Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e2037343138.roa
File:                     3138312e3230322e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          aXuXPhTjxRDXsgzwTzsoPs6Y+QrD125/nz9bqfUXCNo=
Subject key identifier:   FC:6A:DA:06:C1:F4:9E:B6:48:CE:AB:FA:85:39:93:4B:C6:EE:B2:65
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       3503649A2ADC234E1BBC332606BB9C23A855785B
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:48 +0000
ROA not before:           Tue 05 Mar 2024 17:39:48 +0000
ROA not after:            Tue 04 Mar 2025 17:44:48 +0000
asID:                     7418
IP address blocks:        181.202.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:03:64:9a:2a:dc:23:4e:1b:bc:33:26:06:bb:9c:23:a8:55:78:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:48 2024 GMT
            Not After : Mar  4 17:44:48 2025 GMT
        Subject: CN=FC6ADA06C1F49EB648CEABFA8539934BC6EEB265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:3a:63:e7:9e:2f:2a:3b:35:5e:64:bd:cb:
                    1e:50:db:36:9b:00:e7:1a:50:ca:c1:49:71:d3:de:
                    04:59:3c:14:31:56:ef:e3:cc:8e:22:35:bf:f1:6c:
                    9b:c0:8d:77:59:3a:9f:a2:12:34:98:f7:48:40:71:
                    6f:9f:84:fc:22:43:9f:7b:58:e4:9b:f2:93:a4:2a:
                    1c:87:9f:57:9d:9f:17:c7:0e:33:ee:48:cb:1b:16:
                    5f:91:16:e7:c9:2a:9b:69:ae:ea:24:b6:4b:83:ca:
                    51:b4:d7:88:7d:1a:2d:78:e1:d1:c5:3e:6b:d5:c7:
                    5a:2c:40:1d:74:ec:1b:81:fe:62:0b:cc:d6:04:14:
                    16:f2:75:a8:23:a1:0a:37:fa:02:0c:be:09:9b:8a:
                    f4:37:17:e3:99:3f:21:46:85:e3:66:b9:1c:7b:2a:
                    b8:e4:45:36:51:c6:2d:46:04:4b:57:34:ac:3a:56:
                    33:72:7c:75:60:53:a1:7f:9d:fd:28:64:5b:4d:b6:
                    bd:e3:b0:54:d7:b3:2d:ab:97:b3:dc:e3:38:62:22:
                    74:91:e9:5f:6a:cc:0a:db:c5:34:cc:e2:e8:84:e2:
                    10:24:35:0d:4a:a8:94:2f:c7:35:07:18:c0:8c:7a:
                    0b:d3:a6:9f:9b:ea:11:f0:4a:0b:2c:f6:ec:be:fb:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:DA:06:C1:F4:9E:B6:48:CE:AB:FA:85:39:93:4B:C6:EE:B2:65
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:f3:6a:c7:78:37:9c:24:64:a2:2a:e3:f9:13:9c:b7:34:
         10:b4:24:08:a6:40:35:a4:35:87:c1:c8:9d:fa:b0:92:c8:7b:
         ec:4b:e2:2b:75:b0:7c:e0:d5:c9:20:00:35:67:98:6a:ff:e9:
         2d:21:f4:5a:a9:a7:a1:e6:8a:4a:f6:d7:9d:82:84:d6:9d:56:
         2b:f2:e4:87:d3:62:eb:c0:f6:4f:ac:ae:ff:3d:45:33:41:03:
         34:92:89:aa:fd:71:66:32:b5:62:29:19:3f:52:70:44:12:a7:
         45:bc:4d:74:01:1d:8b:49:84:12:e1:ce:2e:66:48:8b:54:6e:
         fa:da:cb:27:47:d7:68:56:eb:b2:12:a6:e4:59:22:3c:73:77:
         2c:d8:d9:4b:4c:fb:b7:9b:11:67:e8:b0:7f:ba:0f:ee:51:b6:
         5d:a9:f8:49:99:b0:72:25:f0:0a:da:d8:eb:84:ef:c6:dc:f9:
         70:6e:61:24:8e:bd:7c:e6:fe:f7:12:c4:7a:4c:cb:c6:5e:11:
         4a:b7:25:77:ff:1b:cb:43:b5:1c:ab:bc:a8:23:9c:0d:02:22:
         16:31:7c:4a:46:e0:3f:d8:c3:a9:50:4d:a7:72:ef:23:a2:78:
         52:9b:ab:1b:8b:4e:c7:93:c4:5e:c4:2c:74:b9:5c:82:0f:18:
         d1:94:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:20 2024 by rpki-client on console-fra.rpki-client.org