Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3139322e302f31382d3234203d3e2036343030.roa
File:                     3139302e38302e3139322e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          L3DZQxhA/aBFg2MpX34ogmKPTkV4UmN4gw/UY/0rg/U=
Subject key identifier:   18:A1:D0:E9:FE:49:E0:F0:36:3A:D5:F4:8A:C4:FF:1A:DD:44:23:7F
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       0381067D8171B66CAF3218EFDC56F2264E92EF60
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3139322e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:03 +0000
ROA not before:           Tue 03 Sep 2024 13:40:03 +0000
ROA not after:            Tue 02 Sep 2025 13:45:03 +0000
asID:                     6400
IP address blocks:        190.80.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:81:06:7d:81:71:b6:6c:af:32:18:ef:dc:56:f2:26:4e:92:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:03 2024 GMT
            Not After : Sep  2 13:45:03 2025 GMT
        Subject: CN=18A1D0E9FE49E0F0363AD5F48AC4FF1ADD44237F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:a6:d5:85:52:d3:62:21:33:37:20:f4:2e:
                    ae:a8:aa:c7:6d:e0:01:bb:c8:f9:70:df:87:51:9c:
                    fc:f0:3a:b7:21:1c:c6:29:20:0d:03:bd:56:c4:35:
                    a4:b4:62:f7:3d:d5:02:75:be:3d:1e:c9:8a:0a:fe:
                    68:d2:41:17:35:83:36:7d:79:ff:27:8d:6d:4d:74:
                    11:1b:37:8e:06:c3:ca:55:e9:1a:8b:c5:4e:e2:88:
                    32:27:e7:12:e2:21:39:b3:e0:a1:7f:de:8d:f4:54:
                    34:89:ae:c5:d7:ff:e0:7c:9b:30:95:22:27:1b:ce:
                    e3:57:37:c6:f0:29:f5:86:13:8a:af:ac:18:32:15:
                    f4:20:04:5d:1d:52:94:3c:dc:9b:fa:c5:30:90:fe:
                    a2:49:cc:5f:6d:fd:4e:9c:5f:73:82:fd:14:77:c6:
                    ad:cf:ec:bd:3f:06:c7:c5:0b:c9:ff:cf:11:f1:e5:
                    e5:0e:5a:f4:cf:c6:27:3a:c2:62:15:1d:31:ec:35:
                    be:f4:dc:e7:0a:a3:e1:90:3d:8c:8c:7e:33:39:63:
                    75:67:51:29:10:97:b6:84:b3:a3:ce:8c:88:10:62:
                    02:e4:c0:05:a2:de:f8:dd:47:54:e7:60:99:78:d6:
                    a9:79:57:d8:7a:e6:fd:20:d2:e9:77:a1:f0:d0:14:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:D0:E9:FE:49:E0:F0:36:3A:D5:F4:8A:C4:FF:1A:DD:44:23:7F
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139302e38302e3139322e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.80.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:e8:73:4b:68:05:97:ea:1d:e6:67:25:da:fc:c3:a1:e8:ef:
         10:00:8a:1f:9c:90:7c:7e:70:c4:2d:89:77:2a:7c:f9:7e:fe:
         4e:15:1a:43:77:72:75:02:26:d6:43:9f:0f:74:26:06:c3:7b:
         e5:56:aa:7a:9f:15:e6:6e:88:a4:4c:d1:24:46:ca:fa:93:36:
         a9:fd:12:f4:b7:2d:74:51:0b:45:e3:d0:83:19:7d:65:e8:a7:
         99:d3:79:db:49:0f:0b:ec:64:a3:ec:e6:42:59:4b:2c:84:a8:
         39:f2:26:19:fe:90:09:fd:80:6d:32:5d:5a:37:6a:f3:1b:df:
         6f:1e:04:8b:09:80:d1:75:92:51:51:fb:96:8d:e7:2f:9d:8f:
         f5:8c:c1:73:d4:a2:7a:dd:df:d5:68:70:20:50:70:92:cf:34:
         96:cb:1b:aa:fa:64:3a:7e:d9:c8:a5:7c:aa:d4:aa:49:4d:48:
         3f:83:d0:17:a5:92:b9:74:bd:f9:8c:77:64:0a:5d:d0:18:f0:
         d5:b3:ce:d4:4d:ea:aa:8e:68:ae:28:4a:6d:90:62:5e:90:92:
         33:1f:b1:91:13:1b:9c:e0:a4:3e:be:68:cc:45:1b:31:9e:13:
         7d:13:86:ad:9b:c2:f2:59:5b:2d:1b:82:9f:99:d9:40:ba:1d:
         f4:59:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org