Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa
File:                     3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa (raw, json)
Hash identifier:          Ner9cg37YMVOebUOcHoTLS4GHO3baWygOjtydxmJpC4=
Subject key identifier:   85:BF:E4:97:CC:C6:4E:D4:0D:B6:A6:10:F3:1C:2F:7F:06:4C:C5:A9
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       0BC5BBC88697E230ADB305B0097BEAF5E1C76AF4
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa
Signing time:             Tue 05 Mar 2024 17:44:53 +0000
ROA not before:           Tue 05 Mar 2024 17:39:53 +0000
ROA not after:            Tue 04 Mar 2025 17:44:53 +0000
asID:                     27680
IP address blocks:        190.108.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c5:bb:c8:86:97:e2:30:ad:b3:05:b0:09:7b:ea:f5:e1:c7:6a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:53 2024 GMT
            Not After : Mar  4 17:44:53 2025 GMT
        Subject: CN=85BFE497CCC64ED40DB6A610F31C2F7F064CC5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:a3:b7:cf:f3:5b:1c:3d:c8:3a:47:52:c1:
                    29:e7:0f:43:d5:a3:3c:d1:e7:c0:b1:ce:45:17:c3:
                    02:41:82:a8:77:7a:af:9e:55:5e:ef:ba:8d:1c:33:
                    a4:d2:40:b9:02:be:6c:5d:ff:35:ad:c3:a0:65:6f:
                    82:dd:83:61:f1:c4:15:86:97:c4:6a:d1:1e:d0:e8:
                    fe:45:e5:c5:86:0b:1f:6d:f9:83:e4:60:6c:86:f3:
                    0a:6d:76:b3:52:94:20:6c:e6:00:b1:58:e6:93:ba:
                    7d:fb:80:12:ef:e2:6c:a8:0a:a0:54:df:4d:42:eb:
                    61:08:4b:f0:18:d2:b0:53:ca:f1:88:06:f9:8b:42:
                    9e:fd:aa:ef:b2:5d:b8:11:d0:17:e8:81:5a:79:67:
                    d9:32:30:f7:d4:22:c2:50:35:6b:b0:e4:ca:ac:72:
                    e9:04:39:88:01:6d:cc:39:1a:c3:40:f7:c5:f8:0d:
                    f3:c7:b3:ba:19:c3:60:57:b8:e3:83:99:ed:84:ff:
                    4f:9d:26:72:36:68:a6:f4:bb:f9:5f:45:90:69:50:
                    a5:3c:de:79:b5:50:62:10:80:3e:34:3a:f2:2f:92:
                    a6:2c:7e:9b:00:01:ba:47:74:6a:d9:4a:73:33:dd:
                    c4:62:9d:d4:f1:17:2c:47:ca:74:9a:32:81:65:8c:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BF:E4:97:CC:C6:4E:D4:0D:B6:A6:10:F3:1C:2F:7F:06:4C:C5:A9
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:05:ab:8d:6a:7a:31:5d:fa:d4:7d:fa:c8:d1:9f:fe:e4:
         72:83:9c:e5:f7:b9:63:9e:85:c2:0f:53:84:12:1a:f2:ee:d5:
         96:e0:01:db:4d:29:c3:4a:10:a6:9c:88:1c:6a:bd:d7:0d:15:
         71:29:31:fc:06:e9:10:f2:a4:9b:49:94:8f:62:f7:73:fb:ce:
         3c:bb:25:c7:65:94:c0:4e:08:fb:07:3b:fb:be:55:3e:4f:88:
         39:2b:c4:a9:c8:ee:34:44:49:6a:a0:33:16:66:5d:e7:f5:26:
         f4:1c:24:96:85:33:64:e9:26:2a:47:cc:01:0b:e2:5a:8d:13:
         cb:98:c7:54:8e:de:db:77:97:4c:d1:0d:a1:e2:a4:33:58:6f:
         30:46:21:f7:73:93:d6:86:04:3f:cb:30:e2:4c:9a:2e:cc:08:
         b2:1f:fe:2a:8a:1c:1f:3c:99:95:87:b5:4f:ae:56:8f:32:4d:
         e3:df:e5:40:d8:8d:d3:d4:79:c4:06:22:1a:ca:c0:9d:9e:68:
         1f:b2:ba:94:a5:cc:b1:fe:95:65:b5:4e:2f:bc:3e:32:cf:cd:
         ab:26:cb:11:f5:4d:7b:cb:43:e0:ee:f3:35:c1:91:56:93:45:
         23:7f:47:16:7a:a3:c0:87:47:68:c9:02:bc:b8:fc:7e:6e:c5:
         14:d1:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org