Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          VFoCNqibbfAttadAbnSrpQRxy93Yma7Hc9PsYwOnVBI=
Subject key identifier:   CF:43:59:8A:12:27:BE:8B:22:6C:3F:D1:47:96:15:B6:D8:90:79:FF
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       7D938395CB2B541BCCA64E8280AFECE7D9C6F1E8
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:46 +0000
ROA not before:           Mon 28 Apr 2025 20:11:46 +0000
ROA not after:            Mon 27 Apr 2026 20:16:46 +0000
asID:                     22313
IP address blocks:        190.123.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:93:83:95:cb:2b:54:1b:cc:a6:4e:82:80:af:ec:e7:d9:c6:f1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:46 2025 GMT
            Not After : Apr 27 20:16:46 2026 GMT
        Subject: CN=CF43598A1227BE8B226C3FD1479615B6D89079FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:8c:51:cc:22:38:7b:16:9a:25:c8:28:1a:
                    78:fb:3f:67:0f:37:b1:7d:6f:ea:97:41:8e:1a:9e:
                    c5:01:af:e9:b3:c6:70:58:7c:a7:04:af:0e:a8:23:
                    9b:9b:b5:57:0b:1b:22:a0:a2:db:88:b0:0b:b3:9a:
                    0b:9c:2e:2a:89:c6:2d:41:b6:68:56:8f:2a:98:85:
                    54:07:fd:b0:55:22:43:3b:85:05:32:11:91:98:f1:
                    17:9c:6d:22:9c:a9:7a:3c:95:12:c2:3e:8d:93:fc:
                    d4:bf:6a:7b:68:95:35:a2:72:ac:b2:8c:8d:cd:75:
                    ff:43:2f:c5:95:de:27:7f:12:6e:21:bd:12:d5:25:
                    38:dc:3e:c3:a9:3e:1e:30:0c:e1:36:e2:46:f6:14:
                    58:67:5e:13:24:d9:aa:98:ab:4e:1f:6c:92:a3:4a:
                    f0:fa:15:25:4d:8d:83:84:db:fc:2b:12:b5:ff:77:
                    9b:d7:fb:4a:33:00:7a:a8:a6:6a:32:45:9c:08:bb:
                    e0:a8:69:44:21:5c:74:bd:66:bf:af:7d:1b:a8:63:
                    14:f3:20:03:f8:18:f5:22:10:7a:23:26:13:22:b1:
                    9c:8c:ab:af:e5:13:47:ae:4f:eb:a3:24:c5:ed:4f:
                    56:53:01:59:22:cd:8a:35:2b:5a:e5:d0:05:75:f0:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:43:59:8A:12:27:BE:8B:22:6C:3F:D1:47:96:15:B6:D8:90:79:FF
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:51:39:e1:14:f9:c2:31:0a:0b:94:df:6b:4e:0c:78:84:
         0d:b1:dc:f7:f3:24:40:97:46:ac:63:fa:fd:b4:a5:3f:27:21:
         e7:d7:14:69:2e:06:1e:fa:d1:0a:d0:63:6d:53:8d:6b:0b:72:
         80:c3:e5:c0:03:7b:4d:83:54:ca:82:78:6c:97:10:83:3a:a5:
         55:de:8a:da:a6:de:27:b5:46:07:65:a4:d2:e1:0d:72:58:b9:
         53:91:dc:6f:f5:e5:5a:15:71:1d:79:72:7c:5d:59:11:eb:02:
         c9:eb:1d:a0:07:4e:e5:55:73:cc:db:47:33:38:e9:3f:cb:f3:
         b7:8b:33:39:0f:0e:50:5b:da:7b:6e:7d:69:67:a5:e3:c2:91:
         58:01:6c:da:6a:f5:a0:98:ca:31:67:29:83:1b:5d:46:ff:e7:
         2d:00:91:4c:43:f1:ab:29:d8:62:a9:4a:b3:f4:5a:67:b9:67:
         52:21:35:7d:9f:61:e3:db:92:e4:ad:0e:79:7d:8e:b8:d6:94:
         45:b5:4e:e2:bc:b8:b1:ec:36:35:a1:33:99:9b:20:76:61:f6:
         d3:77:d7:dc:73:ef:19:a3:e4:ed:d1:ca:c2:ed:08:1e:69:d9:
         6e:fe:7b:78:4a:59:49:6a:e9:c6:c7:aa:19:7f:7e:d4:50:c2:
         41:ba:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net