Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138362e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3138362e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          aN+wTwRkH/JM9uUPsqFGxVPIlCBuYD7F0QIKa1cQOmU=
Subject key identifier:   41:F5:C9:DF:35:22:1F:6B:56:E5:D3:34:E5:9E:DF:3C:73:91:F2:8D
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       39ECBFF599C3758FCAEEFD4B6C0CCC47F277E423
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138362e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:30 +0000
ROA not before:           Mon 28 Apr 2025 20:11:30 +0000
ROA not after:            Mon 27 Apr 2026 20:16:30 +0000
asID:                     22313
IP address blocks:        190.123.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ec:bf:f5:99:c3:75:8f:ca:ee:fd:4b:6c:0c:cc:47:f2:77:e4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:30 2025 GMT
            Not After : Apr 27 20:16:30 2026 GMT
        Subject: CN=41F5C9DF35221F6B56E5D334E59EDF3C7391F28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:53:34:83:3e:26:00:95:81:3e:31:bf:56:
                    de:b6:15:24:72:f2:a5:4f:fe:02:b1:d8:88:73:3d:
                    31:5c:93:73:00:7e:44:4d:b7:34:ca:03:25:3f:6d:
                    48:ba:ff:bf:eb:65:05:c6:d5:26:29:9a:b2:dd:49:
                    bb:6e:2f:2a:6d:3e:ae:5b:b4:58:af:03:23:9d:84:
                    dc:7c:1d:e4:35:5a:58:12:a0:78:a3:97:59:c1:17:
                    83:db:4a:f6:f5:fc:6e:12:25:b3:aa:38:af:46:af:
                    7e:ed:bb:69:9d:68:85:00:90:5f:af:4b:77:1b:3c:
                    2e:4e:45:4e:bb:e5:5d:45:db:66:df:2c:80:1f:5a:
                    71:9f:c3:15:55:97:fd:91:b0:bc:dd:ec:45:59:1c:
                    b3:b8:51:9e:3c:00:29:c7:bb:95:15:81:ff:98:4e:
                    1a:4b:2d:34:f5:7b:c6:f7:0b:7b:fb:aa:33:62:4f:
                    a3:0e:bc:c1:17:98:fc:85:8a:7c:9e:a7:4d:36:50:
                    e1:06:0b:2e:d3:4b:2e:08:db:75:9d:b6:06:39:83:
                    b6:3e:7a:93:0c:60:76:e0:36:cf:f9:79:45:91:77:
                    bc:90:91:54:fa:93:40:4e:a3:63:8c:16:35:f8:a0:
                    b2:23:72:8c:72:e2:e7:cc:c5:5b:e1:57:88:49:81:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:C9:DF:35:22:1F:6B:56:E5:D3:34:E5:9E:DF:3C:73:91:F2:8D
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138362e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:a3:35:11:de:d6:7f:dc:5b:21:fc:41:d5:e2:5a:b3:4d:
         a6:ae:34:1a:ae:9a:8c:6e:d5:42:0f:56:cd:9b:12:90:20:26:
         4b:a9:b4:a5:e2:cc:de:bf:48:53:ca:3b:4a:0a:20:11:b2:e6:
         5f:ee:3f:00:cf:2d:46:c8:ff:e2:3a:14:c5:30:47:e6:9b:be:
         62:75:fc:6b:bd:e8:da:3c:65:7b:77:ee:a6:3c:fe:2c:5b:bf:
         6f:93:e3:8a:f1:30:23:6a:a4:57:5e:0c:aa:79:c9:77:1a:0b:
         70:f0:3f:98:b7:e0:ec:ff:17:34:50:f8:7b:71:12:fa:b7:b1:
         e6:a7:36:09:b4:a3:12:ae:98:4c:cb:15:36:cd:d1:85:5e:c1:
         ef:28:a7:1b:d9:f4:75:54:31:a4:98:8d:53:22:b2:f0:3f:d6:
         5b:d5:9a:11:94:36:30:f1:aa:02:08:85:16:71:c0:7b:03:7f:
         f5:03:03:b5:18:47:82:8b:d6:0c:ad:8a:36:fe:fc:c0:08:9f:
         9e:96:3c:c8:3c:df:80:6f:34:0a:b6:3e:8d:90:b7:6e:a3:5b:
         1b:e4:cf:73:28:0f:c9:6e:21:12:59:9e:99:75:44:0b:25:4c:
         61:2f:a1:c4:75:57:8b:bb:36:22:48:80:4d:d1:4b:3b:5a:ee:
         c9:ac:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net