Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36312e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e36312e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          po4zqHM7nJFf8OWB14iRdGLCYwCmwWeSjghUpz4c+oc=
Subject key identifier:   5E:FD:E3:03:06:FD:FC:EF:4C:A0:61:99:C8:D4:09:28:28:76:52:29
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       23C0D8154A06A10034D384F9F89D2F9BA88BD069
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36312e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:34 +0000
ROA not before:           Mon 28 Apr 2025 20:11:34 +0000
ROA not after:            Mon 27 Apr 2026 20:16:34 +0000
asID:                     22313
IP address blocks:        190.103.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c0:d8:15:4a:06:a1:00:34:d3:84:f9:f8:9d:2f:9b:a8:8b:d0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:34 2025 GMT
            Not After : Apr 27 20:16:34 2026 GMT
        Subject: CN=5EFDE30306FDFCEF4CA06199C8D4092828765229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:e1:06:9d:3d:6d:72:73:43:da:91:57:cf:
                    ca:3c:0c:ca:e7:10:c4:40:ce:9d:14:4b:29:5a:bc:
                    88:ed:45:27:af:1f:b4:56:13:04:14:33:cc:b2:4f:
                    53:fd:14:ba:46:86:92:fd:63:36:00:f3:e6:e5:59:
                    cc:1c:37:0a:d7:8d:e6:33:f7:6f:05:e0:0c:10:31:
                    d4:55:85:a4:ae:58:5a:15:00:2b:63:fb:95:0c:4d:
                    28:1f:08:df:8d:e5:4a:56:3a:6e:fb:fc:1d:61:fc:
                    49:bc:46:a4:bc:92:d4:51:aa:f9:18:ac:fb:e8:ab:
                    30:69:8b:94:e9:a5:62:bc:65:eb:ba:0e:a1:f9:4e:
                    b6:47:d2:b4:20:f2:5a:d1:6d:8c:0b:4d:62:c0:c8:
                    75:47:dd:db:6d:3d:2f:d8:65:05:92:09:1b:e0:63:
                    99:18:e1:e9:54:54:14:0d:86:44:ae:a0:fd:96:57:
                    b5:24:70:aa:85:1d:e7:0c:0e:ca:26:94:a0:3d:9f:
                    5c:d9:a2:3a:c6:97:09:07:f7:6e:98:5d:6d:18:12:
                    61:22:1d:b8:b5:bf:90:0f:00:3d:a7:e9:42:9e:3f:
                    2b:d6:ee:63:74:aa:9d:71:83:40:b6:77:63:a4:92:
                    0e:1c:d8:59:9a:54:26:0f:11:57:8e:f6:07:fc:20:
                    98:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FD:E3:03:06:FD:FC:EF:4C:A0:61:99:C8:D4:09:28:28:76:52:29
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36312e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:2b:06:42:03:30:03:df:74:fd:5a:3d:6d:fa:b6:8f:18:03:
         44:d7:3b:d6:07:e6:5f:9b:d7:52:9f:7f:25:36:46:fc:cd:23:
         94:b9:ce:f6:ab:8f:8a:1e:f7:7b:ba:9c:c9:88:bc:4b:4c:cf:
         88:26:ea:0b:f3:c2:f2:21:7f:51:b8:f8:49:fe:54:b8:60:c2:
         26:4f:ae:5b:5a:45:60:38:b9:1d:b8:76:03:26:7f:f4:38:ed:
         01:95:7f:4c:82:0f:80:f1:cc:d1:e1:12:79:d0:eb:a7:2b:f1:
         ca:cb:c7:e9:3a:3d:94:86:04:bb:25:da:87:98:8b:7a:03:9b:
         09:39:30:4b:7c:c6:59:d2:82:66:94:a5:c2:ba:eb:cf:de:99:
         84:a2:23:2f:47:f6:f3:da:6b:71:2c:d6:8e:2f:31:7e:d8:96:
         5e:14:79:2d:33:ed:23:73:80:db:6a:c7:f7:58:28:e5:d8:22:
         08:8b:a7:f2:9d:8f:0a:37:ad:18:61:2d:a7:f5:af:7e:77:8b:
         91:27:87:5b:f6:9a:e2:66:bd:1b:58:0d:2c:67:cf:d5:cf:dc:
         f7:3e:06:ba:29:ce:65:09:d7:93:1a:03:b5:4c:6a:7d:b2:10:
         51:f0:5b:2c:9b:24:9c:e9:76:cb:05:1d:43:b0:97:81:f8:7f:
         c8:e8:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net