Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3138382e302e302f31352d3234203d3e2037343138.roa
File:                     3230312e3138382e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          jJcw6ZmCbKOL8MrxoMF3Y2j7L0pzWNx/jpOf/QxwbRY=
Subject key identifier:   AA:31:60:72:8D:96:54:AC:F5:7B:87:0E:13:99:CD:9F:94:78:7D:30
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       04807448C53A735256618CE26A6A3A709E4E42BE
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3138382e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:52 +0000
ROA not before:           Tue 05 Mar 2024 17:39:52 +0000
ROA not after:            Tue 04 Mar 2025 17:44:52 +0000
asID:                     7418
IP address blocks:        201.188.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:80:74:48:c5:3a:73:52:56:61:8c:e2:6a:6a:3a:70:9e:4e:42:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:52 2024 GMT
            Not After : Mar  4 17:44:52 2025 GMT
        Subject: CN=AA3160728D9654ACF57B870E1399CD9F94787D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:12:dc:4a:a7:0c:9c:c2:f9:e7:fb:b5:a4:
                    91:db:e1:5c:2f:f9:cf:1d:45:28:f6:d8:a9:68:f5:
                    02:70:8f:46:69:bc:ff:16:2e:de:2a:62:89:c9:b5:
                    c6:8e:c7:c6:5f:2d:b6:fd:4c:6e:24:4b:c2:2d:d7:
                    0e:e5:9a:51:8f:f8:c7:4b:e7:fd:1b:5c:95:00:77:
                    54:64:c1:f3:2a:79:f8:ea:b1:2c:e5:c6:6c:10:20:
                    b5:8e:68:f3:13:08:76:74:9e:be:9a:46:54:2b:c6:
                    15:84:13:09:5e:14:9e:df:54:29:e4:2e:cd:f0:33:
                    20:68:6d:11:b8:0e:23:79:35:c0:f7:8f:bb:5f:8b:
                    4d:55:eb:44:3e:88:de:9a:06:73:ff:54:50:1a:1c:
                    25:a0:22:19:3d:9c:c6:59:17:cd:01:13:37:94:35:
                    75:c6:ae:88:87:7d:c3:ad:06:40:67:fe:12:3c:cc:
                    50:e7:89:bc:2f:38:99:ba:a9:cc:98:28:f4:23:60:
                    84:f1:65:9b:cc:5e:91:e5:2b:e1:a3:d0:ce:c1:47:
                    6c:e7:00:f1:93:d8:58:2d:89:f0:17:ea:eb:51:1f:
                    23:2f:16:72:05:65:b5:a9:94:73:07:2d:6c:46:81:
                    a0:a8:6f:85:cb:8c:5e:f5:46:a0:5b:ca:9a:20:23:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:31:60:72:8D:96:54:AC:F5:7B:87:0E:13:99:CD:9F:94:78:7D:30
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3138382e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.188.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         49:35:76:0a:2c:69:b8:52:60:67:d9:34:bc:f1:0c:ed:1e:f4:
         db:c8:87:60:36:b2:28:34:8e:a9:e3:ce:e9:fc:88:d1:16:31:
