Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e302e302f31382d3234203d3e203136363239.roa
File:                     3139302e38322e302e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          QhK+YlVMnyxAJHByydT3B2neKy6T3svdBXxBRwpDoK8=
Subject key identifier:   89:73:C0:01:CB:31:2C:7C:75:D7:C4:EB:FC:18:F2:1F:2C:65:D4:C5
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       18A56DCDA1A651E20F4C24B58536ABECD3D92E20
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e302e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:17:00 +0000
ROA not before:           Tue 05 Mar 2024 18:12:00 +0000
ROA not after:            Tue 04 Mar 2025 18:17:00 +0000
asID:                     16629
IP address blocks:        190.82.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a5:6d:cd:a1:a6:51:e2:0f:4c:24:b5:85:36:ab:ec:d3:d9:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:00 2024 GMT
            Not After : Mar  4 18:17:00 2025 GMT
        Subject: CN=8973C001CB312C7C75D7C4EBFC18F21F2C65D4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:c7:68:8c:00:40:d7:28:f2:2d:3d:25:05:
                    15:94:16:86:c0:08:fa:9a:3b:91:64:23:93:05:b7:
                    fb:ee:06:6e:42:ff:0c:90:da:dd:e6:42:c6:5c:7d:
                    fa:39:2a:61:c2:8f:bf:ce:f9:f6:c4:b3:f0:42:cb:
                    60:f3:79:98:1c:b8:1b:66:25:1c:d1:47:fa:61:64:
                    a3:bc:4b:0e:cd:0d:e9:80:f0:80:81:37:4d:59:fa:
                    6a:00:11:cd:71:68:aa:60:64:43:fb:46:32:9b:60:
                    ce:b0:18:7c:05:9f:d6:61:60:d1:8b:ad:07:dc:f5:
                    b1:24:43:0a:92:2a:27:a2:19:dc:7d:1b:58:54:af:
                    f8:66:6c:f4:47:28:bf:9e:1a:01:ab:c7:c9:b5:6b:
                    e8:f8:9a:22:e0:8d:37:21:e4:03:86:34:6e:9b:73:
                    b2:73:6b:e5:98:ed:d9:9c:f8:2f:90:77:48:e3:09:
                    97:39:fc:89:46:db:13:bf:3b:f7:3f:8b:5a:8b:2e:
                    3f:76:8a:13:e4:54:7b:05:47:e7:c1:ff:38:bb:69:
                    fa:bd:89:0b:d8:e3:40:e5:bd:09:de:2d:f5:bc:05:
                    a0:ab:c1:71:bb:7f:81:ae:ca:be:24:30:95:16:a2:
                    3b:25:cb:44:9c:b8:be:1b:32:f4:f6:4e:e9:ab:b5:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:73:C0:01:CB:31:2C:7C:75:D7:C4:EB:FC:18:F2:1F:2C:65:D4:C5
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e302e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d1:4b:51:25:25:71:d1:70:0b:cf:23:60:91:8a:66:bc:87:53:
         01:92:20:96:72:0a:f3:ba:43:09:8f:7b:50:e7:46:dd:de:e1:
         a4:2e:3f:67:e0:c9:33:1a:65:15:b8:24:f2:15:3c:e2:49:ce:
         7f:2c:25:58:44:8a:9f:16:a7:b3:ab:65:30:2c:9d:cc:13:93:
         01:b6:04:c0:8b:25:bb:66:16:a5:d4:35:38:0e:71:ed:53:02:
         39:6c:3d:5a:2c:da:d2:2a:a3:ab:ef:d9:e1:5f:2b:87:68:b9:
         4f:75:94:cc:9c:c2:35:0e:29:c5:8e:11:7a:68:a3:43:1a:c9:
         b9:00:8b:b6:bd:df:b2:09:1b:9f:67:ab:b2:47:15:5a:28:22:
         80:75:80:3c:f2:bd:5e:3f:4d:70:14:25:78:5a:d2:19:c9:d9:
         13:c9:a1:83:ba:cd:c1:8b:3d:8d:59:61:db:1a:b1:cf:dd:c8:
         7d:ce:59:dc:75:f7:1c:91:c9:e8:9e:1b:27:b8:17:36:69:22:
         38:3c:4f:4a:19:fc:75:eb:02:fb:98:81:1b:ed:a7:60:ce:ea:
         5a:e7:9a:d4:0b:74:fe:42:c2:cd:21:c4:94:0a:7f:8a:98:17:
         a8:c7:f7:8e:8c:50:d0:a6:a3:c9:a1:c0:60:65:40:38:fc:8f:
         83:a3:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:11 2024 by rpki-client on console-fra.rpki-client.org