Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136372e302e302f31362d3234203d3e2036343030.roa
File:                     3139302e3136372e302e302f31362d3234203d3e2036343030.roa (raw, json)
Hash identifier:          b4AC7W7vBER3vxqurNgqmXI+ihJNBPOz71/qpcoUPtA=
Subject key identifier:   74:B6:77:71:E4:12:06:0A:07:F4:BE:41:A3:EF:92:5F:F2:46:35:6B
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       1AF727DB06714A33D1A01E19083BD6BD8A29409B
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136372e302e302f31362d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:06 +0000
ROA not before:           Tue 03 Sep 2024 13:40:06 +0000
ROA not after:            Tue 02 Sep 2025 13:45:06 +0000
asID:                     6400
IP address blocks:        190.167.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f7:27:db:06:71:4a:33:d1:a0:1e:19:08:3b:d6:bd:8a:29:40:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:06 2024 GMT
            Not After : Sep  2 13:45:06 2025 GMT
        Subject: CN=74B67771E412060A07F4BE41A3EF925FF246356B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:47:ae:9c:0f:13:fa:9d:6f:e0:9a:27:0b:
                    6d:14:fa:55:59:9b:ee:23:59:94:f5:09:10:03:65:
                    c0:4f:27:18:00:5f:23:66:25:59:9e:e6:47:11:02:
                    47:f7:60:03:17:3f:17:e6:35:ce:61:85:88:9b:f6:
                    c5:92:f3:32:9a:60:86:52:4d:1e:f4:5f:bb:41:6d:
                    c7:d2:49:dd:1b:ce:64:b3:55:42:e7:b4:a7:f0:39:
                    d5:07:b5:df:9f:c0:19:5e:13:a3:23:60:e7:b5:a9:
                    ab:97:ac:fa:fd:ec:02:f9:f8:ed:b1:d6:88:df:62:
                    41:80:3b:96:cb:fb:38:48:fd:36:2b:0f:22:d0:32:
                    32:d4:14:75:6f:46:42:1a:24:03:73:1d:64:2f:ff:
                    a4:02:19:21:f0:6a:f7:8c:2e:ac:ee:b8:be:e0:bd:
                    a7:6b:4f:1b:c5:d2:35:49:c1:89:7a:98:30:2f:f3:
                    f0:58:82:51:8f:87:53:b8:6d:ee:4a:3d:12:49:78:
                    1d:00:d2:78:ea:fe:cc:0e:cd:3e:7b:55:fc:67:af:
                    cf:ac:37:e5:da:b5:89:07:89:38:08:2f:9f:1f:a8:
                    ea:fd:a9:a2:61:3d:46:17:9f:f9:f7:b9:5b:ec:2d:
                    c5:c1:77:5a:8c:45:dc:74:81:1e:6c:7f:53:6f:7e:
                    2e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:77:71:E4:12:06:0A:07:F4:BE:41:A3:EF:92:5F:F2:46:35:6B
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e3136372e302e302f31362d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:de:b7:2a:2b:fb:a0:34:6a:aa:22:b7:cd:a6:42:c8:fd:
         2a:07:e7:b9:14:6d:34:a8:03:48:0b:8b:19:f8:1a:56:f3:b0:
         18:61:f6:71:30:e7:b0:18:08:fb:34:fd:34:fc:50:cf:23:40:
         b7:03:33:a5:4c:e4:78:40:1a:8b:af:da:d2:a4:69:13:54:bc:
         c9:ff:c7:52:e8:c3:24:8a:24:18:ef:c8:25:7b:e4:6e:80:12:
         ec:e3:b6:69:b8:d2:06:db:e0:b0:70:93:09:03:3f:85:e2:7a:
         2e:47:1c:8e:0b:2b:19:8c:24:f5:e5:12:c8:03:e5:af:2b:45:
         a7:df:83:bf:5b:67:7d:06:78:80:7a:df:09:6f:6c:0c:2e:4b:
         b5:34:58:e5:47:51:1b:0a:0a:ed:8b:52:57:75:f1:7b:db:b8:
         89:94:b4:43:6a:21:f1:71:bf:23:53:48:75:3e:9c:ed:af:01:
         ff:4a:16:f8:fb:5c:19:5f:74:1b:23:46:2d:9c:2a:50:9b:cb:
         b8:1d:2d:25:88:a6:a3:46:3c:4c:db:95:31:55:cb:6a:a7:aa:
         08:f1:f4:51:a8:80:28:e6:65:bc:c5:03:bf:21:e9:1a:17:dc:
         ca:42:f4:6a:df:54:60:04:c6:37:d7:88:6a:10:1a:49:bc:e8:
         40:25:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org