Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3234203d3e203237393935.roa
File:                     3137392e342e302e302f31362d3234203d3e203237393935.roa (raw, json)
Hash identifier:          vTMz0lrFjIv646DdR0joSLSGWAd8b3Dykf4zaPovvjM=
Subject key identifier:   56:2B:4C:83:93:C5:C9:C9:60:4E:F1:20:6A:D8:7B:4C:72:7B:58:7C
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       21B4ADA41DEE5922C287EC004D28A0DC864A456D
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3234203d3e203237393935.roa
Signing time:             Tue 05 Mar 2024 17:47:51 +0000
ROA not before:           Tue 05 Mar 2024 17:42:51 +0000
ROA not after:            Tue 04 Mar 2025 17:47:51 +0000
asID:                     27995
IP address blocks:        179.4.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b4:ad:a4:1d:ee:59:22:c2:87:ec:00:4d:28:a0:dc:86:4a:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:51 2024 GMT
            Not After : Mar  4 17:47:51 2025 GMT
        Subject: CN=562B4C8393C5C9C9604EF1206AD87B4C727B587C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:e5:33:96:fd:bc:20:4f:5f:13:65:8f:e0:
                    73:bf:fa:1b:6e:ea:10:20:49:f8:c1:33:e4:69:cb:
                    12:d9:b2:06:ed:d1:3b:11:50:cd:a6:37:ab:64:28:
                    1a:11:8f:38:90:6a:7d:1f:f2:f8:d1:0f:d3:78:5c:
                    cb:e4:c1:52:1c:ec:e0:15:dc:a8:2b:18:30:8f:71:
                    8f:da:ae:9a:df:7b:a3:0a:56:81:2c:8f:db:9a:2b:
                    b3:4d:47:76:7c:66:e1:43:46:ae:ed:dd:18:3b:2c:
                    a5:2c:50:46:82:4c:b8:a1:24:15:b6:08:80:8e:40:
                    e3:b0:df:c8:29:14:2e:6d:07:85:de:03:65:a1:ca:
                    f6:cc:e7:e7:0e:6f:f8:f0:0d:37:a5:85:3c:19:d8:
                    81:4a:36:25:ca:38:cb:e5:3c:db:ab:36:e3:75:7a:
                    25:1a:56:2f:e0:19:c2:89:46:2e:5a:d6:db:d6:d2:
                    e8:b0:87:c3:a4:e1:8a:7f:f5:c4:32:c9:da:d1:8c:
                    3d:ed:67:2f:2f:6d:37:a9:c5:bf:0a:16:5e:b2:3a:
                    f8:cc:e8:00:1c:90:a0:5d:22:cb:45:19:8f:95:c2:
                    91:5d:be:15:96:15:ff:1e:c4:c6:65:a2:8e:b3:b2:
                    f5:d1:fb:31:e6:f2:57:98:09:63:03:b9:14:cc:36:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2B:4C:83:93:C5:C9:C9:60:4E:F1:20:6A:D8:7B:4C:72:7B:58:7C
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3234203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:4f:57:dd:59:99:b2:72:36:36:da:5d:02:13:56:f2:1f:
         95:25:af:25:53:04:98:ff:71:1d:27:91:50:7e:c6:7b:fb:b7:
         a8:35:ce:73:ce:64:49:ee:4d:21:cf:7d:bc:1d:b0:1c:d1:41:
         b4:29:50:90:ea:d8:38:69:60:01:9c:77:37:98:20:2b:fd:9e:
         f3:32:7f:27:14:44:0a:81:d1:96:67:a4:86:49:85:44:e4:6b:
         6b:b1:01:1b:44:01:25:77:e6:78:65:81:b9:83:bc:df:a7:4b:
         b0:43:4f:cc:38:21:72:cb:cd:bc:44:b6:9f:54:3f:40:de:0f:
         44:b5:64:d4:81:68:84:b5:a1:bc:5a:de:d2:ca:bb:16:21:4b:
         ab:78:de:38:d3:6d:a7:38:ae:dc:ca:89:8f:20:db:17:3d:d3:
         44:88:47:aa:de:59:4c:3b:6f:0e:9e:f5:4b:a9:f2:59:bd:73:
         76:c7:05:14:5a:0a:30:85:64:26:bd:28:2f:0e:75:bc:46:38:
         0c:49:df:4c:c9:fb:e7:d8:95:03:72:05:62:68:db:67:85:34:
         d2:3f:3d:00:34:04:6c:f8:1f:b3:b0:a8:b1:f2:de:23:c5:65:
         ee:68:d0:8f:3b:89:e9:7b:2f:e4:50:08:1a:b9:96:5f:4d:d7:
         cf:fc:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org