Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e37342e302f32332d3234203d3e2036343030.roa
File:                     3139362e332e37342e302f32332d3234203d3e2036343030.roa (raw, json)
Hash identifier:          ewv0Hg6cQaHkVGtOqPO0v8MWs/b8FDK/w4GrMp3LRMw=
Subject key identifier:   F3:C4:C5:FF:1A:4A:27:3F:4D:86:ED:2F:FC:69:D1:A6:AE:84:C5:EC
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       0928DB02599834729F42B70BC3BAAEA1E5CD19E1
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e37342e302f32332d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:05 +0000
ROA not before:           Tue 03 Sep 2024 13:40:05 +0000
ROA not after:            Tue 02 Sep 2025 13:45:05 +0000
asID:                     6400
IP address blocks:        196.3.74.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:28:db:02:59:98:34:72:9f:42:b7:0b:c3:ba:ae:a1:e5:cd:19:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:05 2024 GMT
            Not After : Sep  2 13:45:05 2025 GMT
        Subject: CN=F3C4C5FF1A4A273F4D86ED2FFC69D1A6AE84C5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:85:c9:17:76:f9:d5:2d:02:36:a7:35:28:
                    8e:bd:6a:e8:59:25:e4:51:4a:bf:46:33:27:16:28:
                    ee:b9:93:a5:91:2f:a1:39:d8:f6:93:6c:55:63:ce:
                    94:6c:0a:11:86:f0:d8:78:a4:e2:58:eb:de:80:0d:
                    0f:a7:99:69:a9:e6:ae:f4:9b:7e:a5:92:5a:cb:4f:
                    ee:8a:85:2e:05:78:6a:f1:13:7d:85:2a:4c:da:a4:
                    d4:23:82:c5:eb:4b:78:cc:af:cb:36:9f:4a:3a:b7:
                    29:f8:b2:83:80:5b:3c:47:24:28:62:39:e8:52:c0:
                    dd:e6:e9:7b:91:96:50:51:9c:3d:74:fe:64:59:70:
                    6a:1b:d7:f4:21:1c:05:56:9b:52:d5:fb:e3:f2:5d:
                    af:47:7c:bc:0e:f4:bb:f8:bd:6a:4b:aa:8f:d0:2b:
                    56:e7:80:c4:d0:3c:e7:d6:a0:5a:6d:6f:a9:bc:d4:
                    7f:42:54:55:5e:72:3d:b2:73:41:eb:42:6e:67:57:
                    03:21:c8:ad:13:ea:4d:b1:57:12:17:ab:70:c8:f7:
                    8c:d0:8a:96:a6:88:1b:e7:9f:c5:44:6a:97:f4:00:
                    43:af:76:7c:81:c9:a1:c5:e0:2d:47:47:99:ae:1f:
                    ad:b7:fa:ef:9b:e7:97:f1:2d:78:b2:52:c8:2e:37:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C4:C5:FF:1A:4A:27:3F:4D:86:ED:2F:FC:69:D1:A6:AE:84:C5:EC
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e37342e302f32332d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.3.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:58:58:59:60:4a:49:3c:a7:2b:2a:41:fb:e3:1e:bd:21:38:
         ec:93:f5:fd:5f:9b:23:87:5e:7b:40:e6:6c:35:d0:08:f9:04:
         d6:3e:bc:e4:6e:98:41:61:53:6d:5d:5d:2d:42:ca:bc:8f:2c:
         96:d4:fa:71:f2:3c:22:4b:3f:5e:01:2e:61:2d:fa:0e:ac:8a:
         f7:c2:fb:0b:81:f7:ba:c8:9e:66:cc:eb:e0:01:31:c1:44:ed:
         a0:29:6a:c6:c9:49:88:d1:32:97:5c:80:ec:f9:a5:67:1b:78:
         62:f9:43:37:8b:52:69:f5:49:30:d3:c2:87:f4:76:12:7b:68:
         1d:30:ca:1e:0a:58:25:3a:ec:94:f7:fb:22:47:ed:50:0b:bb:
         50:ba:8e:86:2b:91:7c:8a:fb:8d:da:fc:6f:e6:b8:c7:53:e0:
         e8:28:08:1f:76:bd:3d:35:fd:58:ee:ac:c5:6a:93:90:b3:16:
         c9:d2:13:ae:e2:62:bc:bc:dc:23:12:00:7f:02:f8:e4:bc:25:
         64:bf:64:19:90:d1:b9:c5:de:ba:21:2e:37:98:ee:87:42:02:
         8e:f5:a4:01:f2:40:16:27:70:95:12:ae:c0:43:4b:33:9e:f0:
         9b:65:16:c6:6a:c2:71:dc:11:7c:50:7b:f0:2f:04:c4:ec:f9:
         da:97:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:13:30 2024 by rpki-client on console-ams.rpki-client.org