Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34392e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e34392e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          tiQiXiqmguE5umxmDceGYMS1CH4RyRKTiu0T4TYk4AE=
Subject key identifier:   1E:F7:53:05:AB:80:2E:8A:4A:C3:BF:89:FB:3D:DE:B0:5C:6C:E9:26
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       123FC16B156FB534C77795166A8A73CB57223DE9
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34392e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:49 +0000
ROA not before:           Mon 28 Apr 2025 20:11:49 +0000
ROA not after:            Mon 27 Apr 2026 20:16:49 +0000
asID:                     22313
IP address blocks:        190.103.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3f:c1:6b:15:6f:b5:34:c7:77:95:16:6a:8a:73:cb:57:22:3d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:49 2025 GMT
            Not After : Apr 27 20:16:49 2026 GMT
        Subject: CN=1EF75305AB802E8A4AC3BF89FB3DDEB05C6CE926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:ce:8c:8a:21:04:e8:32:fc:b4:65:16:95:
                    3a:86:ab:af:d5:f1:ce:1f:07:2d:ce:cf:91:3b:92:
                    d0:14:c8:43:86:12:e0:cd:48:92:9f:de:c5:1c:13:
                    42:8c:b2:3e:43:33:ac:1e:29:ea:61:30:4c:f1:d5:
                    60:13:0d:84:5d:fa:88:17:67:5f:18:09:e9:2e:f1:
                    0b:9a:c5:da:3e:4d:a2:b2:66:56:e1:06:71:fe:71:
                    a9:06:4b:de:b0:79:52:0e:89:9e:91:17:1e:db:a1:
                    67:c1:96:51:df:19:6a:2c:a7:79:f1:a5:63:5c:bb:
                    3d:44:6d:cc:fb:89:e2:24:da:07:85:e4:d8:b0:34:
                    fe:e1:48:d1:f1:13:b0:2b:90:8c:68:e3:ec:1f:ac:
                    33:27:0f:21:4b:da:7b:de:51:d4:ad:11:02:c2:ca:
                    00:a5:8d:38:ab:01:d9:29:b5:61:61:63:be:b2:c7:
                    42:27:35:10:9e:7c:ff:8d:80:89:4d:1c:af:56:74:
                    83:bc:a8:97:38:3a:f0:44:80:9d:25:23:46:8b:bb:
                    59:10:57:db:b1:68:1c:ea:25:cd:fe:25:20:87:4f:
                    ac:95:e6:2a:83:24:e6:05:29:25:c2:70:5f:1c:63:
                    da:d4:df:5f:f8:11:7c:e3:c4:c7:60:a5:cf:3e:ae:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F7:53:05:AB:80:2E:8A:4A:C3:BF:89:FB:3D:DE:B0:5C:6C:E9:26
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34392e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:05:03:97:33:69:83:34:4f:a4:b1:b7:20:76:c9:ea:63:c8:
         49:fb:6a:06:9e:81:d5:f8:32:45:ca:1c:55:56:f5:65:c9:41:
         57:ce:19:67:9a:d9:60:80:97:e1:1c:2b:c4:db:32:86:bd:81:
         11:dc:84:9b:10:d2:0c:50:72:f1:fa:99:4d:bd:cf:1d:b3:2f:
         60:62:6c:ee:38:41:96:1a:15:98:95:92:36:e5:d6:b5:ad:60:
         0e:22:11:44:c0:e2:aa:43:cb:a0:dc:24:95:d8:1e:19:33:c4:
         b4:bd:7f:f5:64:2c:39:e9:03:53:be:8e:21:37:22:04:4a:be:
         ed:70:99:d3:a1:af:c6:dc:f9:6e:ab:32:d4:12:76:5a:3c:c6:
         32:9d:c3:0f:c6:23:4c:2a:b6:54:4c:0c:73:f3:b2:d8:d6:74:
         79:b3:6a:1a:d6:bd:8e:7c:27:7b:f9:ee:11:aa:17:ad:1d:4e:
         7f:1c:d9:2d:01:40:e6:3b:1a:d7:ed:60:e5:16:cc:da:c1:e2:
         99:29:66:dc:e4:f4:3f:4d:59:82:47:4b:c5:8a:e9:9f:cf:f4:
         d2:34:6c:75:2e:7b:95:99:a4:23:8a:a3:da:10:48:f7:5b:bb:
         3a:ce:21:8c:78:1f:23:9a:cd:c0:b1:d8:e6:29:d7:55:65:e7:
         d5:d2:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net