Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35322e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e35322e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          qUWe41Wu6lm3FmARrxfMURSSmUrIGY5DH2bx2n2916I=
Subject key identifier:   DF:B3:7F:BF:02:DE:A4:34:1A:02:B1:2D:38:42:7B:E0:8D:0A:D0:28
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       6FD666BFD22EDFA99F76FED55D6B72F9FF6D2948
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35322e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:52 +0000
ROA not before:           Mon 28 Apr 2025 20:11:52 +0000
ROA not after:            Mon 27 Apr 2026 20:16:52 +0000
asID:                     22313
IP address blocks:        190.103.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d6:66:bf:d2:2e:df:a9:9f:76:fe:d5:5d:6b:72:f9:ff:6d:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:52 2025 GMT
            Not After : Apr 27 20:16:52 2026 GMT
        Subject: CN=DFB37FBF02DEA4341A02B12D38427BE08D0AD028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:4a:b3:e6:89:06:df:b2:44:42:d8:20:39:
                    7d:82:3a:4e:cf:34:7f:0a:b1:92:b0:81:85:36:d1:
                    c8:68:cc:76:f9:40:17:bd:af:c2:63:be:81:30:b8:
                    b8:ba:b1:4b:1d:1f:35:b0:e7:63:55:be:21:bb:6f:
                    8a:c4:6d:10:25:c1:a1:06:0f:6e:02:30:4d:7f:bc:
                    2c:c8:63:a6:be:3e:76:6d:64:5e:bf:9a:04:b2:d0:
                    0c:52:e5:7e:76:3a:c9:f7:50:cc:31:f1:fd:30:21:
                    b5:65:75:39:bb:2b:44:fe:ea:6e:f6:bd:78:20:bc:
                    68:54:a7:34:41:7d:78:03:0f:68:ee:8d:3c:d9:8c:
                    97:a3:d3:48:60:6b:63:e6:21:7f:d7:de:d8:d7:85:
                    73:cb:5a:d9:13:55:0c:96:a9:56:4f:0e:45:42:27:
                    ad:c3:11:92:60:4a:19:1b:b5:90:fe:7a:e3:a0:42:
                    7a:64:cd:11:42:82:ad:b4:c8:7b:44:d9:7b:39:93:
                    5b:dc:b2:6b:88:b3:57:cd:a5:cc:da:14:a8:ef:6a:
                    ee:6a:e1:4d:b2:26:a4:b3:4d:35:3d:1a:12:a3:c9:
                    59:46:b4:2e:f4:82:7e:75:c9:88:06:27:15:08:9b:
                    79:e0:5b:cc:78:77:71:c0:b7:ce:04:85:87:42:9c:
                    ff:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:7F:BF:02:DE:A4:34:1A:02:B1:2D:38:42:7B:E0:8D:0A:D0:28
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35322e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:75:16:a2:4b:67:97:f4:ce:83:41:47:27:0d:c9:79:3b:
         e0:26:6a:0d:60:a9:2e:23:93:54:17:40:cc:c1:6a:c4:81:bb:
         75:bb:e0:54:9e:5e:b7:9f:38:b7:42:f3:d8:ad:b6:44:7f:4d:
         09:ac:4c:01:9e:d6:0c:e1:0a:09:b2:79:8e:84:06:17:32:0d:
         ab:d9:9e:8f:9e:a1:f4:f8:6b:8f:10:8a:47:49:c7:bc:1d:d5:
         ea:45:05:d8:6e:63:ba:47:7e:40:d8:34:ea:19:3a:a1:74:94:
         56:49:a1:7d:90:56:5e:a0:20:9f:af:4e:6b:72:1f:72:d7:81:
         27:32:7d:17:8a:0d:7e:9e:6b:47:51:99:b4:5e:ce:dc:b2:e7:
         01:30:01:ca:9d:12:8a:be:1d:c8:62:92:e4:13:8f:11:58:99:
         09:a9:98:39:e5:92:05:3f:99:7d:5d:57:68:9a:0c:5b:61:18:
         8a:f4:10:5a:2a:ab:79:01:64:c3:2a:95:60:c7:88:f2:74:b2:
         43:9b:13:b3:da:ea:53:bb:6a:72:6d:bf:99:36:ea:8f:42:91:
         eb:39:22:ca:e8:3b:bf:a1:f7:9c:6b:2b:62:a9:be:35:22:28:
         17:5d:e8:fd:28:c3:5d:c0:31:ec:1f:a3:93:80:f0:11:fc:60:
         36:43:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net