Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3139312e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3139312e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          /67JrMfNNO0y0CZl5hgmeXNN+Gcn8B+dEyScOa5lv28=
Subject key identifier:   6D:BA:C4:E0:C1:30:72:B8:55:F1:7E:8A:85:46:90:D0:75:A6:CA:05
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       228358C6D14BA8FD866D2D866C2D45B6BA832FBC
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3139312e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:37 +0000
ROA not before:           Mon 28 Apr 2025 20:11:37 +0000
ROA not after:            Mon 27 Apr 2026 20:16:37 +0000
asID:                     22313
IP address blocks:        190.123.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:83:58:c6:d1:4b:a8:fd:86:6d:2d:86:6c:2d:45:b6:ba:83:2f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:37 2025 GMT
            Not After : Apr 27 20:16:37 2026 GMT
        Subject: CN=6DBAC4E0C13072B855F17E8A854690D075A6CA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:8a:cb:de:57:05:a9:41:cc:2c:ab:84:39:
                    b5:84:2a:f2:bd:56:fc:89:71:4b:14:fc:8d:60:e5:
                    be:cf:c0:89:4b:b4:0b:1d:49:0d:ec:b5:3b:90:1a:
                    82:e2:11:bb:4a:d5:1a:21:ea:44:4b:ad:eb:ed:e5:
                    1b:9e:5d:c7:c2:93:5d:2e:51:d4:6e:19:3a:34:70:
                    96:5a:d3:38:dd:f7:af:a1:19:f9:67:68:b9:05:a3:
                    44:54:42:c8:ae:80:91:b3:58:54:d6:2e:a5:a1:77:
                    61:dc:cc:1e:6f:ef:4c:e3:fd:28:39:4e:f1:32:48:
                    cc:ea:9f:c1:96:3b:cc:d8:b0:c0:88:82:6b:00:42:
                    3f:0e:26:23:96:80:a8:71:b1:6a:53:62:b9:49:fe:
                    93:ce:c4:92:03:41:f0:66:a5:13:16:a6:2d:59:d2:
                    20:bc:f9:90:4b:8f:19:f5:bf:b7:af:1c:28:66:9c:
                    55:1a:e4:ee:89:58:9f:93:62:41:74:81:ff:db:24:
                    05:1c:3d:9c:02:cc:4a:46:81:2a:6f:f6:4b:99:04:
                    70:b9:b1:37:a1:01:c4:84:9a:c8:1d:60:07:62:ab:
                    a1:a4:6e:bd:fc:f4:3c:6d:ee:2d:ce:5f:11:8d:5d:
                    55:f9:56:17:2e:ac:5e:16:8d:3f:73:a4:d8:0c:bf:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BA:C4:E0:C1:30:72:B8:55:F1:7E:8A:85:46:90:D0:75:A6:CA:05
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3139312e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:09:d0:a6:03:b6:13:ea:27:34:e4:ad:b5:93:9c:02:54:
         9a:44:ad:75:c0:45:9c:84:cd:a0:b8:35:b0:c3:63:1e:5a:53:
         16:2d:7a:9e:b2:c6:39:d0:b4:a2:17:01:81:82:01:02:82:69:
         6f:d1:b9:ef:ab:da:5f:c4:8e:50:a2:14:99:4c:ce:50:40:8a:
         b7:a3:50:15:37:64:a9:97:8c:0d:18:be:01:fa:dc:95:c5:d0:
         6a:0e:b6:d8:2f:c9:be:ed:fd:1a:81:5f:95:ca:4d:d2:ff:b8:
         35:99:36:39:73:69:56:8c:bf:30:bb:81:bf:75:ac:7e:da:9f:
         2d:4b:86:ae:08:e2:6a:15:0a:3d:88:35:3d:19:9d:1b:ad:24:
         0d:ae:a6:11:29:e1:08:2d:1e:52:b3:1d:b9:34:2a:25:aa:57:
         12:0c:e4:f3:7d:38:89:75:58:2f:71:05:04:2f:86:9b:11:00:
         d1:15:31:e9:ff:ea:d1:60:09:37:6c:cb:88:db:22:42:21:fc:
         e6:23:93:7b:76:da:bd:7d:56:4b:0f:0c:b4:c9:1a:09:eb:90:
         bd:6d:79:c6:32:85:5e:5c:e5:cf:e9:a8:3a:a3:0f:2d:f6:3e:
         a3:a9:6f:0a:a9:f6:e4:a4:a2:5f:49:98:e1:f7:0e:ed:bd:1e:
         03:5d:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net