Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3132382e302f32312d3233203d3e203237383336.roa
File:                     3137392e332e3132382e302f32312d3233203d3e203237383336.roa (raw, json)
Hash identifier:          w6vsb9PLHpq/qk8lWXLVfd3PCqebHnCfJ93CpXWCW5U=
Subject key identifier:   2A:8D:DA:4F:52:A1:9F:C5:06:48:29:0E:2E:FA:25:33:12:72:57:9C
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4AFDB770E8CBB8CBBAD296218EB33BF4E2FEF6D1
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3132382e302f32312d3233203d3e203237383336.roa
Signing time:             Tue 05 Mar 2024 17:47:52 +0000
ROA not before:           Tue 05 Mar 2024 17:42:52 +0000
ROA not after:            Tue 04 Mar 2025 17:47:52 +0000
asID:                     27836
IP address blocks:        179.3.128.0/21 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fd:b7:70:e8:cb:b8:cb:ba:d2:96:21:8e:b3:3b:f4:e2:fe:f6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:52 2024 GMT
            Not After : Mar  4 17:47:52 2025 GMT
        Subject: CN=2A8DDA4F52A19FC50648290E2EFA25331272579C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:0a:1c:eb:73:cb:b6:e5:6b:be:b0:53:d3:
                    e6:8f:98:1a:da:38:95:10:57:e9:3d:4a:fe:98:d5:
                    ce:8c:0f:e6:5a:41:23:06:7d:9b:5d:fb:d4:e8:6b:
                    b4:af:ac:d9:49:16:e1:01:87:ca:8c:60:8b:3b:ec:
                    f8:8c:ec:fe:74:96:29:18:d6:e0:96:e7:87:51:87:
                    3b:16:7c:41:6a:ea:d2:3b:a0:e2:89:ff:d6:7d:bf:
                    7f:f1:4d:e7:78:8f:c6:60:4a:82:b5:55:84:a4:b7:
                    07:b4:9d:b2:7a:08:9c:5f:19:de:0b:98:60:63:e1:
                    72:28:19:83:38:93:06:14:0c:ee:9b:8d:4e:9c:99:
                    24:fa:55:0c:72:4c:9e:b9:4b:c8:1a:ef:bc:0f:6f:
                    c1:41:c7:bf:67:5e:df:ef:15:b9:f4:0f:b5:43:32:
                    82:7e:a4:d5:65:05:0f:65:3c:33:e2:79:e3:46:f1:
                    89:9b:69:a8:69:ca:f3:ab:c4:6d:bd:e8:ae:4a:a7:
                    e9:0d:85:48:88:1d:ce:d5:97:c0:df:ca:e4:5c:77:
                    88:1e:a7:19:32:f4:27:31:5f:f9:19:05:e9:c9:48:
                    db:a5:85:65:90:dc:3b:4c:51:43:2e:96:0f:c4:c7:
                    d3:f9:21:ff:18:44:55:7d:39:86:5d:8a:0c:1f:92:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8D:DA:4F:52:A1:9F:C5:06:48:29:0E:2E:FA:25:33:12:72:57:9C
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3132382e302f32312d3233203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.3.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:85:72:48:6f:fe:b2:2d:d6:3b:d6:c3:0d:18:2c:a5:a8:6b:
         88:f6:b7:44:c7:d7:38:b5:10:3c:4b:b8:a7:c6:34:d6:4a:fb:
         76:2f:23:20:ed:66:43:4c:04:17:0a:bd:7c:93:6d:cc:7f:ad:
         d2:02:c3:06:19:88:2b:a9:18:ec:94:97:6a:b8:53:4b:06:e5:
         ce:3e:8b:53:6a:63:b2:23:89:29:2c:6a:0a:14:a3:48:92:84:
         52:a8:5e:3a:a6:c0:42:01:11:8c:48:d9:d0:65:6c:76:45:06:
         51:a8:0a:a3:3d:a9:7d:4e:bf:d6:1a:96:9d:d0:ff:82:37:6a:
         fd:2c:f0:e6:ab:5b:a4:0f:1d:f5:89:f4:f0:d6:9b:6f:bd:10:
         00:56:38:7a:d0:4b:4b:93:ee:32:f7:41:45:03:cd:12:7f:24:
         a0:19:cb:0b:42:0e:cf:49:bb:72:88:59:a4:dc:ca:fc:4d:19:
         f7:9e:54:25:be:5e:97:c5:60:5b:0b:4b:52:53:f3:9a:71:a1:
         45:68:55:2d:ed:4d:04:18:63:bf:2e:a9:a1:63:0a:3a:a8:83:
         b4:3f:a4:76:04:04:85:22:f1:98:6e:19:05:f5:20:56:95:26:
         1f:d7:ea:e3:1d:a9:f5:f2:73:35:e6:ff:91:29:85:83:92:8b:
         77:3b:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org