Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136362e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3136362e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          tSX1CWGLpPJoyp4dkwgQK1ZwbAA5ColGPCeg7uyG0S4=
Subject key identifier:   7A:43:75:CB:8C:DA:67:61:D9:56:7C:14:43:DA:B7:13:40:DF:D3:3B
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       5A371D6D493C5963BC2A8961B3047867DEDCBAAF
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136362e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:48 +0000
ROA not before:           Mon 28 Apr 2025 20:11:48 +0000
ROA not after:            Mon 27 Apr 2026 20:16:48 +0000
asID:                     22313
IP address blocks:        190.123.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:37:1d:6d:49:3c:59:63:bc:2a:89:61:b3:04:78:67:de:dc:ba:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:48 2025 GMT
            Not After : Apr 27 20:16:48 2026 GMT
        Subject: CN=7A4375CB8CDA6761D9567C1443DAB71340DFD33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:af:54:97:af:42:b2:75:c3:e1:13:df:79:
                    13:e2:f7:b4:06:5c:05:4e:ab:06:c2:7b:c2:cd:a3:
                    0b:89:5d:f3:c8:fd:66:04:f8:3d:db:63:d9:57:ae:
                    10:2c:bf:8e:08:6e:db:86:a6:71:e4:ea:1e:42:ef:
                    ee:53:1e:1f:79:9c:64:49:bc:2f:3e:e9:0b:3b:71:
                    8e:c2:37:2f:88:6d:86:b0:8a:71:dd:ed:54:fe:e4:
                    ec:0a:12:b3:fd:0b:b6:6d:c5:11:a6:72:27:9b:18:
                    e5:06:9f:3c:d9:25:d3:9e:3a:37:a8:bc:4f:be:1d:
                    67:8d:d0:82:bf:c6:f8:b1:91:b8:42:da:86:4e:de:
                    ab:0c:46:a8:0f:58:6a:2a:31:69:25:f9:a0:7c:4e:
                    66:76:46:36:76:0c:00:53:0c:34:80:c8:da:5e:6d:
                    2d:83:c9:57:f3:00:7b:0e:da:80:8c:75:63:44:e0:
                    64:e5:bb:cb:86:55:74:ca:d2:f0:00:a7:6c:40:4b:
                    18:9f:d3:ea:56:38:bf:9a:45:db:e0:da:ae:67:dd:
                    00:ef:4d:7e:85:24:1f:cc:20:dc:44:4c:79:8d:7b:
                    db:26:7f:9a:b7:01:79:31:69:03:2e:45:53:32:08:
                    68:2b:ba:cf:99:78:fd:93:8b:75:7f:e8:0f:5c:aa:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:43:75:CB:8C:DA:67:61:D9:56:7C:14:43:DA:B7:13:40:DF:D3:3B
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136362e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:90:3b:38:f5:51:9f:05:a2:01:ba:80:b9:3d:29:21:93:40:
         3f:77:9a:f8:01:0c:60:4e:34:38:23:70:01:51:3b:89:f6:78:
         48:2b:3e:90:73:99:0d:e2:2b:c0:89:2a:a5:1b:d1:1d:91:7a:
         b6:b8:53:5f:d1:4f:0c:23:31:72:1f:b7:45:87:ec:dc:b8:5d:
         e2:8e:2f:1e:2a:d0:78:7a:82:af:ab:40:e0:04:c3:05:1e:9c:
         b2:99:6f:7d:10:e2:38:41:6e:6d:10:57:cd:1c:8c:91:5d:db:
         08:3e:2a:5f:e8:1e:f6:7c:bc:42:16:c7:ac:d5:97:21:44:fc:
         ad:74:88:cb:bc:01:b4:c0:24:d0:bc:34:27:30:ef:58:dc:3d:
         1d:7c:53:19:f7:8c:e7:e5:a6:67:1e:e5:72:46:bb:55:f5:a1:
         74:27:f7:be:ae:a7:ad:a9:36:f4:b6:73:2a:7e:03:4d:fc:47:
         5a:90:e9:22:24:4b:6e:c6:4b:ed:2b:c8:47:39:08:52:bd:ac:
         f2:65:11:17:40:62:fb:c9:d2:58:8b:84:a6:c7:2b:c1:5a:19:
         ed:59:35:0a:4c:d7:5d:8e:e4:c6:48:9c:28:0f:db:9a:cf:4f:
         88:38:4d:0d:37:65:97:2d:84:ba:ff:0f:27:85:d4:53:6e:97:
         d9:b4:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net