Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e302e302f31382d3234203d3e2036343030.roa
File:                     36362e39382e302e302f31382d3234203d3e2036343030.roa (raw, json)
Hash identifier:          A8YmnhqGkRDT5eT6+YKOyqnOPyKgFoKQ0NJPMlyUgmo=
Subject key identifier:   B4:17:0C:18:50:3F:C6:C0:F8:27:D3:8C:FE:A8:9E:E6:4F:B0:5D:08
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       695DC9132927D23497CE36E893D471A47720F12D
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e302e302f31382d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:02 +0000
ROA not before:           Tue 03 Sep 2024 13:40:02 +0000
ROA not after:            Tue 02 Sep 2025 13:45:02 +0000
asID:                     6400
IP address blocks:        66.98.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5d:c9:13:29:27:d2:34:97:ce:36:e8:93:d4:71:a4:77:20:f1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:02 2024 GMT
            Not After : Sep  2 13:45:02 2025 GMT
        Subject: CN=B4170C18503FC6C0F827D38CFEA89EE64FB05D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:c5:f9:e9:c7:45:18:d8:8c:b3:35:34:00:
                    14:16:46:4a:2f:2b:88:8f:2f:e5:45:42:e0:08:9b:
                    f8:64:80:6e:63:99:55:f6:f3:4b:51:36:51:79:9a:
                    5b:a2:6a:7a:1a:15:31:af:97:ca:c6:d9:06:34:71:
                    20:1f:4f:3b:22:37:ae:49:44:32:86:89:40:81:cb:
                    54:c3:03:77:98:6a:2f:25:e6:5c:94:6e:e2:08:ee:
                    0d:d2:ea:88:a7:77:94:a0:6d:b7:6f:a6:c5:de:9f:
                    18:f0:1e:2b:28:d3:54:5f:3d:f9:ed:15:d2:15:1f:
                    aa:18:ee:70:64:4f:64:08:df:dc:2b:22:9a:d1:13:
                    5c:ce:48:ae:18:74:07:7e:38:bc:96:a0:e6:53:29:
                    dd:b5:71:54:95:09:7d:ec:46:aa:f0:06:85:56:f1:
                    e3:5f:92:7a:d8:83:c1:64:41:9b:0f:7d:b1:5c:67:
                    0d:fa:af:b2:fd:8f:83:6f:0d:2e:64:99:a4:51:ea:
                    0a:0b:00:04:1d:12:f7:6a:52:81:27:2b:c7:07:d9:
                    00:82:21:b5:7b:cf:74:97:60:b9:64:ca:59:1b:a8:
                    76:35:d5:67:d9:c2:d0:e3:f7:e2:bf:6b:e1:fa:40:
                    48:5a:30:fc:4e:65:bc:73:a0:46:11:bc:cf:9b:f3:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:17:0C:18:50:3F:C6:C0:F8:27:D3:8C:FE:A8:9E:E6:4F:B0:5D:08
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/36362e39382e302e302f31382d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.98.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:c4:67:73:a2:cb:ba:a6:77:3d:bf:13:f0:f7:66:ab:af:
         71:33:1f:6d:58:ed:3c:b7:03:f8:04:b6:7b:de:b4:b7:ee:d8:
         8d:64:53:57:6e:64:f1:ab:27:10:58:5e:50:d6:51:fd:8b:2e:
         69:5d:2b:59:8f:7a:3e:c3:4d:d1:41:ee:5f:3e:e9:74:b7:31:
         b5:ba:c0:dd:ac:e8:25:09:a3:56:0b:ae:2e:5c:f8:54:d8:d1:
         37:c8:64:94:86:41:05:2c:df:9d:39:bd:ae:80:12:d7:1e:bb:
         dc:07:56:b6:51:b7:bc:8e:a6:da:b3:d5:d0:ee:14:65:8a:10:
         c3:db:16:4e:3e:c9:7a:48:fa:c3:f4:6f:1e:18:ce:97:d9:e0:
         7e:e0:c0:ef:24:12:72:ef:e1:9d:31:c8:aa:dd:10:67:a9:ef:
         cd:b8:da:51:a9:75:32:69:11:ed:df:03:63:19:5d:6f:02:26:
         fd:6b:af:99:02:6a:2f:17:f0:9f:e9:12:7b:7b:34:c1:ac:31:
         b4:9a:74:dc:80:ef:b4:63:46:1b:11:43:8f:c7:85:9f:02:c5:
         14:86:aa:23:c9:1c:2f:32:b9:77:68:e1:c7:22:38:a9:b5:27:
         24:ca:df:88:90:48:e7:c9:73:2f:e6:6b:39:1f:54:c1:04:6b:
         f6:aa:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org