Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237393935.roa
File:                     3138362e3137322e302e302f31342d3136203d3e203237393935.roa (raw, json)
Hash identifier:          HV9YfGRnIC1AV3QjKvBGyYH8PgGCn5nUJ9N63zmK82A=
Subject key identifier:   73:A4:E6:D0:B2:CB:57:98:05:C4:4E:96:64:65:36:F8:B5:7E:2C:7F
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       7CB1728C861A70BFFEA03E6FD7A606CFEA9E35E9
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237393935.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     27995
IP address blocks:        186.172.0.0/14 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b1:72:8c:86:1a:70:bf:fe:a0:3e:6f:d7:a6:06:cf:ea:9e:35:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=73A4E6D0B2CB579805C44E96646536F8B57E2C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:05:09:60:41:e3:a7:2e:a1:ee:11:64:7f:
                    b6:40:04:37:27:6c:5a:0d:f6:c0:5d:fe:b4:78:1b:
                    fd:31:03:22:f1:5c:59:c1:1c:f5:20:4b:1b:5a:b0:
                    74:ea:fa:b0:43:1d:de:ad:37:48:80:d4:63:c3:12:
                    6f:d2:9b:bc:81:af:c3:d2:89:6c:39:1d:74:e2:41:
                    6f:6c:a7:1f:b3:47:10:54:b0:27:8e:8f:eb:7b:34:
                    1f:74:e9:f7:11:0e:94:c0:1c:fd:71:07:35:be:2e:
                    2b:49:8c:5d:c5:fd:4c:95:19:06:b5:12:3c:78:70:
                    59:93:00:0b:02:66:3f:c2:6c:ad:0e:3a:60:d6:69:
                    71:80:74:13:3c:3b:db:e0:a1:6b:6b:83:73:2a:61:
                    28:82:c7:8f:3d:17:56:b8:a9:cc:41:c2:79:1a:96:
                    a1:a1:16:b5:42:80:a1:a1:11:e5:44:7c:a1:19:b6:
                    9d:83:7a:77:0b:23:76:e0:b5:61:8f:92:25:36:c5:
                    b5:79:f5:65:17:6d:e4:e5:c4:27:2a:7f:36:d9:bd:
                    82:0b:a4:b7:63:f7:07:bf:48:87:47:50:96:85:21:
                    3c:5d:98:83:47:32:20:36:0d:f0:15:36:87:46:36:
                    fe:12:d8:38:7d:10:98:77:26:3c:f3:53:bf:2e:5c:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A4:E6:D0:B2:CB:57:98:05:C4:4E:96:64:65:36:F8:B5:7E:2C:7F
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         ca:81:b0:e1:8c:da:b2:59:ed:f4:66:db:98:74:3f:25:5f:ec:
         46:bc:bf:4b:e5:2b:4b:b5:07:0e:b8:4b:cc:82:33:a4:54:26:
         7c:d8:76:4a:2a:72:00:e1:86:53:d5:b9:56:61:d8:8a:32:84:
         a1:52:1b:02:c6:cc:85:14:5a:b4:9c:66:28:00:f0:06:e3:c3:
         a6:c0:22:ae:51:cc:09:c9:a8:71:45:fe:4b:4c:20:d4:fd:7b:
         80:51:54:20:b3:46:a3:5e:0a:6c:a2:b8:c6:3d:d9:39:04:a6:
         4f:04:89:2a:4f:8e:1f:0b:9b:55:f0:b4:27:2d:17:42:12:ee:
         57:d6:ac:2a:85:1a:cb:84:31:81:2b:63:ed:78:c3:81:91:ad:
         ab:41:c3:03:c0:24:95:0d:16:2c:f9:e2:d1:b0:93:96:44:7a:
         87:17:45:82:7e:0d:6e:b2:2c:2e:f2:43:0b:7f:f8:c2:c9:4a:
         36:f5:5d:84:4c:37:0e:84:6b:b0:a4:7f:fa:ef:31:be:96:75:
         1f:c8:56:d1:4a:54:a7:48:41:ca:4d:c7:93:8e:af:08:84:ca:
         73:78:11:c7:ab:28:61:62:4b:f0:86:df:41:90:89:23:35:01:
         3b:99:e3:00:5f:f1:97:3c:8c:9c:3b:ab:5e:e3:9e:d0:f5:92:
         04:a3:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org