:10:6a:ed:cd:e8:
                    f4:26:4c:98:92:f9:1b:30:67:56:28:04:96:6b:99:
                    5f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:04:A8:84:A1:74:D1:59:9B:D9:5D:5F:12:14:F1:76:0F:40:79
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34302e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d4:03:de:79:e2:48:a8:9b:28:29:4b:e2:a9:01:52:eb:a2:
         a0:07:88:a8:1e:c7:22:b5:3e:12:ef:5c:d3:b5:39:49:8b:25:
         73:07:70:47:7c:3d:38:c5:5b:03:21:32:c7:9c:68:e9:ee:f6:
         01:6e:30:01:4b:07:29:68:9a:6a:66:81:61:dc:55:91:8f:cd:
         fd:56:b1:8a:a9:ec:0f:ba:e5:8c:d3:34:ea:2b:e8:ce:b2:d6:
         c4:8b:e9:01:a4:51:c6:39:c6:8b:f4:12:78:09:a7:3c:79:a7:
         f7:c2:5f:72:86:d2:f9:4f:32:1e:26:e5:a7:40:b2:94:e6:5c:
         23:3d:55:9a:b4:4f:03:9c:67:2a:b6:49:27:c0:a8:3d:bf:05:
         19:4b:f6:10:aa:f2:d6:77:1a:38:bd:d1:09:9a:ed:43:05:17:
         d4:01:74:34:c0:27:26:21:bd:cc:42:30:5b:83:6d:fa:26:d9:
         af:37:c8:8b:dd:59:8e:f4:c4:b0:0c:d3:56:a1:6c:a7:ff:8e:
         f9:6e:05:79:dc:53:4b:3a:4c:00:b1:fe:19:81:b6:42:45:2e:
         08:45:d3:b6:e1:8a:2f:4e:4b:0c:d1:bb:c8:b3:9f:4d:2e:31:
         d9:e5:1f:44:9c:02:60:4f:6c:b4:f0:1a:8c:d5:cb:54:b4:ef:
         1d:e2:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net