Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          ty9zZLh1pHNYnjPT3hRVe3cy6n76Qy3jUp8BhggAgPk=
Subject key identifier:   08:C8:7B:05:46:57:6B:84:4F:B2:47:B9:34:80:E5:91:12:DB:6E:21
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4F3B20AC371BEB84FD2920CA41E3E4D2832214A3
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:33 +0000
ROA not before:           Mon 28 Apr 2025 20:11:33 +0000
ROA not after:            Mon 27 Apr 2026 20:16:33 +0000
asID:                     22313
IP address blocks:        190.123.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3b:20:ac:37:1b:eb:84:fd:29:20:ca:41:e3:e4:d2:83:22:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:33 2025 GMT
            Not After : Apr 27 20:16:33 2026 GMT
        Subject: CN=08C87B0546576B844FB247B93480E59112DB6E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:ef:6a:a6:96:c1:0b:a7:8e:8d:9c:84:eb:
                    9e:7b:f3:08:d5:1c:90:28:b3:43:2e:a8:74:75:13:
                    72:3d:ac:02:e2:66:99:65:a6:60:6e:a7:a9:60:b7:
                    a3:b0:9d:aa:fc:42:0c:a1:bf:7f:da:a3:19:d3:d1:
                    c2:35:73:95:1f:8b:7c:cc:47:4a:6e:d9:5d:d7:96:
                    b0:a3:85:93:a3:40:1d:0d:f0:69:22:4c:fc:28:24:
                    c0:7f:99:e2:67:51:e5:2a:f7:2e:02:67:e0:6c:9a:
                    73:9d:62:66:0d:6a:f1:fb:e2:d6:69:44:48:2b:64:
                    1f:33:0f:92:ba:67:44:3c:a5:2c:e4:a8:84:61:23:
                    00:87:1d:6c:5b:07:63:ac:28:3b:29:ac:13:cf:95:
                    bc:95:5e:1b:9a:9f:8e:0d:26:dd:b9:59:37:ca:69:
                    b6:a2:a6:28:b3:8b:04:cf:ed:c6:d0:65:50:3c:30:
                    26:5b:59:e3:ba:c4:f4:a4:4f:58:8c:03:aa:00:c3:
                    76:4d:95:c1:c6:de:8e:72:c6:d8:c1:ac:7c:47:26:
                    01:c4:50:08:dd:44:e1:cf:78:d1:70:c6:7b:7f:31:
                    35:74:9c:99:a7:f7:c8:f4:af:b3:fd:2d:9f:c8:73:
                    87:0a:b9:4e:41:96:8b:fe:42:30:da:6d:48:37:d6:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:7B:05:46:57:6B:84:4F:B2:47:B9:34:80:E5:91:12:DB:6E:21
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:2d:7b:94:5e:b2:47:d4:fd:05:e4:32:7d:8e:ec:c6:2c:
         0e:67:35:25:10:35:f3:32:1c:f8:e5:62:99:f7:ac:7e:de:0a:
         6c:39:6e:68:4b:ef:b0:5b:51:38:06:30:95:39:11:18:50:33:
         27:48:4c:1b:27:f1:de:6f:d1:52:4c:83:07:e8:01:49:c3:3d:
         1c:d2:6c:c0:12:07:2c:63:64:6b:5c:72:2e:bc:20:02:dc:95:
         d6:3a:6f:4b:7c:5f:11:e4:ae:ce:83:f9:37:df:da:60:41:dd:
         13:0b:71:a9:73:f8:2a:16:45:55:64:97:5f:59:ed:ad:d4:06:
         ab:4a:76:ac:9d:05:26:30:31:54:ba:d6:b6:09:d7:7e:46:07:
         27:dc:77:18:80:fb:18:db:2f:33:8e:bb:27:4a:1c:ce:88:7d:
         57:d8:6d:60:a4:23:5e:a0:a5:48:18:f8:7c:63:31:bf:de:16:
         17:40:c3:87:5b:6d:96:21:57:2a:28:6f:55:6a:bd:e9:1f:c8:
         ec:70:99:bc:c6:5f:53:6e:6e:2f:e2:d9:5d:5e:6c:ce:55:71:
         cd:77:de:1e:c2:4f:95:f3:27:62:28:ad:7d:e9:ce:d9:45:5c:
         d6:2f:a1:c8:ea:de:f6:8d:ee:7b:2a:bf:c0:42:bc:7d:03:5f:
         f7:ef:b9:5b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTzsgrDcb64T9KSDKQePk0oMiFKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNTA0MjgyMDExMzNaFw0yNjA0MjcyMDE2MzNaMDMxMTAvBgNV
BAMTKDA4Qzg3QjA1NDY1NzZCODQ0RkIyNDdCOTM0ODBFNTkxMTJEQjZFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqx+9qppbBC6eOjZyE65578wjV
HJAos0MuqHR1E3I9rALiZpllpmBup6lgt6Ownar8Qgyhv3/aoxnT0cI1c5Ufi3zM
R0pu2V3XlrCjhZOjQB0N8GkiTPwoJMB/meJnUeUq9y4CZ+BsmnOdYmYNavH74tZp
REgrZB8zD5K6Z0Q8pSzkqIRhIwCHHWxbB2OsKDsprBPPlbyVXhuan44NJt25WTfK
abaipiiziwTP7cbQZVA8MCZbWeO6xPSkT1iMA6oAw3ZNlcHG3o5yxtjBrHxHJgHE
UAjdROHPeNFwxnt/MTV0nJmn98j0r7P9LZ/Ic4cKuU5Blov+QjDabUg31l/PAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCMh7BUZXa4RPske5NIDlkRLbbiEwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMxMzkzMDJlMzEzMjMzMmUzMTM3Mzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzMzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnux
MA0GCSqGSIb3DQEBCwUAA4IBAQBeOi17lF6yR9T9BeQyfY7sxiwOZzUlEDXzMhz4
5WKZ96x+3gpsOW5oS++wW1E4BjCVOREYUDMnSEwbJ/Heb9FSTIMH6AFJwz0c0mzA
EgcsY2RrXHIuvCAC3JXWOm9LfF8R5K7Og/k339pgQd0TC3Gpc/gqFkVVZJdfWe2t
1AarSnasnQUmMDFUuta2Cdd+Rgcn3HcYgPsY2y8zjrsnShzOiH1X2G1gpCNeoKVI
GPh8YzG/3hYXQMOHW22WIVcqKG9Var3pH8jscJm8xl9Tbm4v4tldXmzOVXHNd94e
wk+V8ydiKK196c7ZRVzWL6HI6t72je57Kr/AQrx9A1/377lb
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net