Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35382e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e35382e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          r7gj1ar4hmDoGH8ptDL3gQyP2/luC8ntlpc27SpPPZU=
Subject key identifier:   E5:C9:D8:C8:2A:4C:6F:78:7F:06:A0:8A:E5:3B:5C:04:03:FD:76:53
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       1CE510C315A19A278B75E79C3E13084F4BD5C6E6
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35382e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:38 +0000
ROA not before:           Mon 28 Apr 2025 20:11:38 +0000
ROA not after:            Mon 27 Apr 2026 20:16:38 +0000
asID:                     22313
IP address blocks:        190.103.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e5:10:c3:15:a1:9a:27:8b:75:e7:9c:3e:13:08:4f:4b:d5:c6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:38 2025 GMT
            Not After : Apr 27 20:16:38 2026 GMT
        Subject: CN=E5C9D8C82A4C6F787F06A08AE53B5C0403FD7653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:48:1a:0d:7f:fc:22:73:19:50:61:31:27:
                    ae:ea:78:e3:95:67:c9:49:c9:42:d0:1b:f5:69:88:
                    2d:11:a7:51:ea:9c:bb:1a:6f:0f:03:11:59:78:d9:
                    06:bc:37:16:b1:4e:33:54:97:3a:d3:24:a5:00:2c:
                    b5:f6:a2:4b:28:b0:27:27:38:e9:19:93:1a:81:35:
                    a5:9d:2a:30:e2:64:f2:9b:f4:43:84:70:49:1d:bf:
                    3e:e4:4b:49:ad:13:c4:f9:74:4d:bb:62:b0:77:fd:
                    f5:d3:5e:89:a5:34:fa:33:7d:a4:46:02:5d:f1:e7:
                    3d:4d:0b:39:4c:c7:56:45:31:24:ff:5f:4d:44:32:
                    65:61:22:2a:2f:a9:bb:46:80:05:12:18:52:eb:1c:
                    05:58:a9:92:23:6c:6d:23:77:ce:49:7f:ba:4b:98:
                    f2:68:ab:1a:d2:a2:79:f1:a4:de:c4:3f:ac:be:a9:
                    d2:ec:fa:92:d6:86:48:f0:d5:a2:44:4f:79:aa:11:
                    c2:f2:6a:9c:79:64:03:30:39:e7:32:be:8e:26:34:
                    e4:57:b2:27:b4:b9:72:f3:1a:c6:32:e3:20:67:38:
                    7b:e1:5c:d0:38:c8:57:0b:54:1c:33:48:ab:25:60:
                    29:60:fa:52:d5:1f:83:4a:09:54:04:3f:6c:68:3c:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C9:D8:C8:2A:4C:6F:78:7F:06:A0:8A:E5:3B:5C:04:03:FD:76:53
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35382e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:29:4d:7d:a2:e3:24:76:99:ef:94:d7:6a:5c:af:d5:07:f6:
         91:74:48:17:6c:17:3c:1a:d6:7b:26:cf:1b:cc:27:35:31:ee:
         b0:22:8b:36:79:cf:51:de:89:23:61:a3:b0:2a:6c:d7:f8:6b:
         46:2d:c9:f2:dc:1a:c2:33:c8:97:7f:23:3f:76:d2:ad:6f:98:
         18:fa:31:d2:eb:3c:ca:22:45:ec:7d:a9:43:22:69:d6:91:9f:
         af:da:f6:0c:62:12:73:c1:f8:60:3f:e8:b1:cf:51:4e:ca:7e:
         52:c9:62:50:b0:af:da:90:f7:44:d5:e5:74:1a:84:02:54:31:
         64:b2:f8:b1:f1:63:96:3b:ea:26:5a:3d:e3:55:33:37:7c:bb:
         23:bd:4f:00:62:e6:31:54:17:08:bb:6f:1b:1c:49:4f:d4:84:
         76:00:d2:2a:90:e1:7c:ed:1b:46:67:5e:fd:a2:4b:6f:09:75:
         a1:b6:10:19:1d:0f:46:c3:b3:e7:79:8a:be:c7:75:2f:bf:19:
         ab:4d:ac:9c:e7:e8:93:b9:43:df:7f:a9:15:c3:e1:01:3c:af:
         e5:2b:d2:ed:2f:2d:10:da:de:37:dc:4d:8b:04:fb:b2:69:91:
         aa:0b:c7:12:08:73:00:b2:a8:61:d0:62:6b:9c:8f:76:24:78:
         1c:d4:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net