Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36332e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e36332e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          0v56Cl7nPpwkyTNzacnqVXKdVvNz7Pi4YtrtmcqDu+M=
Subject key identifier:   46:DA:31:6C:8D:80:57:15:64:8F:C6:83:8A:45:2D:9E:E9:76:19:A6
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       434BC48D8B91CEB223662A0400E3DD0BC8E52ECB
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36332e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:35 +0000
ROA not before:           Mon 28 Apr 2025 20:11:35 +0000
ROA not after:            Mon 27 Apr 2026 20:16:35 +0000
asID:                     22313
IP address blocks:        190.103.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4b:c4:8d:8b:91:ce:b2:23:66:2a:04:00:e3:dd:0b:c8:e5:2e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:35 2025 GMT
            Not After : Apr 27 20:16:35 2026 GMT
        Subject: CN=46DA316C8D805715648FC6838A452D9EE97619A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:78:72:20:6c:c7:f3:86:4b:44:22:bb:28:
                    52:6f:d9:b5:bf:1d:b7:ab:77:4b:77:93:54:f3:c9:
                    64:99:2e:71:71:e8:ba:d5:a1:53:63:48:68:7b:78:
                    38:b3:11:f4:76:f8:a7:c6:f8:f8:a5:87:89:96:a1:
                    ba:6e:82:89:b4:58:b6:b9:7b:16:80:8e:a0:97:29:
                    8a:42:15:9b:7e:3e:ff:b8:34:4f:f2:30:46:ff:aa:
                    ce:e1:2c:10:48:b4:7f:03:56:e3:3b:0f:6b:19:b5:
                    1f:29:15:26:4a:79:17:96:56:a4:fb:90:7a:46:b6:
                    0b:2f:b7:b5:7a:ed:82:55:08:15:b5:1e:1b:2f:01:
                    7d:75:3f:ac:6a:fb:b6:e2:9d:4b:0a:d1:eb:06:1a:
                    90:0a:93:ed:af:7a:55:de:9d:41:e9:2b:65:0e:fe:
                    0a:84:76:90:81:09:b7:3b:fc:cc:81:43:51:e9:92:
                    e4:18:b6:5b:eb:d3:c9:53:8d:ce:d9:9d:75:36:6f:
                    e7:23:14:14:fe:a6:7d:72:76:a1:37:df:95:00:9c:
                    16:00:de:ba:e5:b6:f7:ba:ab:65:7d:df:a5:0a:83:
                    c9:ec:c9:f7:a4:4a:c6:37:f8:12:23:80:e2:19:47:
                    71:f1:22:79:a2:bd:e7:27:b6:8a:0f:9e:39:dd:39:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DA:31:6C:8D:80:57:15:64:8F:C6:83:8A:45:2D:9E:E9:76:19:A6
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36332e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:b6:02:f9:50:fc:49:19:20:3e:0c:5b:60:a6:8b:0d:2d:
         66:a1:e5:77:cf:fd:82:54:8b:96:e3:a2:61:b4:fc:8e:76:e3:
         15:60:48:88:22:74:26:02:0b:21:0e:a5:59:fe:b7:cd:0a:9f:
         3d:f8:1c:0c:c5:a6:fa:52:80:70:37:7e:1e:96:5d:c2:5f:67:
         2b:63:ac:0b:c6:60:2f:7b:de:a2:d5:a9:1b:ba:31:d1:02:c7:
         b4:b5:fd:50:ed:d0:b3:89:40:3f:a5:ff:cc:96:2f:3f:8c:30:
         5e:e3:f9:f4:94:6b:30:52:38:52:ae:53:39:f4:f4:d9:e3:4e:
         5b:3c:f1:19:55:83:65:fc:57:27:66:eb:5a:48:e3:8c:aa:bc:
         95:48:e1:c2:ec:0e:b9:6a:7d:86:b0:a2:98:ba:cb:2e:b1:d2:
         bc:35:e1:04:a0:76:9d:bb:58:13:a7:d3:a4:37:0d:29:e8:9b:
         c5:ea:9a:97:d9:fb:e9:a5:96:61:99:fd:e5:4b:3c:b6:8c:41:
         88:c6:7c:09:35:b4:20:b3:53:9f:bf:30:ab:8e:ad:2c:f9:ce:
         27:fd:45:b4:31:d2:a0:6f:55:a1:2b:be:fc:6a:67:8d:5c:57:
         e6:fb:ac:e7:ac:16:b1:ea:43:e5:c8:78:2f:8a:30:ac:88:17:
         27:7e:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net