Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3235352e302e302f31362d3234203d3e2036343030.roa
File:                     3134382e3235352e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          epv7TPbJa0vIiNNN3Zan+yCYAbcrZ4FIU/pOabYJbn4=
Subject key identifier:   ED:29:71:22:B9:C5:C8:C4:33:B6:41:9B:DA:34:4D:14:62:30:18:E8
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       193A9389B8DF9E9EFA9BB0CA407E336D6EC6544C
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3235352e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:03 +0000
ROA not before:           Tue 03 Sep 2024 13:40:03 +0000
ROA not after:            Tue 02 Sep 2025 13:45:03 +0000
asID:                     6400
IP address blocks:        148.255.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3a:93:89:b8:df:9e:9e:fa:9b:b0:ca:40:7e:33:6d:6e:c6:54:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:03 2024 GMT
            Not After : Sep  2 13:45:03 2025 GMT
        Subject: CN=ED297122B9C5C8C433B6419BDA344D14623018E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:dc:70:63:83:68:18:c5:2c:b5:d3:d2:ce:
                    4e:07:08:95:83:59:be:cc:15:7c:e9:af:63:85:80:
                    d2:a1:06:32:9e:2c:aa:0e:13:db:72:68:2c:79:3f:
                    5a:7b:e0:cc:7a:2a:24:3f:38:37:b4:c2:b9:a4:62:
                    c8:b9:a0:6b:87:ac:17:51:f7:96:0f:83:04:87:04:
                    4e:65:c3:27:b2:b5:33:90:24:fa:b0:99:e3:40:28:
                    70:4f:68:26:61:9a:45:dc:7d:08:6c:03:aa:85:58:
                    26:48:8f:5b:8e:33:ff:a8:87:e2:de:1e:1e:4a:25:
                    e1:5e:1b:7d:f7:a2:89:eb:8b:5d:71:79:42:e0:29:
                    21:89:1b:0d:e8:02:bd:20:16:80:95:7f:62:00:b1:
                    9c:4b:36:64:54:8a:62:77:59:4d:8e:65:d4:99:1e:
                    1a:0a:5b:d9:8e:c3:49:6a:22:d1:64:5b:5a:f4:42:
                    b6:71:ec:70:03:ce:63:f6:3a:81:86:d7:36:68:3c:
                    63:4b:af:b3:91:a7:79:bc:2c:35:9e:d4:e6:8b:7c:
                    62:1d:ec:a2:ca:e6:36:7c:d8:35:97:70:89:8b:39:
                    5c:85:16:fd:e0:55:93:ce:3e:0d:96:f3:9f:5c:17:
                    cf:f0:62:f7:0c:7e:56:9a:35:3f:f0:82:c4:8b:9a:
                    e8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:29:71:22:B9:C5:C8:C4:33:B6:41:9B:DA:34:4D:14:62:30:18:E8
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3134382e3235352e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:34:51:bb:f6:7b:95:3a:d9:72:a7:25:68:ea:ac:cc:d4:64:
         29:78:7c:a6:99:26:b6:35:2c:dd:1a:fd:88:28:bc:21:ba:9d:
         0f:94:84:55:1d:b2:d0:42:d9:2a:2e:41:ad:a0:f1:35:d1:02:
         98:0a:65:62:95:0c:f4:ee:28:3e:1b:3d:8c:ce:b5:48:ef:77:
         0f:f7:a7:b4:a6:21:54:e7:3f:37:d7:22:96:76:9c:55:24:af:
         6b:b0:d0:5e:2b:65:9c:d2:01:90:6c:6c:4d:75:ab:cd:8a:a6:
         70:8f:b9:dd:16:6a:7e:90:84:6e:75:f7:cf:0a:93:59:09:75:
         86:63:8f:44:0e:df:d4:c2:20:35:a9:1f:f4:48:ce:43:e3:2d:
         d8:fe:55:09:16:7e:5f:a8:3b:79:e9:5d:3a:b6:d1:fa:64:71:
         29:e2:06:a9:9b:7c:1c:de:27:af:3d:ce:5a:6a:49:42:05:00:
         65:d4:33:68:43:d3:93:01:3d:08:46:42:02:ff:85:53:7a:63:
         a0:cc:e3:32:12:2a:79:f3:f4:b2:d7:be:fc:cd:c7:82:49:09:
         96:2b:d3:7e:44:61:40:3f:0d:0f:b7:65:80:d0:fc:92:38:a6:
         19:f7:fa:d0:06:08:27:4c:7f:51:3e:cb:5c:3f:06:a9:b0:e6:
         d6:dd:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org