Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e2036353335.roa
File:                     3138362e32302e302e302f31352d3136203d3e2036353335.roa (raw, json)
Hash identifier:          PBGWtR7wn2VufEHR2dFEdW6WgeO3DcgXppjWS+6lWng=
Subject key identifier:   D9:FF:88:74:D0:E5:6A:0C:06:E8:E5:97:08:52:AA:6C:97:03:39:82
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       5BA96ADEFAC364FCA6761665ACE83DAC57CF0BA9
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 17:47:52 +0000
ROA not before:           Tue 05 Mar 2024 17:42:52 +0000
ROA not after:            Tue 04 Mar 2025 17:47:52 +0000
asID:                     6535
IP address blocks:        186.20.0.0/15 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a9:6a:de:fa:c3:64:fc:a6:76:16:65:ac:e8:3d:ac:57:cf:0b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:52 2024 GMT
            Not After : Mar  4 17:47:52 2025 GMT
        Subject: CN=D9FF8874D0E56A0C06E8E5970852AA6C97033982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:f6:b8:51:20:d1:25:a2:1e:5f:3a:c0:5e:
                    17:c0:f8:20:a0:1c:0c:a2:2f:63:0e:d5:0e:fd:82:
                    90:40:2e:ae:f8:c7:63:d0:89:a2:9a:68:64:a0:43:
                    a5:05:54:d7:fa:f2:87:81:91:96:9d:53:a1:db:03:
                    d1:2d:6b:82:e1:10:08:ab:91:37:99:4c:f3:3b:05:
                    ff:85:ae:1c:0b:11:27:a3:50:5d:2f:20:88:0e:f4:
                    4d:6a:e8:e0:76:8a:23:72:0f:18:7a:e7:0d:76:a0:
                    13:72:e2:50:d0:b2:78:61:14:84:88:40:e4:71:55:
                    50:8c:2f:bc:a0:f9:04:a2:c3:e6:85:66:f6:88:f6:
                    65:3d:42:2c:39:2e:c1:86:d5:39:36:93:87:e1:fa:
                    f6:6d:0c:f8:87:f7:a9:e3:f4:6d:8f:ba:92:84:e8:
                    53:6c:08:5f:58:2b:96:d2:36:9e:d9:11:cc:99:3b:
                    93:e9:f7:4b:f2:af:f5:8e:d2:6e:91:90:cf:be:99:
                    43:10:2e:97:12:d2:83:4c:85:93:45:d1:82:6e:25:
                    1f:a7:37:93:fd:f5:69:c0:a7:6c:3c:51:c0:e5:57:
                    0f:80:b2:7f:d4:b4:0a:42:45:7d:ca:ae:81:d1:c8:
                    69:00:86:4e:9c:a2:ad:d4:82:d0:7d:5b:ad:10:7b:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FF:88:74:D0:E5:6A:0C:06:E8:E5:97:08:52:AA:6C:97:03:39:82
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         73:88:df:61:c5:9c:e0:76:cd:e9:78:3a:c5:4d:48:52:53:b3:
         9f:23:e2:55:cb:6f:c7:8f:43:0d:22:c6:fa:f0:d6:b4:9d:37:
         18:1d:0b:80:ca:4c:32:4c:04:f2:b8:e2:0d:27:e8:bb:77:d2:
         87:8d:0c:98:e2:91:23:98:d8:2f:a3:86:11:1b:14:1c:01:b5:
         e5:1a:c2:88:64:d9:e7:46:cb:ab:ab:eb:a7:43:86:b4:db:85:
         c0:11:52:a4:97:f5:c9:a2:6b:a2:ac:35:28:2e:cf:4c:28:c7:
         2e:ef:ca:63:5d:1b:2e:2b:63:d5:f9:c8:7b:b9:69:0d:28:c7:
         1e:e7:28:88:68:d6:84:6a:90:d6:39:67:ba:fb:22:9f:f2:78:
         d7:2d:da:ec:81:6b:45:dd:92:4d:ed:9f:6c:bf:2f:2c:5a:bb:
         e0:2a:a8:d7:d1:26:6c:52:75:b3:08:18:a2:a5:4d:30:34:60:
         19:92:4a:08:5e:45:d9:73:a5:7c:80:85:97:89:28:76:c5:53:
         fb:b9:10:25:02:3a:cf:04:7c:88:09:bb:71:6f:ff:27:ed:0f:
         7d:a0:8e:a7:eb:08:9a:ec:f7:62:5a:18:7c:28:9a:ca:a5:79:
         65:bb:eb:a9:f1:33:36:55:51:95:83:97:ae:90:38:a9:ba:34:
         e8:ba:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org