Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34362e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e34362e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          up1mBcpjOxUXw4vv+tJ2Qr2TvOMC60piAe3SxalWiPg=
Subject key identifier:   70:11:0E:D7:72:2A:B3:86:BA:E2:82:58:45:09:EC:76:3D:1E:6D:9D
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       58142BB50EE89641A22A9229AA5B9AFC916699AA
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34362e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:34 +0000
ROA not before:           Mon 28 Apr 2025 20:11:34 +0000
ROA not after:            Mon 27 Apr 2026 20:16:34 +0000
asID:                     22313
IP address blocks:        190.103.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:14:2b:b5:0e:e8:96:41:a2:2a:92:29:aa:5b:9a:fc:91:66:99:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:34 2025 GMT
            Not After : Apr 27 20:16:34 2026 GMT
        Subject: CN=70110ED7722AB386BAE282584509EC763D1E6D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:e8:ff:33:ce:16:52:e2:53:3f:79:2e:82:
                    5f:76:5e:98:d5:46:bc:25:81:e8:54:cf:73:8d:72:
                    c1:ad:ce:0e:3f:e1:93:8e:14:f0:e5:c3:36:d6:b1:
                    a8:f4:c4:89:e2:ec:61:5b:b9:3c:d3:65:84:eb:9e:
                    76:77:fa:b6:b0:f4:31:da:7d:43:56:ab:ef:62:d3:
                    e2:f5:73:0e:7f:fb:0a:41:c5:64:1c:76:4b:12:d9:
                    53:94:27:8c:93:65:72:20:ea:e2:7b:62:f7:f5:36:
                    51:7d:ee:7f:e9:3c:c2:68:1f:99:d2:cc:b7:5e:ea:
                    03:da:ed:12:e4:59:1e:a6:cd:a9:1b:fd:dc:ba:8c:
                    ef:5e:64:fc:ae:22:06:af:51:c9:62:13:de:84:a8:
                    6e:bc:0b:1b:4b:5a:37:ad:7d:a9:ec:61:35:f1:ed:
                    31:e4:a6:60:ed:c4:40:0e:58:8c:21:a5:68:12:8c:
                    89:7c:5f:a1:b7:59:cb:bc:d5:7e:ef:cf:6b:92:0e:
                    f9:40:9a:5f:d3:19:76:f1:c5:95:a9:ae:49:fc:5a:
                    0c:4a:b3:a5:90:fe:3f:18:60:1c:27:56:9f:a6:43:
                    fc:ac:1e:89:c2:5e:c9:1a:31:bf:02:e5:07:96:bd:
                    8c:89:79:fd:8a:38:80:54:29:79:1a:b6:3a:be:9f:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:11:0E:D7:72:2A:B3:86:BA:E2:82:58:45:09:EC:76:3D:1E:6D:9D
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34362e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e6:83:5c:2c:19:04:bd:78:3e:24:77:55:ec:2c:3d:32:7f:
         b1:e7:7c:1f:9a:6f:a1:e4:98:e5:01:02:a9:b1:8f:e6:88:ae:
         11:18:cd:e7:0c:e8:0a:9d:c3:bc:b3:13:69:70:0a:83:a6:a9:
         2c:6f:39:42:13:02:a6:d6:6c:43:73:30:42:a5:25:45:63:a3:
         47:f3:c3:06:bb:97:e3:e7:e9:10:d7:0e:d1:a3:e7:04:f6:1a:
         23:06:b6:dc:6e:e0:64:e4:c7:aa:d6:b5:77:08:79:95:88:4b:
         05:2c:95:f4:eb:13:09:8e:62:f3:a5:79:46:a9:b2:27:79:5a:
         96:cf:b4:59:48:4c:02:86:47:8c:81:f9:48:05:5a:10:7c:60:
         85:be:c5:e2:fa:fa:bb:03:16:47:05:c9:33:04:96:75:5b:52:
         c6:c8:6f:8e:38:6c:cc:60:15:a5:42:95:8d:d1:bf:dd:ac:aa:
         4e:73:96:e2:ea:d7:e3:3f:ff:ae:3c:df:f1:2f:1c:2e:eb:4a:
         c8:ce:73:5a:d4:cf:47:77:96:61:ee:da:5a:b2:f3:21:28:a1:
         97:6c:19:f9:62:eb:39:0e:01:00:53:4f:6f:e7:c7:f1:1b:8a:
         a3:6a:d5:28:95:62:7d:05:7a:f7:06:a8:35:98:b3:37:e7:f4:
         19:1f:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net