         c4:cf:f8:fb:d7:9c:15:0f:ea:8c:b8:92:ef:4a:02:72:ff:c3:
         70:6e:17:af:84:a8:4b:a0:e9:27:53:df:6a:0c:08:d6:96:83:
         40:3e:f0:bd:d5:6d:4f:e7:58:5e:9b:bb:58:19:98:4a:a1:e7:
         08:48:b9:b6:5d:36:04:b4:20:3d:ec:67:c1:78:da:a9:6d:fe:
         b0:6a:6a:34:aa:07:ff:68:e2:35:ad:a9:b8:08:03:30:62:8f:
         e5:36:93:ea:44:c1:5e:23:2f:1e:90:bc:fb:1a:4f:5e:18:fe:
         25:b6:0d:24:76:e0:b3:25:47:cf:87:dd:a7:ee:7b:85:d6:3c:
         f6:c7:9c:f5:98:12:bf:d5:85:2b:fd:55:4d:27:b9:75:47:c1:
         74:2b:53:57:be:62:00:85:32:43:ed:f8:a8:49:7e:d5:d9:a5:
         bc:90:10:e7:19:b1:c7:3e:4f:83:1d:fc:bf:00:0e:38:fa:32:
         3e:02:f0:d5:64:0e:80:e8:64:81:75:5d:80:4a:54:ea:4b:87:
         ee:49:9e:8b:08:e3:68:a0:31:ea:8c:26:67:1f:ec:79:5b:68:
         7e:d6:94:99
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUBIB0SMU6c1JWYYziamo6cJ5OQr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCMzkxRjU1Nzc1MTRFMzBGNjRFREY2RTM2MTkwNUNB
MDhDRjU3MjAeFw0yNDAzMDUxNzM5NTJaFw0yNTAzMDQxNzQ0NTJaMDMxMTAvBgNV
BAMTKEFBMzE2MDcyOEQ5NjU0QUNGNTdCODcwRTEzOTlDRDlGOTQ3ODdEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHRLcSqcMnML55/u1pJHb4Vwv
+c8dRSj22Klo9QJwj0ZpvP8WLt4qYonJtcaOx8ZfLbb9TG4kS8It1w7lmlGP+MdL
5/0bXJUAd1RkwfMqefjqsSzlxmwQILWOaPMTCHZ0nr6aRlQrxhWEEwleFJ7fVCnk
Ls3wMyBobRG4DiN5NcD3j7tfi01V60Q+iN6aBnP/VFAaHCWgIhk9nMZZF80BEzeU
NXXGroiHfcOtBkBn/hI8zFDnibwvOJm6qcyYKPQjYITxZZvMXpHlK+Gj0M7BR2zn
APGT2FgtifAX6utRHyMvFnIFZbWplHMHLWxGgaCob4XLjF71RqBbypogIyoZAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUqjFgco2WVKz1e4cOE5nNn5R4fTAwHwYDVR0j
BBgwFoAUKbOR9Vd1FOMPZO3242GQXKCM9XIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0MwQ0VGQzYyNkE5NDk3MjM0REQ3QTI5RjU3Q0EzRjhG
QkFCNUM2RTYwNUE0MEFEQUIxRTA5QTAzOTNEQTE2LzAvMjlCMzkxRjU1Nzc1MTRF
MzBGNjRFREY2RTM2MTkwNUNBMDhDRjU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOUIzOTFGNTU3NzUxNEUzMEY2
NEVERjZFMzYxOTA1Q0EwOENGNTcyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdDMENFRkM2MjZBOTQ5NzIzNEREN0EyOUY1N0NBM0Y4RkJBQjVDNkU2
MDVBNDBBREFCMUUwOUEwMzkzREExNi8wLzMyMzAzMTJlMzEzODM4MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBybwwDQYJKoZI
hvcNAQELBQADggEBAEk1dgosabhSYGfZNLzxDO0e9NvIh2A2sig0jqnjzun8iNEW
McTP+PvXnBUP6oy4ku9KAnL/w3BuF6+EqEug6SdT32oMCNaWg0A+8L3VbU/nWF6b
u1gZmEqh5whIubZdNgS0ID3sZ8F42qlt/rBqajSqB/9o4jWtqbgIAzBij+U2k+pE
wV4jLx6QvPsaT14Y/iW2DSR24LMlR8+H3afue4XWPPbHnPWYEr/VhSv9VU0nuXVH
wXQrU1e+YgCFMkPt+KhJftXZpbyQEOcZscc+T4Md/L8ADjj6Mj4C8NVkDoDoZIF1
XYBKVOpLh+5JnosI42igMeqMJmcf7HlbaH7WlJk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org