Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e2037343138.roa
File:                     3138312e3230332e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          kY7xUu2LPexQY12v3AMSekWkoUbvJHxPqjJX3ar6NxI=
Subject key identifier:   31:B2:A9:AE:67:A5:F3:57:71:E9:19:5B:D5:C9:07:26:4E:AE:AC:30
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       698A08EE3F9D31752F4D555FF68A527C55B7F17D
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:51 +0000
ROA not before:           Tue 05 Mar 2024 17:39:51 +0000
ROA not after:            Tue 04 Mar 2025 17:44:51 +0000
asID:                     7418
IP address blocks:        181.203.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8a:08:ee:3f:9d:31:75:2f:4d:55:5f:f6:8a:52:7c:55:b7:f1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:51 2024 GMT
            Not After : Mar  4 17:44:51 2025 GMT
        Subject: CN=31B2A9AE67A5F35771E9195BD5C907264EAEAC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:c5:94:ea:c8:56:2e:73:25:55:89:56:bc:
                    28:76:40:2b:d6:53:d5:7e:57:72:ea:9e:90:ef:39:
                    05:52:be:98:99:8f:22:92:91:a4:d6:8c:a9:2a:c4:
                    55:05:02:e7:be:1e:85:63:84:f0:3c:ec:5f:2c:a0:
                    c2:8d:17:a1:03:a0:75:39:a3:2a:eb:b4:b9:c3:85:
                    72:aa:62:cf:fc:ca:3a:97:34:22:13:24:46:0c:a7:
                    c0:db:19:f2:10:18:af:66:45:43:8c:72:1a:26:fe:
                    46:53:ba:27:70:7b:62:41:33:b5:3d:ff:2e:d8:06:
                    c0:00:98:d0:bc:5d:ec:c9:19:7c:e8:f4:c2:f3:44:
                    1e:1e:f8:cc:8c:dc:95:2b:59:76:0a:97:bd:69:b8:
                    28:e6:3d:38:47:7d:1e:ce:06:01:dd:62:cb:44:96:
                    08:de:fc:ac:8c:cf:45:4a:e0:2b:40:f8:30:1f:0b:
                    47:26:6b:8f:eb:fd:34:2a:8d:d3:6e:13:ef:99:2b:
                    f1:ba:04:01:0a:86:32:d1:c2:8b:b9:38:d0:dc:55:
                    d9:a5:43:03:97:68:86:cc:45:7d:f8:7f:be:b3:f3:
                    77:64:c2:78:68:47:1f:19:82:2f:44:ae:18:96:3c:
                    8f:f8:ca:6e:75:e6:43:a8:3c:d5:12:93:fc:c4:e2:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B2:A9:AE:67:A5:F3:57:71:E9:19:5B:D5:C9:07:26:4E:AE:AC:30
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.203.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:94:68:59:ba:11:4d:13:31:67:35:96:e4:4b:1d:b5:51:f5:
         7f:27:e9:fc:1c:4c:51:d9:53:4f:c6:1d:a6:ff:da:b4:37:9f:
         7c:8c:87:73:1d:e9:fc:e2:c8:39:73:7b:d5:60:50:2b:48:c8:
         d5:31:1d:bc:26:4b:b1:aa:89:32:f6:8e:7f:b3:eb:9a:b8:d7:
         b4:cc:07:19:a8:d3:ac:74:fa:97:1f:00:83:f8:2e:83:d9:d5:
         b0:e5:b4:8a:a1:8b:5f:fb:6a:d0:c3:48:3e:ee:75:bf:04:38:
         eb:ec:83:30:21:4b:9d:f0:32:9b:97:94:40:df:72:2f:5b:ef:
         92:cf:ab:f3:fa:6b:a8:2b:a6:64:d5:5b:8a:f0:09:4b:e4:1c:
         49:86:9e:cd:ff:e2:98:13:ec:c8:e7:5a:f9:15:3e:fb:45:b8:
         67:92:8c:77:3f:e7:e0:28:9d:11:01:89:b5:7a:a9:dd:b9:3f:
         2e:00:87:98:24:26:1f:70:11:c7:49:12:9e:5f:5b:66:6b:01:
         09:cc:75:cf:9d:01:87:ea:f9:5e:b4:05:8c:ef:81:8f:f4:30:
         e9:cb:42:1f:df:7a:04:50:a6:bc:ef:59:59:74:aa:4b:7b:97:
         94:64:f0:ca:7a:71:b2:0f:4b:5a:3f:26:d9:81:bc:ff:a2:16:
         5c:c5:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:20 2024 by rpki-client on console-fra.rpki-client.org