Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36302e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e36302e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          u/MU2C9C+5hMeu7IOgsg+1ikN2zczkjUi8ferKWVziE=
Subject key identifier:   C1:30:5E:12:A8:3C:05:C6:57:A8:A4:A6:65:C8:BE:C8:4B:A0:4A:4F
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       118231AAA7CFFEA3D4C0E82EC0F46C716C38F268
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36302e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:53 +0000
ROA not before:           Mon 28 Apr 2025 20:11:53 +0000
ROA not after:            Mon 27 Apr 2026 20:16:53 +0000
asID:                     22313
IP address blocks:        190.103.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:82:31:aa:a7:cf:fe:a3:d4:c0:e8:2e:c0:f4:6c:71:6c:38:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:53 2025 GMT
            Not After : Apr 27 20:16:53 2026 GMT
        Subject: CN=C1305E12A83C05C657A8A4A665C8BEC84BA04A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:ba:dd:58:90:1c:3e:4e:b3:1e:30:59:be:
                    de:33:83:3f:07:72:d7:e4:3d:52:9d:d4:90:64:2a:
                    da:66:9c:41:5d:d1:9b:88:8d:20:e5:95:e0:40:eb:
                    35:8d:6d:b0:dd:ac:4d:3f:75:9f:03:c2:c6:84:92:
                    ba:56:86:ea:c3:49:65:68:0d:c0:4d:e5:da:ac:48:
                    6a:9b:fa:ae:9d:83:89:d3:24:6f:79:89:e8:e5:31:
                    00:e3:f3:2e:eb:eb:a0:97:b7:56:df:e2:d6:33:6a:
                    8c:0c:98:18:0c:b9:00:ce:a7:10:52:5b:e4:2b:6f:
                    59:2d:db:fa:8a:11:36:98:bc:86:be:2c:ce:b6:30:
                    fa:8a:75:90:58:97:9e:8b:21:11:fc:07:03:0a:ab:
                    0d:54:33:ed:7d:70:fc:60:38:f9:2f:1f:f0:65:98:
                    7f:33:e6:24:2d:80:fb:79:bc:35:f0:64:63:b1:36:
                    e0:84:68:de:4a:fc:bc:1a:56:54:2c:ec:38:b7:6a:
                    e9:f4:77:fd:13:30:ae:05:45:46:de:2f:ad:24:f8:
                    31:11:d4:ad:88:93:9b:95:4b:45:65:18:ef:b2:15:
                    ec:59:9f:25:71:da:55:b5:e6:3d:42:30:7c:a4:89:
                    d6:8d:1f:9e:1d:40:7d:6e:72:eb:76:7c:38:a2:d9:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:30:5E:12:A8:3C:05:C6:57:A8:A4:A6:65:C8:BE:C8:4B:A0:4A:4F
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36302e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:65:dc:46:d9:a8:e8:a3:69:24:1d:fc:35:04:9b:2d:12:e1:
         90:d1:88:30:2b:70:8a:d9:fe:5e:9d:e0:46:f2:f4:ec:f5:82:
         99:4a:e7:16:da:eb:9a:17:15:2e:22:e0:2f:ab:8f:9c:50:25:
         ed:22:13:c7:c1:25:80:42:6e:ea:f6:51:14:d1:02:18:50:25:
         ff:e3:82:b1:ef:eb:ff:ce:37:b5:9b:1b:dc:8e:bb:b2:de:1b:
         f8:ee:8b:bf:33:71:70:15:19:53:80:e0:98:b1:66:88:6b:9d:
         9e:11:d6:2e:71:4f:1c:3e:e4:07:c9:f0:27:eb:93:59:97:24:
         d5:ff:12:fc:20:f6:88:ed:29:57:83:b0:ce:90:8f:49:66:7a:
         b1:d8:e7:34:45:0d:83:8a:b8:17:3f:27:f3:55:7c:74:a3:d9:
         5b:70:32:c4:e9:b2:41:2f:14:eb:eb:e2:23:43:7d:14:05:4b:
         9f:28:54:95:bb:71:0e:c1:36:83:f6:97:40:71:8b:9e:65:70:
         89:4c:9c:9d:88:55:5a:d9:09:d2:af:06:3e:51:81:ac:a3:20:
         1f:1e:7e:b9:fd:f1:76:7f:39:b0:47:c2:dd:45:6b:0c:c2:6f:
         95:11:86:22:be:5c:b1:ce:cc:b6:d5:a3:5e:57:de:1e:32:a3:
         29:ee:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net