Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135372e302f32342d3236203d3e203237393738.roa
File:                     3139302e3131302e3135372e302f32342d3236203d3e203237393738.roa (raw, json)
Hash identifier:          zOPfOyOYIqZjhx/r8yV+80dZDwHUUcKZF3uG0/K6HO0=
Subject key identifier:   B5:15:2D:91:17:C4:B1:10:C6:53:28:99:E1:FE:DF:1F:EE:97:47:7D
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       20A62B8342733C14AA3EF342114D2D45575A6E6E
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135372e302f32342d3236203d3e203237393738.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     27978
IP address blocks:        190.110.157.0/24 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a6:2b:83:42:73:3c:14:aa:3e:f3:42:11:4d:2d:45:57:5a:6e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=B5152D9117C4B110C6532899E1FEDF1FEE97477D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:20:83:2c:eb:7d:c5:82:1a:4f:16:62:e2:
                    38:f5:c1:b0:dc:ff:09:d5:ad:f2:c8:3a:86:ae:b1:
                    3d:00:92:b2:e2:6c:27:d3:5a:c3:d9:cd:04:32:9d:
                    8b:76:e3:c1:93:63:2e:c6:d0:db:07:cf:9a:36:52:
                    58:5c:9f:f8:28:8f:c7:d7:fc:6e:ac:76:ea:47:37:
                    f6:fe:05:5e:1f:da:44:12:d0:9e:cf:8c:d6:c0:0d:
                    ac:bc:bc:66:38:73:3b:90:f4:43:6c:45:65:4d:d9:
                    4b:d2:03:f7:59:84:a1:b1:25:5c:6b:9d:5d:13:c9:
                    48:0e:3d:33:76:e6:d2:ea:76:7c:7b:46:b5:2d:3e:
                    66:89:0b:54:0a:1e:f0:82:77:d4:26:0f:35:d4:78:
                    3c:20:5d:63:83:f5:3d:a9:f4:c0:6c:c0:b2:8c:0e:
                    86:b1:92:cd:cb:1f:a4:c7:2d:16:06:48:60:e0:b8:
                    b2:c0:52:b7:46:ee:79:40:84:1c:dc:0c:7a:84:8b:
                    13:44:27:e6:2a:0b:e0:7e:6b:a0:1d:fd:45:e6:23:
                    39:e6:08:1a:9c:dd:7e:f7:5f:ed:44:98:ae:9d:7f:
                    1d:ff:c5:92:2f:6d:fb:4c:eb:96:f3:7d:06:27:70:
                    5d:60:6d:6a:48:19:56:77:42:a0:b3:72:2b:de:2f:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:2D:91:17:C4:B1:10:C6:53:28:99:E1:FE:DF:1F:EE:97:47:7D
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3135372e302f32342d3236203d3e203237393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:ee:ac:3d:ac:4b:c7:48:b5:60:d0:76:32:08:76:f2:95:
         ec:35:51:1d:3f:e7:c5:16:71:78:f0:74:16:29:3e:ec:24:d6:
         46:34:49:86:58:60:ca:a9:08:58:84:56:29:ba:c5:fa:31:e2:
         1a:66:02:7d:f2:d4:af:88:4e:49:55:de:61:1d:64:01:73:c7:
         d1:6f:fa:11:f6:46:c2:bf:b3:06:87:6b:2d:46:60:1f:cb:c8:
         28:34:6a:49:27:09:19:53:a6:4b:0c:7b:b8:99:fa:04:a9:72:
         bd:a8:b1:5e:2d:91:e6:51:4a:ae:cf:8b:99:48:36:30:9f:f6:
         d7:88:99:73:5d:f3:52:d7:24:f3:55:f1:a4:d4:5e:cf:e0:8a:
         44:05:26:79:cf:8f:7a:34:55:32:4b:12:00:1d:57:48:68:23:
         2b:e8:26:8a:34:23:64:55:c8:58:49:e6:cb:e1:c7:72:2f:d8:
         04:e6:8f:49:89:41:13:7d:14:a3:18:3e:81:fd:d3:96:71:4e:
         04:64:b8:33:f6:1d:34:55:d5:b0:fa:ec:da:29:a3:b3:74:d3:
         aa:14:9f:15:f8:f3:00:78:74:d5:e4:88:1c:95:f4:9f:3e:1e:
         6e:8c:cf:12:90:1b:47:e4:8d:65:ba:dd:b2:6f:c3:3e:15:b1:
         c1:1c:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org