Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e362e302e302f31362d3234203d3e2036343030.roa
File:                     3138362e362e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          uORjkzOs9k0KFA1KmO+cjLR9j03yNk1I2Mh+v3RuHCo=
Subject key identifier:   97:37:35:3D:2C:0B:7C:EF:2A:2D:94:5F:6F:1E:D8:F9:3D:E1:FC:A9
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       22D08D2F392A8292884C5DC719DFA80863839CDE
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e362e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:05 +0000
ROA not before:           Tue 03 Sep 2024 13:40:05 +0000
ROA not after:            Tue 02 Sep 2025 13:45:05 +0000
asID:                     6400
IP address blocks:        186.6.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d0:8d:2f:39:2a:82:92:88:4c:5d:c7:19:df:a8:08:63:83:9c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:05 2024 GMT
            Not After : Sep  2 13:45:05 2025 GMT
        Subject: CN=9737353D2C0B7CEF2A2D945F6F1ED8F93DE1FCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e3:50:9c:f3:80:5e:3b:e9:17:d5:f9:78:b8:
                    06:cb:8e:8c:13:af:13:f9:4d:35:c5:24:3d:93:8c:
                    37:b0:d3:6c:dc:d3:f7:fe:4d:f3:79:b1:b8:81:32:
                    b4:3f:ed:87:e3:50:87:5d:ab:cc:77:3d:ef:3f:4d:
                    05:49:cc:ec:1b:b4:b3:2b:d8:30:f4:7c:2c:c0:30:
                    2a:b4:ac:e9:4d:cf:20:04:a3:3f:f5:15:e9:fa:7e:
                    f0:2d:19:29:c1:19:62:1c:85:8d:04:a7:26:d0:cf:
                    9a:ef:a5:5a:70:bc:7f:84:37:20:78:e2:e9:83:14:
                    8f:72:cf:87:ef:97:96:0b:d7:d8:9f:b0:73:53:6a:
                    d6:74:48:f0:40:6d:45:ac:9b:eb:ae:28:b7:ac:3a:
                    9f:b5:92:11:47:1b:1b:7f:03:bd:a6:b6:19:95:ef:
                    d5:62:f4:32:69:af:14:f3:8b:b6:3a:8d:84:ff:21:
                    7d:c6:fb:64:a3:05:3d:22:6a:f3:70:f7:30:0b:22:
                    92:35:bb:68:6b:84:ca:b2:f3:e4:33:11:19:f7:6f:
                    87:a8:d7:28:d5:34:06:32:62:69:05:62:30:d1:89:
                    15:ce:c5:f6:ff:b2:35:9e:f2:c6:50:8d:47:4e:05:
                    ee:58:46:4e:ca:0d:26:fc:e7:fb:dc:6c:4b:2c:4b:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:35:3D:2C:0B:7C:EF:2A:2D:94:5F:6F:1E:D8:F9:3D:E1:FC:A9
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3138362e362e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:b0:6b:af:34:1a:06:2a:65:3a:14:17:fd:a3:9d:59:f9:
         39:98:16:a4:cc:8e:82:f9:ab:e5:76:66:3a:f9:9b:e9:f0:82:
         21:81:e1:58:14:28:47:d9:f4:24:48:24:14:c3:07:13:e8:a5:
         c0:84:83:eb:2d:7c:31:1e:80:f5:05:df:57:d1:4f:16:cd:ec:
         dc:e6:ef:cc:70:b9:d7:47:0f:d1:64:98:50:ba:9c:eb:80:5a:
         de:43:63:20:67:f0:8c:d8:58:79:d0:93:60:7f:b8:64:1a:d7:
         9a:1b:8b:f7:0c:17:fa:8e:2a:fb:e6:6b:52:26:91:7d:16:b1:
         ad:2d:8a:67:57:ba:7c:e7:96:e5:c7:5b:4b:ad:0a:18:f6:e2:
         c8:62:75:53:c6:03:f4:1d:1c:79:f2:10:57:46:96:d1:36:d6:
         68:22:17:6f:5f:c6:5f:60:28:8d:a0:2c:9b:ef:2a:d9:74:b0:
         73:ef:0e:50:2f:50:cf:6e:10:f7:cf:c8:8a:1f:a6:c9:8c:21:
         4a:4d:e5:7c:e1:0e:e7:68:ca:48:a0:f4:f1:a3:a4:59:87:c4:
         51:7c:d6:eb:f2:e5:80:25:da:87:92:d0:5b:73:4d:f9:30:fa:
         bf:b6:5c:72:43:bc:cb:09:a1:22:78:76:d5:4a:76:2d:14:20:
         76:8a:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org