Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e33322e302f31392d3234203d3e2036343030.roa
File:                     3230302e38382e33322e302f31392d3234203d3e2036343030.roa (raw, json)
Hash identifier:          GfZKHnNjRfPx9XEJXAFxLb3Sdg+FrX9MgyGU7s5xZX0=
Subject key identifier:   9C:A9:44:2F:4C:3E:7E:BE:9B:EC:FC:F5:0E:7D:71:7E:8E:FC:65:4A
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       6C7F76056336B6AAC55CD48C9AB19B53BF4B4C6E
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e33322e302f31392d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:02 +0000
ROA not before:           Tue 03 Sep 2024 13:40:02 +0000
ROA not after:            Tue 02 Sep 2025 13:45:02 +0000
asID:                     6400
IP address blocks:        200.88.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7f:76:05:63:36:b6:aa:c5:5c:d4:8c:9a:b1:9b:53:bf:4b:4c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:02 2024 GMT
            Not After : Sep  2 13:45:02 2025 GMT
        Subject: CN=9CA9442F4C3E7EBE9BECFCF50E7D717E8EFC654A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:98:9e:7b:bd:80:23:f4:76:70:89:bd:44:
                    57:91:b8:ce:f9:a2:d9:62:5c:e7:ae:55:08:fa:c4:
                    98:e0:ad:00:ab:95:4f:78:27:86:dd:71:38:0e:15:
                    ee:47:21:9e:09:f7:3b:5f:ec:eb:46:2a:50:25:0d:
                    f0:17:22:a3:a0:78:26:31:37:a1:77:a0:a5:f5:37:
                    04:33:1a:30:8b:98:e1:74:57:e0:fe:b2:3f:d8:30:
                    f3:95:8d:ea:60:6e:14:e7:6a:c3:63:7f:c4:4c:35:
                    5d:5b:cd:61:ad:8c:a9:31:57:0b:a2:b1:a0:5c:97:
                    13:19:e5:13:af:c6:69:a3:0d:b3:a9:22:49:64:2a:
                    34:47:f0:bc:f0:d1:83:00:48:8b:43:79:18:f9:34:
                    10:83:12:73:f3:78:76:72:80:15:9a:eb:7b:56:fa:
                    66:8a:ff:1d:f3:7d:37:40:e5:15:4f:ca:9c:02:76:
                    8e:7f:c5:18:9c:ad:92:51:ac:db:b7:0b:04:91:2e:
                    d2:12:21:fe:87:55:e5:4a:5f:83:80:7a:15:25:70:
                    c8:ed:4c:d7:53:c8:b8:52:b5:a0:63:b6:3b:f2:e9:
                    f1:73:9a:0f:7d:65:95:a1:02:49:a1:7f:c6:9d:0c:
                    1a:dc:95:0b:d2:2c:8e:5c:b6:dd:3c:0f:a7:fb:12:
                    c4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A9:44:2F:4C:3E:7E:BE:9B:EC:FC:F5:0E:7D:71:7E:8E:FC:65:4A
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230302e38382e33322e302f31392d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.88.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:ae:e3:81:71:e9:78:e9:d4:ad:74:f2:24:11:f4:dc:95:ae:
         07:dc:a0:8a:08:8c:b8:88:44:dd:66:22:58:6e:fc:e9:fe:3c:
         b2:53:e6:83:af:b5:5f:f5:77:57:0d:ac:6d:9c:51:8f:16:20:
         b0:bf:6e:7e:d7:5c:40:34:96:df:3d:da:60:6d:5f:7d:e6:b7:
         59:9c:7d:da:41:b3:ad:75:2c:2e:a9:fb:d8:89:5b:12:54:33:
         e2:7e:1b:c6:90:fe:a7:94:33:b8:73:3e:50:75:9a:e9:de:83:
         42:19:47:34:61:e9:a1:60:7a:b8:9b:d0:71:97:ca:eb:37:bd:
         8d:13:28:21:ba:22:a2:b1:cf:90:b2:78:79:84:74:f6:85:d6:
         6d:aa:ab:39:f0:5d:14:0e:b9:07:e3:67:50:d7:4d:8f:93:ca:
         4c:d1:9d:9d:07:2b:53:95:37:51:6d:aa:7c:39:a2:56:0e:67:
         a1:34:d5:83:1c:38:69:84:14:88:48:0f:90:ea:38:6f:71:c4:
         26:1b:82:df:c8:3e:31:8a:0a:1e:a0:49:e8:4d:b8:5f:58:47:
         a2:5d:51:d7:97:0f:e5:51:90:06:0d:20:f9:d9:52:0f:a1:c3:
         b3:94:f5:78:c5:56:86:98:df:ed:6c:f6:66:12:e5:49:86:3f:
         b3:98:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org