Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa
File:                     3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (raw, json)
Hash identifier:          pi7J5bXFqKl1Mkinll8S7C259HEwV9nV1UDqsp7G6NI=
Subject key identifier:   E1:58:11:16:EB:05:E8:05:82:8B:63:28:FE:43:45:D7:A9:9D:E2:F3
Certificate issuer:       /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Certificate serial:       498E2FD7D6EF8D84D7BB9F3DF0F515811515CD93
Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa
Signing time:             Tue 05 Mar 2024 17:55:08 +0000
ROA not before:           Tue 05 Mar 2024 17:50:08 +0000
ROA not after:            Tue 04 Mar 2025 17:55:08 +0000
asID:                     32034
IP address blocks:        143.208.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 08:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8e:2f:d7:d6:ef:8d:84:d7:bb:9f:3d:f0:f5:15:81:15:15:cd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
        Validity
            Not Before: Mar  5 17:50:08 2024 GMT
            Not After : Mar  4 17:55:08 2025 GMT
        Subject: CN=E1581116EB05E805828B6328FE4345D7A99DE2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:df:99:5b:19:c7:4b:c0:77:42:26:ea:d0:
                    ce:e1:9b:b7:d3:8d:57:a7:d8:ae:fa:d3:a1:d9:33:
                    29:95:69:94:8c:0d:ac:fe:e6:38:3a:49:8d:48:f4:
                    d2:89:b8:b4:3b:bd:21:75:69:3f:5d:0c:5c:ff:b0:
                    e8:f0:3b:42:6a:ee:e5:4c:7d:83:74:a1:0a:ca:6a:
                    82:07:3a:02:68:9e:a1:7d:96:d6:3d:03:c0:ab:a2:
                    78:51:f3:ed:f2:0c:de:3e:ca:5a:65:b0:44:7f:ae:
                    3d:bc:d5:27:a5:f3:a3:d0:41:3f:20:b5:e7:47:ee:
                    82:43:c1:dc:be:5d:14:e6:b5:f5:bd:f3:69:f8:15:
                    42:e4:e0:78:32:8b:a1:28:bd:8e:85:fa:92:6c:c9:
                    0f:0b:db:c5:7d:7f:b6:ab:4f:e4:d5:5d:19:a4:2e:
                    f1:7d:7c:f3:ea:f0:44:e4:e3:74:9c:52:b7:1e:5e:
                    4a:3a:4c:19:2c:50:4c:61:e7:d8:af:5b:ac:03:15:
                    ba:93:c4:63:11:3d:86:03:16:bc:57:74:27:fc:b6:
                    0f:59:b9:02:bd:df:8c:d2:88:92:08:22:b5:05:56:
                    15:79:73:8c:8a:77:5e:99:31:3e:7d:68:3a:ba:29:
                    8e:7a:4a:f8:8b:32:60:e3:0b:a6:fb:61:7f:fb:92:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:58:11:16:EB:05:E8:05:82:8B:63:28:FE:43:45:D7:A9:9D:E2:F3
            X509v3 Authority Key Identifier:
                keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/3134332e3230382e36342e302f32322d3232203d3e203332303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:0a:43:a5:d4:79:be:b1:ff:38:33:93:e1:ae:cd:68:28:
         a9:5c:7d:4d:f6:51:2d:75:4c:5d:2b:75:fb:b6:f5:8d:98:22:
         c7:50:99:c5:ec:ba:40:b7:5d:10:28:b5:db:1f:d8:ee:26:8a:
         cb:46:52:38:28:a0:18:c5:60:da:c4:a0:71:10:99:7d:33:f5:
         76:d6:e6:87:9d:6b:bf:75:15:b8:29:b4:ef:df:32:00:d6:69:
         65:06:2a:21:f2:43:17:0d:ee:f6:2e:95:dc:f8:ed:1c:f9:49:
         39:28:8f:da:46:a3:79:94:0c:67:14:ef:47:ef:00:7e:b6:4a:
         87:60:00:fe:58:15:cf:a4:12:d7:21:8e:11:7d:3b:ac:01:19:
         3c:d0:bb:5d:75:e3:74:36:63:eb:9e:08:c1:1a:91:71:6e:92:
         fb:48:d2:18:42:ef:89:8f:c5:81:39:8f:1d:64:d8:06:35:d9:
         d9:0b:bd:86:8b:8a:4b:f7:24:1b:da:90:dc:9b:53:3f:0a:ec:
         5f:d1:bf:54:06:42:e9:75:72:71:a4:bc:a2:ef:83:5d:7a:7c:
         ce:a6:2e:e4:a3:41:66:39:6a:5c:af:ba:77:bb:8e:2f:1b:84:
         55:48:a2:30:d2:91:a5:70:1a:eb:8c:f1:aa:74:14:c0:60:7c:
         9e:fc:00:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 17:16:24 2024 by rpki-client on console-ams.rpki-client.org