Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230302e302e302f31362d3234203d3e2037343138.roa
File:                     3138312e3230302e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          Zt7qCuLDFCF2KhYdqeiV4qtnlWqvGme4dU7vFFtbkkM=
Subject key identifier:   A0:9C:03:D7:63:B3:BD:C9:52:A9:65:3D:8F:4A:41:14:3A:D7:72:A7
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       7AF96E3EE58F2BC0EEB2028B33683FCC69184296
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230302e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:53 +0000
ROA not before:           Tue 05 Mar 2024 17:39:53 +0000
ROA not after:            Tue 04 Mar 2025 17:44:53 +0000
asID:                     7418
IP address blocks:        181.200.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f9:6e:3e:e5:8f:2b:c0:ee:b2:02:8b:33:68:3f:cc:69:18:42:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:53 2024 GMT
            Not After : Mar  4 17:44:53 2025 GMT
        Subject: CN=A09C03D763B3BDC952A9653D8F4A41143AD772A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:cb:47:46:49:21:05:13:f4:c8:fb:43:b7:
                    35:19:63:ec:f1:fa:46:38:87:a9:b5:10:2d:0a:2d:
                    36:8b:07:d5:55:02:43:50:d9:28:e2:78:4b:8d:a1:
                    19:f5:41:a2:27:41:e5:28:8b:a4:56:94:88:b1:fc:
                    d9:b6:db:15:49:0b:90:19:82:e8:bc:e0:c4:bf:e4:
                    b9:96:7b:6c:50:cc:82:50:74:6f:eb:18:fb:07:12:
                    57:46:f2:f2:a5:d6:40:db:eb:9f:d9:e3:03:ef:c9:
                    12:88:d0:e0:cf:35:a2:82:39:77:f3:68:8d:1f:18:
                    33:fb:df:17:fb:1c:90:69:3b:3d:e8:46:a1:58:a4:
                    74:14:78:0b:af:98:e2:96:b9:d6:7b:25:4e:23:71:
                    40:03:4d:b0:e5:8b:77:17:d3:b7:86:75:8e:8b:ff:
                    21:1d:bf:cf:b8:72:c2:af:6e:d8:50:79:b6:0b:38:
                    d4:10:a1:f0:c3:5c:41:bb:5d:43:c0:37:f4:1d:f4:
                    83:cf:c6:ae:ac:8c:2a:3b:8e:b2:d3:39:ea:a2:80:
                    32:6f:b7:7a:6b:7f:8e:9c:92:d2:a5:89:02:d6:25:
                    26:ae:f1:54:e5:24:57:92:ea:b0:1a:27:86:a5:5e:
                    19:24:4d:39:78:60:f4:b5:e7:7c:b4:d6:11:1d:39:
                    32:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:03:D7:63:B3:BD:C9:52:A9:65:3D:8F:4A:41:14:3A:D7:72:A7
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230302e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:42:48:b1:c3:10:76:3c:69:6d:00:4a:e8:f8:41:85:79:
         fa:65:0e:28:aa:47:03:42:ff:86:3d:ed:6a:54:4c:1a:29:c7:
         45:46:05:df:f3:ae:ac:2e:64:9e:62:d4:a2:67:a7:08:c6:7f:
         be:95:e8:9f:4a:41:af:c3:3e:6f:5f:68:85:8a:b8:6e:d5:77:
         14:ef:99:79:08:33:de:2c:24:79:7c:5d:47:24:cf:ba:89:15:
         14:37:0b:54:2c:f6:1b:af:91:82:87:a5:5c:50:48:86:06:95:
         7d:16:d4:46:fe:5b:aa:5a:0d:67:8c:6b:e0:35:42:dd:0f:7b:
         19:48:73:37:88:ca:bc:1a:2c:13:95:cb:96:8d:9e:80:18:10:
         bf:a1:19:00:69:cd:b7:fc:47:30:78:08:5c:fd:7b:5b:ac:d3:
         b5:3d:34:e2:b1:97:41:eb:56:32:db:9c:9c:fb:d5:59:34:f9:
         0b:df:0a:b9:17:99:26:e1:8e:48:59:f8:3e:50:ee:63:ec:53:
         a7:12:6d:de:53:32:4a:40:6f:8f:de:8f:79:17:20:a3:c1:93:
         d9:e0:36:09:1a:6b:8d:63:7d:a1:29:f8:10:38:c5:6b:e8:d2:
         0b:3b:c0:03:5c:97:7d:d9:e9:ad:c1:1d:f5:a0:4d:2e:3d:57:
         f3:2f:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:33:24 2024 by rpki-client on console-ams.rpki-client.org