Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237393935.roa
File:                     3138362e3137322e302e302f31342d3136203d3e203237393935.roa (raw, json)
Hash identifier:          6EwUI0l6uyWpJw/MdTvE8JXzCSQ98zEZoFUmRM7mNng=
Subject key identifier:   E8:7B:A0:60:3D:5D:86:A1:05:49:D9:94:72:8B:09:9E:AE:4E:60:47
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       61F4474107AC4F1E6D3536114546228E843D8CB6
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237393935.roa
Signing time:             Tue 04 Feb 2025 18:12:11 +0000
ROA not before:           Tue 04 Feb 2025 18:07:11 +0000
ROA not after:            Tue 03 Feb 2026 18:12:11 +0000
asID:                     27995
IP address blocks:        186.172.0.0/14 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f4:47:41:07:ac:4f:1e:6d:35:36:11:45:46:22:8e:84:3d:8c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:11 2025 GMT
            Not After : Feb  3 18:12:11 2026 GMT
        Subject: CN=E87BA0603D5D86A10549D994728B099EAE4E6047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:54:1f:4e:34:89:c6:4d:2d:32:ac:42:0e:
                    17:e5:ac:88:2a:b0:d1:4e:12:12:4e:98:97:28:de:
                    41:01:65:fb:96:1e:c2:e4:99:44:fa:12:5f:e5:70:
                    50:47:81:ee:11:92:c0:50:d3:9b:92:aa:fb:c8:e5:
                    6d:b4:f6:6b:2b:81:1e:fb:f1:c0:30:9a:5f:b3:19:
                    ce:95:29:eb:32:64:ec:6b:c1:08:7f:5d:ee:59:51:
                    bb:c7:12:6b:2c:39:37:d9:7d:ee:aa:62:8c:c4:4a:
                    81:e0:4f:cd:af:05:88:f9:ff:de:ec:ed:f5:70:6c:
                    74:ef:57:a2:20:ae:17:6e:f9:46:bf:0e:bb:e1:d9:
                    5e:80:9d:ba:96:dd:92:99:8a:ba:23:58:05:98:3e:
                    81:c8:4c:ba:60:e4:c6:68:81:6d:8f:d8:ae:c6:c0:
                    5d:2f:55:c6:17:d6:86:70:a6:60:fa:78:45:55:77:
                    b0:89:f0:c5:a6:a6:f3:c5:b3:4a:6b:13:35:40:80:
                    fe:e3:1a:dc:27:33:6d:c1:11:a1:e5:9f:2f:64:55:
                    4b:a5:36:a2:78:35:29:1d:e4:5b:9b:16:48:7b:f0:
                    b9:a7:72:84:b1:c2:ba:20:ec:d2:42:8f:a1:c7:2b:
                    28:79:28:84:c9:ef:ee:24:91:98:3c:3d:27:8d:f7:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7B:A0:60:3D:5D:86:A1:05:49:D9:94:72:8B:09:9E:AE:4E:60:47
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c5:c2:f7:a5:08:9f:ef:2c:88:ed:a6:e9:b0:6d:b5:25:c3:19:
         d3:9b:99:da:04:bf:8a:6f:fd:08:11:4e:b6:77:d0:db:e5:ad:
         64:fa:c6:5f:46:7f:4f:3f:85:27:ed:44:7d:72:c0:93:60:6f:
         ed:a8:c8:35:56:99:9c:19:e2:c5:66:92:c9:6e:bb:92:a6:be:
         16:76:33:87:93:42:12:ad:45:98:49:e6:f2:5f:05:89:b6:d2:
         54:fb:c1:26:09:53:8d:ae:95:ea:5a:8c:77:2a:40:99:a1:a7:
         13:74:3a:59:47:02:f1:f7:c1:6c:b0:68:a9:2b:f5:09:4e:bd:
         9c:f6:80:2a:18:2e:fb:c6:62:5c:3b:33:48:4c:72:35:72:14:
         67:ae:97:cd:52:ca:4f:6e:47:a1:c4:dc:dc:b2:13:c2:23:37:
         03:74:63:1d:20:0e:43:23:ed:87:13:06:43:6f:a4:ea:3b:ff:
         ca:a8:bf:22:a9:00:9a:bd:a1:fd:eb:85:67:d8:6e:43:14:11:
         c7:10:23:49:ea:80:bd:bb:41:07:c8:5f:83:95:be:9a:24:9a:
         25:46:5e:04:81:a0:f8:01:cd:64:0b:20:c7:6f:b3:39:89:22:
         b5:63:ca:78:e6:83:f0:96:38:87:6c:f3:81:80:02:75:33:84:
         0c:29:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:35:43 2025 by rpki-client