Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3138203d3e2036353335.roa
File:                     3137392e342e302e302f31362d3138203d3e2036353335.roa (raw, json)
Hash identifier:          B4pbv+GpTDcW2JKo+WZ5mvCNIAjAFb7zATdGPmUzTYI=
Subject key identifier:   5C:FC:4D:A6:FC:0C:48:D3:D1:99:FC:D5:13:20:B1:F8:97:29:06:DF
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       0BCF7239F3CCC0E36DB25D13181F6291905B497D
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3138203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     6535
IP address blocks:        179.4.0.0/16 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cf:72:39:f3:cc:c0:e3:6d:b2:5d:13:18:1f:62:91:90:5b:49:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=5CFC4DA6FC0C48D3D199FCD51320B1F8972906DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:89:bd:39:01:f0:c9:56:4a:f6:90:ff:4c:
                    e5:ca:0c:cd:4b:e0:f0:61:de:83:c1:33:65:86:68:
                    ef:92:92:20:9f:59:82:2c:87:4c:58:69:7a:6b:d1:
                    b3:29:80:58:9d:9b:f7:cf:e1:fc:b4:c7:50:a4:68:
                    5e:c4:97:cb:2e:40:c8:21:1e:7d:5e:00:4d:e0:4a:
                    fc:44:0f:50:ff:30:78:19:96:72:78:29:4a:c4:ca:
                    e1:b7:7b:28:af:6b:5c:9e:84:89:d0:af:4b:c9:67:
                    67:76:31:d1:6f:67:78:69:9c:25:d1:d5:34:5f:59:
                    b5:a2:39:33:0b:88:0a:48:88:25:8d:cc:e3:b7:b6:
                    dd:39:66:f6:44:dd:d3:45:81:03:42:18:1f:3a:ad:
                    7e:0d:0e:f3:62:ec:f5:57:52:27:0b:51:b4:09:ff:
                    57:0a:77:9a:78:f7:d4:14:d5:ac:bb:5f:f5:20:f0:
                    06:e6:73:eb:0c:29:d9:56:5e:54:ba:39:91:8f:91:
                    ae:b6:3a:a2:7e:ca:54:f1:dd:8b:ca:3c:ba:ca:22:
                    37:7c:00:04:7c:4e:f4:88:c5:48:0e:8b:fd:34:3a:
                    3f:58:e3:c5:e8:3f:92:ca:a6:58:02:aa:6e:30:ac:
                    53:1d:15:29:3e:ac:80:44:9a:91:65:5a:e8:b6:c9:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FC:4D:A6:FC:0C:48:D3:D1:99:FC:D5:13:20:B1:F8:97:29:06:DF
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3138203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:d4:14:27:ad:73:6c:83:ca:ad:4c:99:f6:70:2a:d6:52:
         25:7c:cc:99:58:e2:ea:33:e0:8f:29:06:63:b1:75:b0:b1:c8:
         78:92:ab:1c:78:06:b2:5f:46:70:64:49:10:c2:b8:a0:69:0b:
         3b:41:9c:88:c4:b3:19:eb:1f:0b:4c:08:14:1b:a3:71:1b:02:
         1b:e2:d9:66:bb:7a:95:b6:e3:8f:59:67:67:60:3c:c1:38:08:
         79:f2:21:f7:9f:a4:a1:49:05:09:75:71:02:91:e2:0d:ff:e0:
         99:a5:00:ef:02:7d:37:04:11:ab:31:5f:64:95:3f:ff:f3:ac:
         d5:79:fe:8a:06:86:1d:5c:2b:62:e2:6b:3d:4b:06:81:b3:62:
         16:c2:cf:8d:61:04:a6:72:c3:c2:83:29:88:99:c9:ec:59:fe:
         57:11:a7:d5:1b:7f:3f:e2:1f:44:d6:b0:7a:97:2e:52:18:64:
         c1:8d:cc:87:3b:0b:0f:4c:65:41:aa:e5:f2:84:67:1e:e4:5e:
         fc:1f:b5:62:25:db:35:1e:13:8e:9d:be:fe:06:41:42:77:b6:
         be:dd:8a:09:ae:a1:11:9e:5f:4f:f9:40:04:b3:f1:7e:ea:8f:
         31:fd:09:49:8d:7b:9a:86:0a:26:0a:6e:f4:1e:8d:73:14:5a:
         43:9d:f0:2b
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUC89yOfPMwONtsl0TGB9ikZBbSX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNDAzMDUxNzQyNTBaFw0yNTAzMDQxNzQ3NTBaMDMxMTAvBgNV
BAMTKDVDRkM0REE2RkMwQzQ4RDNEMTk5RkNENTEzMjBCMUY4OTcyOTA2REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaIm9OQHwyVZK9pD/TOXKDM1L
4PBh3oPBM2WGaO+SkiCfWYIsh0xYaXpr0bMpgFidm/fP4fy0x1CkaF7El8suQMgh
Hn1eAE3gSvxED1D/MHgZlnJ4KUrEyuG3eyiva1yehInQr0vJZ2d2MdFvZ3hpnCXR
1TRfWbWiOTMLiApIiCWNzOO3tt05ZvZE3dNFgQNCGB86rX4NDvNi7PVXUicLUbQJ
/1cKd5p499QU1ay7X/Ug8Abmc+sMKdlWXlS6OZGPka62OqJ+ylTx3YvKPLrKIjd8
AAR8TvSIxUgOi/00Oj9Y48XoP5LKplgCqm4wrFMdFSk+rIBEmpFlWui2yWv9AgMB
AAGjggK/MIICuzAdBgNVHQ4EFgQUXPxNpvwMSNPRmfzVEyCx+JcpBt8wHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBvwYIKwYBBQUHAQsEgbIwga8wgawG
CCsGAQUFBzALhoGfcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzczOTJlMzQyZTMwMmUzMDJmMzEz
NjJkMzEzODIwM2QzZTIwMzYzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCzBDANBgkqhkiG9w0B
AQsFAAOCAQEAGN3UFCetc2yDyq1MmfZwKtZSJXzMmVji6jPgjykGY7F1sLHIeJKr
HHgGsl9GcGRJEMK4oGkLO0GciMSzGesfC0wIFBujcRsCG+LZZrt6lbbjj1lnZ2A8
wTgIefIh95+koUkFCXVxApHiDf/gmaUA7wJ9NwQRqzFfZJU///Os1Xn+igaGHVwr
YuJrPUsGgbNiFsLPjWEEpnLDwoMpiJnJ7Fn+VxGn1Rt/P+IfRNawepcuUhhkwY3M
hzsLD0xlQarl8oRnHuRe/B+1YiXbNR4Tjp2+/gZBQne2vt2KCa6hEZ5fT/lABLPx
fuqPMf0JSY17moYKJgpu9B6NcxRaQ53wKw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org