Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31352d3234203d3e203237393935.roa
File:                     3137392e322e302e302f31352d3234203d3e203237393935.roa (raw, json)
Hash identifier:          mgN7HCKf0X/zEdcXUrwgrmYuAcMFlNeGPx6BbIm6cyk=
Subject key identifier:   38:28:37:99:5C:BA:BA:BC:07:25:A7:E1:62:BB:DA:B3:91:DE:CD:2D
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       1E23CCF7F98B75FF981C257311A6E5950EB271B1
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31352d3234203d3e203237393935.roa
Signing time:             Tue 05 Mar 2024 17:47:51 +0000
ROA not before:           Tue 05 Mar 2024 17:42:51 +0000
ROA not after:            Tue 04 Mar 2025 17:47:51 +0000
asID:                     27995
IP address blocks:        179.2.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:23:cc:f7:f9:8b:75:ff:98:1c:25:73:11:a6:e5:95:0e:b2:71:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:51 2024 GMT
            Not After : Mar  4 17:47:51 2025 GMT
        Subject: CN=382837995CBABABC0725A7E162BBDAB391DECD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:d6:7f:ca:02:6e:6e:71:62:8a:4d:61:24:
                    b8:ed:e7:88:0f:77:c4:5a:3f:2e:f1:b2:2a:1d:b8:
                    86:3f:0c:ae:23:b2:f2:9d:db:10:5e:e7:59:a0:1a:
                    12:77:f8:de:be:89:d5:b0:26:45:90:7c:ee:73:e2:
                    43:84:15:88:09:de:2b:43:e7:be:50:70:7f:cd:87:
                    2f:b0:c9:92:3e:94:9a:a5:51:91:27:70:9a:5d:93:
                    18:9e:2b:5f:38:ba:ff:bd:e5:ad:1e:9a:50:aa:cb:
                    0a:ed:06:3f:ef:1f:bc:73:c5:fe:3f:bd:62:cd:02:
                    34:ed:92:3f:00:bb:3f:20:f7:a6:0b:54:4b:51:ee:
                    0a:7a:b9:6d:48:6e:fd:b3:85:b1:01:9f:67:95:c7:
                    3d:3c:99:b0:49:7f:a2:e6:b7:d9:be:dd:90:28:3e:
                    f4:97:56:51:76:49:e3:1d:eb:3e:ac:f5:fd:c7:9c:
                    5a:3b:30:df:d1:45:ad:c5:93:46:b9:5a:5c:1a:ba:
                    1c:5d:b3:61:9e:2d:00:1b:29:31:d0:2c:7c:9b:42:
                    bb:25:99:57:b6:6e:38:d5:d2:99:d0:81:e0:05:f2:
                    3f:3e:f1:2d:20:c6:4e:16:40:9b:92:15:84:82:47:
                    ea:56:97:a0:ce:ed:e1:0c:93:25:5d:52:4d:aa:78:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:37:99:5C:BA:BA:BC:07:25:A7:E1:62:BB:DA:B3:91:DE:CD:2D
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31352d3234203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         26:72:89:5c:18:50:23:ce:0a:e5:38:72:9c:66:87:d5:ab:be:
         1e:33:59:63:eb:0a:7b:74:09:61:35:56:29:7d:0f:1a:5c:fc:
         c9:58:be:35:f4:12:a8:5e:34:5b:4d:95:d1:5c:77:2c:e1:28:
         86:bf:46:10:3c:44:58:2a:32:2f:e1:7a:cc:0d:6e:ac:3f:05:
         63:1b:cf:bd:eb:b2:99:0e:7d:83:a0:59:8a:3d:90:99:55:62:
         b9:e1:3e:d2:45:ba:50:d8:46:b3:35:f3:9d:2d:de:bb:07:e7:
         59:c4:7f:64:3d:b2:54:5e:d9:b3:c4:6e:d2:54:93:97:a1:c0:
         72:f0:40:32:36:89:9d:9d:e4:ad:bf:d2:6f:db:ad:ba:e7:64:
         ed:10:a1:f8:0a:55:14:aa:d0:a4:d0:f9:06:3b:d5:92:1d:c3:
         9e:55:85:ca:56:77:bc:c8:20:42:5a:40:f7:35:3b:1d:c5:01:
         4f:7b:11:3e:32:4f:de:f0:5d:82:5f:a6:52:52:7f:81:18:5f:
         89:5b:36:1d:9d:6c:04:c8:80:81:2f:61:14:04:d2:45:92:cd:
         13:ca:36:fe:77:8a:bc:02:d2:17:24:3b:3e:37:11:1a:5b:0e:
         b2:2e:65:d1:ef:5f:e4:5d:d4:2c:f7:52:1a:b8:51:8d:08:a5:
         ac:5b:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 11:37:37 2024 by rpki-client on console-ams.rpki-client.org