Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa
File:                     3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          kSep+f7TYFNcspldWKqPfvjt98ZOKEN5yfyUcwMI0n0=
Subject key identifier:   AE:09:4A:9B:6E:B4:35:40:E8:7B:FD:66:C7:B3:DF:5A:EB:9E:E0:4D
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       63F9B1BF01963D4C178FAD76688F2FEE1E9D78E4
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:00 +0000
ROA not before:           Tue 03 Sep 2024 13:40:00 +0000
ROA not after:            Tue 02 Sep 2025 13:45:00 +0000
asID:                     6400
IP address blocks:        201.229.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f9:b1:bf:01:96:3d:4c:17:8f:ad:76:68:8f:2f:ee:1e:9d:78:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:00 2024 GMT
            Not After : Sep  2 13:45:00 2025 GMT
        Subject: CN=AE094A9B6EB43540E87BFD66C7B3DF5AEB9EE04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:e1:92:49:25:7f:42:e9:08:dd:0b:06:22:
                    10:54:f3:cc:51:19:63:1c:bd:a1:e4:88:9c:e2:47:
                    e0:1f:df:0f:0c:91:e9:7b:22:d6:3a:06:7a:2f:24:
                    ae:f1:05:06:64:41:06:91:6b:e2:49:40:b9:a5:f1:
                    29:b1:ce:8e:48:50:7a:5e:e9:47:af:8e:f3:bc:31:
                    22:f5:d6:02:0a:c6:96:10:64:1c:b5:3e:1a:3b:86:
                    93:9c:54:3a:6d:b4:5a:6b:0e:b0:dc:3b:3d:0e:39:
                    f4:58:69:1a:a7:ac:d0:32:72:7e:c0:23:da:82:8d:
                    4d:01:c2:d2:1c:e2:40:74:d6:5f:ec:ea:59:13:e3:
                    66:62:67:44:11:6d:64:53:c4:29:0e:64:ea:8c:3c:
                    aa:03:59:fd:a7:a8:a8:4a:b6:d1:1e:ff:28:2c:8b:
                    44:ac:01:72:91:91:0a:c6:52:a7:6d:8b:ac:d2:9c:
                    fa:33:35:93:87:59:fc:71:a1:e6:67:b3:01:f4:62:
                    14:4b:4e:9e:8d:68:1b:e9:af:12:25:2b:1c:d6:73:
                    ca:8d:3a:cb:ac:9b:3d:cf:df:c3:ed:32:8c:ee:8e:
                    2b:c2:97:03:11:b1:b4:35:67:23:4b:be:93:da:76:
                    1c:30:2e:1d:8d:e6:2f:42:db:a9:47:15:82:e1:4f:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:09:4A:9B:6E:B4:35:40:E8:7B:FD:66:C7:B3:DF:5A:EB:9E:E0:4D
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3230312e3232392e3132382e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.229.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:63:3d:c7:a6:3f:4c:41:61:86:ab:b9:b2:9e:89:9a:50:
         8a:b1:e2:68:df:39:6e:10:9e:97:43:d2:5d:0b:65:a4:cc:eb:
         b0:c0:67:92:27:24:31:b0:2e:8b:8d:e7:9c:da:ab:ae:e9:1c:
         f5:24:83:2e:5c:da:b6:2e:c8:b7:07:eb:3f:02:e7:6e:d0:d3:
         e6:51:2f:e5:78:ec:68:5b:4a:d5:e3:9d:e5:21:25:f8:a3:61:
         ca:fd:16:b5:24:12:7a:31:9b:c9:11:8c:d8:a7:15:62:17:b3:
         1c:fb:51:eb:97:2f:6c:a3:3e:85:cd:f2:3b:63:9f:28:f1:17:
         f2:13:b2:25:d8:62:90:09:7d:e0:a8:14:b1:3b:35:65:f8:67:
         17:42:4e:e5:58:7c:f8:80:eb:1e:27:5e:4c:2e:c1:79:e0:f0:
         dd:9e:ee:1d:8c:27:d4:11:bf:bd:0a:e4:6c:08:b7:73:d7:a3:
         10:d6:e8:6f:8e:7c:6e:75:bd:7b:4f:90:63:9e:15:ed:d5:e8:
         e1:36:11:8d:43:65:dd:0e:b3:7b:cf:c4:1f:9e:8e:27:df:44:
         ae:b2:e6:61:50:6c:0e:25:88:0a:a5:86:11:21:9c:fd:5f:f1:
         e2:ff:61:ae:ff:9b:13:7d:55:7e:c9:34:de:63:e2:cb:6b:b8:
         31:02:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org