Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3132382e302f31382d3234203d3e2036343030.roa
File:                     3139302e38302e3132382e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          Xtoq7nM9nmLqrfn0gkmyHKp8325EVhp8rgiZnn7fPf0=
Subject key identifier:   B3:EC:C2:48:00:99:10:1C:4D:FF:C7:8B:BE:BF:89:C3:92:4C:A8:F6
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       6EBEF476E1CC4F5E7E38E7F2F409027C3E0140B2
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3132382e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:06 +0000
ROA not before:           Tue 03 Sep 2024 13:40:06 +0000
ROA not after:            Tue 02 Sep 2025 13:45:06 +0000
asID:                     6400
IP address blocks:        190.80.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:be:f4:76:e1:cc:4f:5e:7e:38:e7:f2:f4:09:02:7c:3e:01:40:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:06 2024 GMT
            Not After : Sep  2 13:45:06 2025 GMT
        Subject: CN=B3ECC2480099101C4DFFC78BBEBF89C3924CA8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:57:1b:0b:2e:8c:e0:c1:01:93:d6:eb:85:
                    4a:51:71:17:ed:c9:a4:dc:5a:f1:82:73:71:04:f4:
                    6e:29:4a:0e:b8:55:85:16:2a:ec:21:6e:d0:05:bd:
                    69:7f:d7:b4:4f:52:3d:33:fd:1a:cb:27:0d:fc:2d:
                    cb:e9:ef:48:ec:52:37:1d:fe:0a:f7:71:ae:3b:ac:
                    9c:7b:01:b4:14:62:82:6c:63:36:e5:f9:00:98:bd:
                    e8:71:42:ec:c5:48:15:63:82:06:03:59:a9:06:e6:
                    8d:e7:5d:66:53:8b:5a:84:0a:8f:1f:de:1b:72:56:
                    18:6a:e0:73:f4:1d:d4:f5:d9:5e:2c:02:7a:24:be:
                    02:82:8d:74:00:4c:c9:b2:10:aa:33:3a:b2:33:4a:
                    7e:c6:b3:25:38:27:13:6d:c2:ea:2d:25:c5:46:ab:
                    f0:0d:1b:b3:9f:04:4f:d6:68:f4:9d:db:b8:87:8f:
                    fe:b4:ec:b6:84:52:f1:93:cd:71:6e:89:82:c3:36:
                    11:2d:65:dc:08:fa:84:47:1d:b3:d5:c3:7f:77:46:
                    b9:95:82:7d:49:c8:4f:35:4f:fb:da:fb:32:8e:68:
                    75:60:15:4b:30:38:0e:d8:1d:41:3c:83:b4:02:96:
                    9b:3c:ed:8e:e6:92:64:d2:78:d2:df:1f:88:09:be:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:C2:48:00:99:10:1C:4D:FF:C7:8B:BE:BF:89:C3:92:4C:A8:F6
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3132382e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.80.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:82:b6:17:86:2a:a0:ee:dc:4e:39:a7:58:f1:f4:d3:f2:
         7f:ee:58:6e:4b:4b:c2:85:fe:6b:49:39:56:37:52:3e:81:63:
         6b:c6:02:84:41:44:23:5f:5c:ad:41:aa:b1:7c:06:d1:31:39:
         5d:0f:b5:51:79:14:d0:64:7f:b2:b8:8e:49:06:d3:d1:37:ee:
         aa:67:71:c4:08:fd:fb:2e:c9:f8:7b:35:06:d6:b6:3e:19:63:
         a7:c6:1b:fc:af:75:27:f7:cd:e2:38:c1:d2:e7:cd:52:c4:ed:
         82:b3:35:e6:1e:67:17:35:b0:ab:af:bd:9b:7c:1e:11:ad:1a:
         fc:b9:e4:08:b0:17:45:54:ca:77:1b:81:90:55:a3:5e:00:1a:
         81:35:8b:df:75:46:ce:be:39:aa:73:95:ca:fc:97:ef:c8:42:
         ee:c3:ab:a2:a2:48:ea:c7:c0:7e:01:2c:32:c6:9b:2d:fa:f5:
         53:72:41:36:b1:f3:c8:6c:9c:ca:33:00:d5:8f:ba:b9:7e:d7:
         7a:a5:25:b3:cb:18:39:9e:af:5d:5f:85:1e:3f:21:9b:fd:76:
         5d:b1:d8:70:d8:9a:3e:82:5f:67:ff:ce:88:2f:b1:b3:c1:de:
         63:c9:3f:ed:99:10:71:ec:29:57:1a:51:25:dd:22:16:65:c0:
         4f:89:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:11:26 2024 by rpki-client on console-fra.rpki-client.org