Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34372e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e34372e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          PIoKh8X1En3Vbd5JfIvj2fKXLSnvexRxyd090Jgqv0Q=
Subject key identifier:   88:3D:0D:1D:29:4F:D8:4F:C7:91:78:07:B9:00:B0:78:4D:CA:BA:BF
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       2756ABF7850E351F3C4305AD822F4012DE01C8F2
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34372e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:38 +0000
ROA not before:           Mon 28 Apr 2025 20:11:38 +0000
ROA not after:            Mon 27 Apr 2026 20:16:38 +0000
asID:                     22313
IP address blocks:        190.103.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:56:ab:f7:85:0e:35:1f:3c:43:05:ad:82:2f:40:12:de:01:c8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:38 2025 GMT
            Not After : Apr 27 20:16:38 2026 GMT
        Subject: CN=883D0D1D294FD84FC7917807B900B0784DCABABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:97:ca:73:74:b4:b9:4b:f9:3a:92:20:98:
                    8f:bb:08:32:96:78:0f:f1:c6:4a:85:27:c9:1c:7c:
                    88:d5:90:97:11:0d:82:dc:f9:8d:2f:a7:fb:33:0a:
                    c7:2a:5f:73:21:40:54:ec:78:b7:bd:6a:33:ee:d8:
                    3f:cd:71:82:c2:9f:5e:62:fb:41:c0:25:8c:80:2e:
                    0c:dd:44:2d:db:4d:fe:33:b9:b8:4f:42:bf:6c:fe:
                    2e:9c:ab:59:0b:0a:72:9c:8d:cb:95:cf:75:85:ae:
                    50:3a:df:fd:01:15:44:11:a1:11:61:2e:0b:f7:54:
                    db:4d:cc:2e:c4:bd:54:fe:c8:a1:78:e6:ac:0b:7e:
                    85:fb:05:63:ac:61:96:c8:ec:f2:29:a5:79:02:75:
                    bc:c6:0c:a8:e5:88:52:fd:92:52:2f:aa:c1:a8:30:
                    3e:a5:27:cf:38:10:3d:e4:8d:03:d7:ce:71:49:26:
                    bd:db:ad:ec:f3:85:85:4e:6e:e3:57:bd:6c:50:4d:
                    34:a2:7f:71:aa:71:10:37:26:eb:b0:07:68:03:08:
                    e3:ba:80:97:33:cc:e8:43:7e:e9:41:17:ec:be:61:
                    e4:4c:22:dc:e8:de:4e:39:0c:4d:8b:48:42:c5:b4:
                    81:5a:1f:61:28:c5:f8:f0:77:c7:e2:28:01:6d:9e:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3D:0D:1D:29:4F:D8:4F:C7:91:78:07:B9:00:B0:78:4D:CA:BA:BF
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34372e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:93:38:99:86:1d:43:3d:d8:cc:67:3b:2e:10:2d:e2:0d:
         cb:10:87:83:00:69:1a:d2:d8:4e:49:41:f7:17:a2:02:72:23:
         c4:fa:aa:56:a7:4d:68:46:6c:59:d2:dc:1b:17:97:a8:02:cb:
         83:ba:01:99:b7:66:1b:00:30:49:d8:ff:fe:59:f8:8c:68:91:
         01:ea:71:f3:fd:0b:a0:bc:c6:76:c2:50:fe:99:95:2c:b4:65:
         b3:b6:4e:d3:b6:df:1a:98:04:35:c9:d3:6a:92:81:dc:26:25:
         00:7f:3b:e4:3e:af:a7:47:dc:9d:30:7f:01:ce:02:39:79:ab:
         8c:5e:83:5c:5c:57:47:78:30:a0:20:e2:d2:6e:93:ad:52:5a:
         51:5f:22:c9:47:2e:26:e6:b5:4a:2c:b2:fc:aa:87:f7:1f:63:
         81:9c:c5:4b:19:73:26:7f:81:b5:ea:27:77:d8:85:e0:20:58:
         76:70:ff:b9:00:3c:01:f8:86:38:3d:20:52:21:d1:59:a0:0e:
         af:9b:e6:dc:5a:df:0a:f5:5c:08:5d:1e:52:47:e7:7d:f3:29:
         d3:11:2d:15:65:ac:3e:69:61:46:5a:4a:95:c7:c4:ca:78:1d:
         1a:40:1e:99:8b:df:25:b3:01:36:68:6d:69:be:6d:68:ae:16:
         65:2e:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net