Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138312e3131382e36342e302f31382d3236203d3e203238303735.roa
File:                     3138312e3131382e36342e302f31382d3236203d3e203238303735.roa (raw, json)
Hash identifier:          CnbWvT+iCyLry4WGNS5vY/1uVcYhyk2hvxjoSEy/v48=
Subject key identifier:   7C:32:F9:18:11:CE:A5:70:50:56:4B:0D:43:43:36:97:67:C4:FD:EE
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       29D3D4F34AB6432F2D9C61657301406C00B91B80
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138312e3131382e36342e302f31382d3236203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:48 +0000
ROA not before:           Tue 05 Mar 2024 18:06:48 +0000
ROA not after:            Tue 04 Mar 2025 18:11:48 +0000
asID:                     28075
IP address blocks:        181.118.64.0/18 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d3:d4:f3:4a:b6:43:2f:2d:9c:61:65:73:01:40:6c:00:b9:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:48 2024 GMT
            Not After : Mar  4 18:11:48 2025 GMT
        Subject: CN=7C32F91811CEA57050564B0D4343369767C4FDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:11:b0:ea:cd:0b:be:8d:a4:59:96:ce:e1:
                    a7:fa:be:b8:b1:5e:03:21:41:5c:0e:34:26:39:00:
                    0d:82:fe:95:f2:8f:45:b1:77:a2:20:b6:65:a5:41:
                    be:d4:65:b7:3d:f2:1e:68:07:c6:25:e6:f5:90:bd:
                    f4:32:91:7f:50:c2:83:51:d7:9f:1b:6c:d3:60:58:
                    96:b4:72:91:b6:34:ee:2a:51:64:3f:0e:a1:8e:b1:
                    40:68:a1:04:a6:70:19:a5:c9:e6:10:ff:c3:d7:17:
                    43:49:ea:62:2a:3a:8d:cc:e4:e0:e0:e4:a5:30:ed:
                    11:a1:4d:fa:f3:2e:d6:d3:87:b4:88:df:3f:a2:3c:
                    0e:9c:8c:cb:53:91:ef:e0:3e:d5:ee:7a:61:5d:71:
                    24:c9:86:7c:31:f3:24:57:21:2c:c9:de:de:21:11:
                    3e:b6:fb:f5:f7:6e:b0:a8:b6:e5:c7:7d:ff:7b:38:
                    24:c5:41:eb:4e:c1:d9:d1:a4:6a:01:b6:0b:a0:2a:
                    2c:69:99:e3:78:02:69:ff:b8:0a:de:74:fa:cf:1e:
                    b2:e3:67:de:95:43:ff:b4:ac:db:fb:13:90:cf:5c:
                    94:15:f0:60:d9:01:b1:8c:0e:62:03:1e:a9:4b:49:
                    7c:3b:97:b0:d4:9f:7a:b7:1f:2f:27:59:c5:75:65:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:32:F9:18:11:CE:A5:70:50:56:4B:0D:43:43:36:97:67:C4:FD:EE
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138312e3131382e36342e302f31382d3236203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:84:ef:c1:d7:09:60:cf:09:1c:87:a4:bf:7e:ff:f2:cc:
         e7:50:a0:f4:e2:4c:91:a3:53:fa:b2:6a:8b:b4:9a:b6:95:cd:
         ab:78:af:a9:34:51:5d:14:7a:d0:67:a8:b8:79:83:fa:f6:c3:
         78:16:1b:8e:ca:ea:47:ab:18:37:e2:5f:ac:d9:36:b0:10:fc:
         85:51:c9:6e:25:6e:8e:b4:b9:a2:6e:63:e4:b1:d0:13:28:b5:
         36:11:ce:d2:47:e6:a0:63:fa:4a:24:08:2c:bd:61:4c:37:c1:
         80:2e:ab:39:e5:66:41:22:f1:03:61:bd:f6:6e:41:8d:f9:34:
         45:11:a2:50:e9:35:05:6b:4b:ee:e0:6e:f4:07:f6:bd:31:61:
         f0:6c:b4:83:b1:34:14:8e:a1:4a:b9:ec:41:fe:e8:9e:e2:5b:
         1d:00:e0:87:d7:7c:01:c7:63:65:66:d2:4e:63:e5:96:ce:2b:
         86:1e:48:ba:54:73:31:5f:ca:4e:46:c9:e0:f4:1f:d8:94:95:
         f6:16:c7:a9:8b:36:e1:29:ac:ec:37:da:5d:85:aa:84:86:e4:
         81:53:02:88:01:b2:aa:a9:26:da:14:3f:91:1a:19:18:a3:45:
         a0:f6:7c:c2:91:c9:c1:06:ce:de:7b:d9:e3:a7:8d:d4:9c:8e:
         5e:75:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org