Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38302e302f32342d3234203d3e2037303138.roa
File:                     3139302e39392e38302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          no9nurSVRjO4ZJtVV4AXbyNBX+8agvOKPH11BQ93Ayc=
Subject key identifier:   18:B6:43:2B:3E:45:EF:73:19:39:5F:D0:F4:44:4C:08:5D:6E:18:0F
Certificate issuer:       /CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
Certificate serial:       33CE9B1809A13AA6DE8D85F043891541BC58B175
Authority key identifier: CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38302e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 31 Jul 2024 03:55:00 +0000
ROA not before:           Wed 31 Jul 2024 03:50:00 +0000
ROA not after:            Wed 30 Jul 2025 03:55:00 +0000
asID:                     7018
IP address blocks:        190.99.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ce:9b:18:09:a1:3a:a6:de:8d:85:f0:43:89:15:41:bc:58:b1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
        Validity
            Not Before: Jul 31 03:50:00 2024 GMT
            Not After : Jul 30 03:55:00 2025 GMT
        Subject: CN=18B6432B3E45EF7319395FD0F4444C085D6E180F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:18:a4:31:95:db:4b:f5:3d:40:e1:8b:0c:
                    43:89:5a:d4:d5:2c:ad:74:e9:b2:d8:e6:94:f7:36:
                    30:ad:20:45:83:6e:2e:0f:3f:f8:da:95:61:06:ea:
                    3f:b6:e1:4c:c7:e4:74:6e:3b:42:5b:a0:c2:46:06:
                    18:31:d7:c4:72:b9:14:14:63:71:30:d4:80:cf:63:
                    32:03:62:cb:ba:9b:b4:45:cd:ce:ed:83:cc:55:7a:
                    53:a5:d2:f0:22:29:58:b9:e7:68:66:e3:db:f4:e5:
                    34:11:8d:06:1b:ba:cb:26:ed:bb:c1:24:fe:ce:fb:
                    ba:79:c2:38:84:76:a8:f2:61:07:68:45:f5:b1:d2:
                    7c:39:60:fe:62:e5:30:d3:dd:d3:61:58:d4:65:2d:
                    6e:ed:fe:1b:0e:a7:e0:f4:6f:93:a8:26:2b:fc:7f:
                    9f:1b:0a:06:b0:77:84:eb:b4:84:1d:44:77:e7:dc:
                    32:1a:fa:52:18:18:8c:6c:93:aa:49:76:d7:88:4b:
                    42:c0:14:78:ea:50:0c:9b:03:d4:8f:7d:3f:c8:0e:
                    d8:08:35:89:06:29:6b:d7:0e:ad:85:d4:cf:33:9b:
                    f5:93:44:ac:47:08:e3:72:26:37:7d:ee:55:ef:10:
                    73:2c:e9:97:a0:8f:61:ad:98:7c:2e:08:e5:d2:25:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:43:2B:3E:45:EF:73:19:39:5F:D0:F4:44:4C:08:5D:6E:18:0F
            X509v3 Authority Key Identifier:
                keyid:CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38302e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:82:ef:b4:8e:50:b9:c0:2a:82:4c:48:63:8d:1b:cf:7a:
         9c:28:98:09:15:4e:34:4b:53:ec:3a:a4:4e:3c:aa:76:39:41:
         3e:2a:24:fa:5c:7b:d2:19:ad:8d:e2:f9:55:f3:a9:62:26:b9:
         de:b9:08:a0:55:9a:f3:87:cb:79:08:0c:4d:4d:14:5a:73:1d:
         8d:8c:f6:03:38:1d:5d:4c:8f:d5:4c:3d:5f:c2:78:75:85:1a:
         ff:f9:3b:78:14:5e:66:7f:32:80:0b:03:90:a0:35:71:c4:e0:
         09:70:f5:5a:ca:b1:82:fd:5f:51:f5:7e:3a:d8:32:21:ed:ea:
         0a:47:00:cf:15:f6:5b:83:5f:c2:d9:bc:51:9b:02:27:ef:2a:
         dc:62:74:ca:3c:84:8e:3e:bc:e3:34:62:28:2a:7f:ae:12:7e:
         94:df:34:db:9e:d1:a3:98:11:18:6e:00:82:6c:31:2d:0e:e7:
         5e:fc:d7:59:74:9c:bb:44:bd:90:f6:b0:48:77:c6:f2:47:ef:
         5f:44:62:20:09:a7:55:75:77:ca:d9:cc:c5:e0:68:9b:42:a5:
         1f:73:3e:ac:2f:7d:95:77:da:ca:78:8f:5a:24:58:3e:cb:a2:
         ba:ab:5c:a9:09:8d:0a:ee:13:8e:eb:4a:20:2c:09:fe:f5:89:
         77:9a:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:47 2024 by rpki-client on console-ams.rpki-client.org