Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          GJ/IAn+J6eajFzaz93M3VavVx5OaFM+7DjMO1LBLThs=
Subject key identifier:   87:B1:68:5B:01:34:A3:52:5E:10:8D:6F:EA:D3:59:AC:4F:6F:56:B9
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       45D44078C2D4926A7C4D8571AEC185BF2419246D
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:53 +0000
ROA not before:           Mon 28 Apr 2025 20:11:53 +0000
ROA not after:            Mon 27 Apr 2026 20:16:53 +0000
asID:                     22313
IP address blocks:        190.123.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d4:40:78:c2:d4:92:6a:7c:4d:85:71:ae:c1:85:bf:24:19:24:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:53 2025 GMT
            Not After : Apr 27 20:16:53 2026 GMT
        Subject: CN=87B1685B0134A3525E108D6FEAD359AC4F6F56B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b3:c8:b7:2f:33:61:e6:1f:6b:fa:e2:67:3f:
                    bf:9d:4b:1e:19:34:8b:72:bf:47:57:56:ab:21:e9:
                    e6:86:42:1d:b9:12:ee:1f:ec:f7:61:3b:10:be:9f:
                    6c:62:58:d7:e9:8b:4c:aa:6a:60:6b:f6:d8:05:14:
                    17:ed:89:e1:0d:da:98:79:c3:df:24:be:49:c9:9b:
                    cf:6f:96:05:67:f1:e8:3e:eb:0d:55:da:eb:ae:93:
                    16:5a:77:f3:46:c9:0d:d0:89:4d:65:6d:8c:47:8a:
                    52:a4:b8:7d:9b:e6:16:7b:19:f8:d2:f3:fc:7f:fc:
                    ec:c8:6b:6c:67:b5:9e:fc:25:3a:85:de:6e:13:70:
                    b7:23:77:3f:a7:00:ff:9e:36:c2:3b:60:b0:3d:44:
                    1d:88:a2:6d:51:09:e5:51:32:48:f0:3d:20:f7:18:
                    e2:f4:1e:33:19:6f:f8:fd:b0:95:08:8b:0b:e5:59:
                    12:a6:51:b3:45:22:41:4a:dc:07:8d:31:22:28:9c:
                    2e:d6:4f:bb:7c:2c:c2:24:1f:39:ba:ee:88:ec:a1:
                    e8:49:6e:38:2c:c4:7b:7e:4e:1b:1c:f8:02:b9:b8:
                    8c:b7:65:8d:81:88:c8:04:7b:38:57:a9:58:f8:2c:
                    e6:26:d7:30:f9:fa:43:d4:e5:db:7b:52:84:b6:b5:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B1:68:5B:01:34:A3:52:5E:10:8D:6F:EA:D3:59:AC:4F:6F:56:B9
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:40:11:d5:98:64:b5:7f:4d:6f:a9:a4:60:c2:ed:82:f7:
         a5:dc:7b:b4:b2:06:60:56:38:4f:a9:f0:a9:8c:1b:cc:0e:bb:
         f8:b0:c7:08:0e:7a:ea:08:b7:ce:82:87:52:be:81:a4:9b:50:
         96:bb:b4:6e:c3:b3:b5:e4:01:09:92:98:41:af:a3:2d:c2:c9:
         24:f0:91:7e:82:7b:01:ed:cd:9b:28:81:8c:1a:8e:7a:7f:d1:
         36:bf:fe:76:bd:65:1a:28:01:d1:10:a5:f1:3d:0a:54:53:73:
         7b:43:45:5a:98:a8:73:98:0a:9e:da:e4:85:42:3d:c4:9c:4c:
         18:59:f9:63:c9:bf:f6:c9:2e:ed:8d:d8:f2:63:ea:52:98:4a:
         09:59:71:2e:71:e6:f3:2c:2c:a7:ce:d4:c9:34:19:db:fb:aa:
         45:51:87:43:2d:64:00:ee:f7:82:8d:11:17:f4:e0:4b:80:22:
         dd:8d:42:4f:5e:24:f4:d2:fa:4a:19:01:20:af:3d:bc:e4:a0:
         92:a3:68:da:ac:c1:62:88:ee:b9:11:4e:e6:b7:b2:b4:cf:08:
         9c:30:e7:b5:66:d6:8d:87:80:81:7d:f9:9b:17:41:b9:63:5b:
         10:4d:df:f8:e8:53:c6:fa:a4:a9:e2:86:d3:c2:03:d7:2d:cc:
         3d:cb:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:00:39 2025 by rpki-client