Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          llDmmXnpZ4y9xp1QJsyRc/Mokkbu1YbgNZWWkGOyLk4=
Subject key identifier:   D2:AD:98:C0:31:2A:11:1D:5F:8B:0F:69:84:38:FF:38:E0:B4:EE:65
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4A2E9108376D5F0380C8E693BB22B7AB93C604BA
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:32 +0000
ROA not before:           Mon 28 Apr 2025 20:11:32 +0000
ROA not after:            Mon 27 Apr 2026 20:16:32 +0000
asID:                     22313
IP address blocks:        190.123.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2e:91:08:37:6d:5f:03:80:c8:e6:93:bb:22:b7:ab:93:c6:04:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:32 2025 GMT
            Not After : Apr 27 20:16:32 2026 GMT
        Subject: CN=D2AD98C0312A111D5F8B0F698438FF38E0B4EE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:1f:3e:16:d0:56:2a:34:a7:aa:2c:7f:98:
                    fe:c4:ad:30:b4:a8:b6:17:19:5a:c6:1b:55:99:b8:
                    b7:f0:c8:9e:c3:63:13:c8:9d:03:dc:fa:e7:e5:ad:
                    04:4d:6d:18:c4:65:52:7b:89:ad:b5:60:30:85:8a:
                    ff:02:f7:b5:59:eb:f0:8f:1a:71:08:4a:1f:c3:76:
                    05:f2:df:bd:53:ad:26:26:eb:92:6d:cc:02:79:05:
                    a6:3c:81:a4:72:2a:87:e9:6e:5f:b4:3e:ee:48:65:
                    80:b0:7a:6d:84:91:77:29:65:b9:1e:4b:0d:cb:7d:
                    2e:a2:b9:fd:da:72:db:c0:a7:28:9a:2f:80:20:42:
                    b1:3b:cd:35:6b:33:f4:58:5b:b0:9e:0d:6f:9b:e3:
                    3e:7b:9f:a1:f3:9a:7c:d9:0e:4d:07:dc:e2:0f:1b:
                    9c:54:a9:53:06:0b:af:df:e9:be:6b:1f:ea:24:97:
                    f8:f8:d6:ce:a2:9c:91:45:eb:bb:df:3c:74:ce:52:
                    d4:79:74:9e:56:40:b7:6a:46:d8:36:57:f0:d5:d4:
                    05:ed:68:b2:de:72:02:f5:35:22:8b:a3:e0:99:cc:
                    a6:41:44:a1:17:c1:64:79:6e:4c:78:fe:f5:ca:6d:
                    08:69:b0:28:04:83:23:74:e1:ad:e3:15:bc:4c:0d:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:98:C0:31:2A:11:1D:5F:8B:0F:69:84:38:FF:38:E0:B4:EE:65
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:f9:79:e3:c6:45:ff:ca:e4:39:38:43:90:4d:18:c5:7d:
         dd:7f:ba:4e:be:00:a4:1e:f2:b7:e5:67:bd:5a:84:c1:46:31:
         e7:20:e4:a8:63:c8:4a:f2:87:cf:82:55:b1:80:e8:ef:1a:93:
         3e:b7:64:1a:37:4f:a1:2c:1d:89:59:0b:b7:d9:45:60:02:26:
         25:4a:99:ca:62:73:a3:24:36:8d:41:c8:a1:8c:d7:dd:19:a6:
         13:df:b9:d8:a5:3d:ba:3c:b1:70:84:30:2c:d5:f7:67:12:a9:
         9c:ba:83:fd:36:7c:e8:7b:e5:27:07:05:27:a9:8a:10:67:84:
         09:40:96:ef:fd:8f:f3:2b:2e:69:70:e3:0a:ac:e5:a9:68:bc:
         6e:a6:67:4b:2d:81:c7:f6:f6:a3:c8:fd:65:ee:62:8c:2f:de:
         5c:42:be:cd:18:38:ac:98:c6:90:5b:36:54:77:80:55:25:33:
         16:f6:79:f4:7e:27:86:a7:80:f4:d6:40:95:b1:cd:9b:37:b0:
         28:35:ab:16:62:3d:d7:17:3e:30:0c:92:2c:84:e2:19:62:86:
         69:bd:03:16:71:8a:4b:9e:5a:af:f1:cf:45:ba:9f:23:1a:33:
         cf:fd:a1:ea:0d:16:95:73:3e:3f:af:bd:85:ce:9f:f9:1b:37:
         88:e3:fb:97
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSi6RCDdtXwOAyOaTuyK3q5PGBLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNTA0MjgyMDExMzJaFw0yNjA0MjcyMDE2MzJaMDMxMTAvBgNV
BAMTKEQyQUQ5OEMwMzEyQTExMUQ1RjhCMEY2OTg0MzhGRjM4RTBCNEVFNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3x8+FtBWKjSnqix/mP7ErTC0
qLYXGVrGG1WZuLfwyJ7DYxPInQPc+uflrQRNbRjEZVJ7ia21YDCFiv8C97VZ6/CP
GnEISh/DdgXy371TrSYm65JtzAJ5BaY8gaRyKofpbl+0Pu5IZYCwem2EkXcpZbke
Sw3LfS6iuf3actvApyiaL4AgQrE7zTVrM/RYW7CeDW+b4z57n6HzmnzZDk0H3OIP
G5xUqVMGC6/f6b5rH+okl/j41s6inJFF67vfPHTOUtR5dJ5WQLdqRtg2V/DV1AXt
aLLecgL1NSKLo+CZzKZBRKEXwWR5bkx4/vXKbQhpsCgEgyN04a3jFbxMDVZXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0q2YwDEqER1fiw9phDj/OOC07mUwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMxMzkzMDJlMzEzMjMzMmUzMTM3MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzMzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnuu
MA0GCSqGSIb3DQEBCwUAA4IBAQCluPl548ZF/8rkOThDkE0YxX3df7pOvgCkHvK3
5We9WoTBRjHnIOSoY8hK8ofPglWxgOjvGpM+t2QaN0+hLB2JWQu32UVgAiYlSpnK
YnOjJDaNQcihjNfdGaYT37nYpT26PLFwhDAs1fdnEqmcuoP9Nnzoe+UnBwUnqYoQ
Z4QJQJbv/Y/zKy5pcOMKrOWpaLxupmdLLYHH9vajyP1l7mKML95cQr7NGDismMaQ
WzZUd4BVJTMW9nn0fieGp4D01kCVsc2bN7AoNasWYj3XFz4wDJIshOIZYoZpvQMW
cYpLnlqv8c9Fup8jGjPP/aHqDRaVcz4/r72Fzp/5GzeI4/uX
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net