Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e203237363830.roa
File:                     3138362e34312e302e302f31362d3234203d3e203237363830.roa (raw, json)
Hash identifier:          ybZPtqpGoDZ4h9HDTkn1nzLRuvmluT5boJeVi1tHePs=
Subject key identifier:   97:40:83:4A:37:63:52:3C:BD:11:78:4D:8B:52:76:03:E4:EB:D4:99
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       65A4CE9CA4F07FF1CEA3978EAE640BF6224D0617
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e203237363830.roa
Signing time:             Tue 05 Mar 2024 17:44:49 +0000
ROA not before:           Tue 05 Mar 2024 17:39:49 +0000
ROA not after:            Tue 04 Mar 2025 17:44:49 +0000
asID:                     27680
IP address blocks:        186.41.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a4:ce:9c:a4:f0:7f:f1:ce:a3:97:8e:ae:64:0b:f6:22:4d:06:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:49 2024 GMT
            Not After : Mar  4 17:44:49 2025 GMT
        Subject: CN=9740834A3763523CBD11784D8B527603E4EBD499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:c8:22:ae:95:58:fd:03:d0:de:9d:27:27:
                    67:a4:43:88:f4:ee:b9:a3:6e:da:c8:ed:95:aa:3a:
                    60:91:66:37:9f:cd:8c:49:55:7e:4a:ac:ba:b1:79:
                    7b:38:15:c3:2b:f6:e0:00:03:aa:d4:8d:cf:0c:d2:
                    ec:d2:eb:1a:d7:c3:27:4e:3b:b4:db:53:b4:a7:5b:
                    59:17:2f:a9:0c:bd:7b:d8:d8:03:4e:ea:59:82:35:
                    e2:ec:a5:5a:59:d6:4f:93:43:63:5d:ae:b1:ce:e5:
                    8f:70:24:0d:77:a3:2b:86:06:3d:5c:9a:57:bb:54:
                    f9:09:d6:ce:85:d4:11:dd:e7:94:47:aa:37:e4:55:
                    e6:13:60:62:2a:73:bf:65:5d:25:77:d9:68:e7:2f:
                    a6:d3:77:73:3d:88:3f:e2:35:d8:de:f9:0f:92:dc:
                    9c:2a:7a:e2:a1:75:c9:88:9b:5a:9f:d1:9b:6f:00:
                    bc:6a:e0:b3:a8:4b:a3:71:4d:bd:f0:af:7e:37:28:
                    f2:1c:85:5f:49:c0:6d:17:41:7d:bc:a7:25:02:b4:
                    67:ab:0b:9e:4f:35:0f:90:dc:3b:93:f7:4c:44:d4:
                    07:62:9d:29:bc:91:ad:88:84:60:28:a8:88:1e:40:
                    ed:7b:7a:ff:8f:a2:a0:37:65:35:f3:40:22:07:88:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:40:83:4A:37:63:52:3C:BD:11:78:4D:8B:52:76:03:E4:EB:D4:99
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e203237363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:61:74:21:14:cf:53:a9:a2:4c:5d:9f:08:2f:82:f2:d2:22:
         ba:5f:88:37:f5:b8:42:a0:61:ed:cc:54:bf:97:2f:cb:04:10:
         dd:26:59:bf:2a:8c:b7:c5:28:12:bb:10:6c:ac:d6:b3:95:ff:
         3c:e1:56:81:43:5c:59:bd:0c:df:cb:c8:15:ea:76:f2:c3:d9:
         8d:f0:99:36:c6:fb:c8:61:55:d3:b2:f2:9d:7e:11:16:f7:a6:
         5f:ab:b0:c6:e0:f2:a2:ab:1d:81:97:61:fd:7d:56:85:2f:e3:
         2c:51:f0:bb:b5:77:57:7f:30:c5:98:c7:ca:45:ea:8a:3c:c7:
         6f:51:97:8c:64:97:84:bf:d5:e4:af:4b:b5:e3:23:e7:d6:db:
         04:cf:5f:be:df:b8:14:dd:e7:15:1b:e2:da:e6:37:a8:8c:3b:
         ae:2b:22:85:1a:33:e2:66:b1:b7:8f:66:35:40:55:1d:f5:b5:
         88:6e:1a:db:0f:17:ec:3b:f8:38:4e:4c:21:e3:7f:5e:a2:6e:
         4b:6f:68:b0:c0:ca:06:8a:f5:0f:fb:52:c1:f5:62:3c:24:6a:
         e1:af:22:3c:f4:55:28:59:0f:87:26:6d:c4:72:5d:0e:ef:d2:
         85:e7:4d:23:81:36:9c:4a:da:96:0f:a7:f0:bf:cc:81:84:ad:
         d1:3a:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org