Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131362e302e302f31342d3234203d3e203237393935.roa
File:                     3139312e3131362e302e302f31342d3234203d3e203237393935.roa (raw, json)
Hash identifier:          ivKR9mjXCeA1JoiFE/MU2SqjPk3kqhzHw2P6FcwzfBw=
Subject key identifier:   2D:72:70:90:70:33:FA:4F:8D:3C:F8:F5:BB:D5:B4:69:02:20:7E:72
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       145EFA1C4852FA2CCDC4E2C84E603D84BACA2932
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131362e302e302f31342d3234203d3e203237393935.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     27995
IP address blocks:        191.116.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5e:fa:1c:48:52:fa:2c:cd:c4:e2:c8:4e:60:3d:84:ba:ca:29:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=2D7270907033FA4F8D3CF8F5BBD5B46902207E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:e3:dc:3e:93:ad:26:57:1c:91:b7:d6:aa:
                    7c:7f:6d:1e:31:f0:13:0b:c1:ec:58:49:6a:86:e3:
                    86:e6:37:df:85:72:0e:d8:b1:7a:aa:0e:a4:f5:23:
                    e6:44:4d:57:c7:43:ca:77:d9:ff:26:c1:69:7c:3b:
                    e8:5b:35:ba:aa:15:45:b2:de:38:5f:36:0d:b7:e4:
                    fc:75:9b:bb:4d:76:71:78:46:c8:17:c5:3a:a8:67:
                    1e:ca:7d:af:79:1a:8f:68:29:fa:f6:69:43:fa:f7:
                    d5:2b:c9:dc:10:56:2d:dd:87:08:0b:b3:ca:38:c4:
                    56:8b:cf:09:6f:89:14:4b:f1:8f:7b:c7:06:cc:7a:
                    8e:4b:ae:96:ec:0e:37:18:8a:a3:a0:58:0e:c4:d3:
                    98:58:57:30:4d:a8:30:60:d8:b3:64:53:21:7b:f9:
                    cc:76:03:d0:2a:96:68:3b:df:67:5b:0c:ce:85:82:
                    84:e5:1d:8a:98:cb:22:6a:50:e0:dd:0a:67:48:bf:
                    92:a3:e5:24:36:53:19:9e:2b:98:fd:8f:7a:f9:e6:
                    29:72:20:7d:c4:ad:f2:0d:43:72:ae:51:ec:22:13:
                    27:c9:f6:95:96:0d:6a:e1:0b:3b:5e:63:1a:d2:a9:
                    13:f9:d1:d1:76:7c:fa:fd:19:9a:6a:75:71:e6:6b:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:72:70:90:70:33:FA:4F:8D:3C:F8:F5:BB:D5:B4:69:02:20:7E:72
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131362e302e302f31342d3234203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.116.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a4:7d:0e:06:8d:ae:94:03:f3:d1:c0:13:7d:61:a4:b4:07:7f:
         27:7a:09:7e:cc:47:2d:ca:7b:73:c7:4a:d7:d6:21:a1:42:86:
         72:b8:a5:f5:bc:d9:f7:60:3b:93:f3:ee:d0:1b:26:91:8d:4d:
         c7:a0:40:2b:db:07:2e:e1:50:26:e3:af:85:36:9f:c4:f0:bc:
         6b:23:23:27:ac:03:75:6e:3c:39:37:b2:9c:87:21:3e:f7:49:
         56:f0:96:63:77:07:74:7f:3d:8f:4e:99:7c:eb:b6:45:f3:a0:
         36:9e:19:56:40:f4:86:dd:25:d8:a8:4c:cc:8b:f3:e2:83:d2:
         20:f1:0c:1d:bf:2c:84:32:50:7a:40:bc:64:32:76:f4:36:4d:
         73:9e:2a:cb:9c:d6:14:63:22:22:e5:a2:00:0d:87:a6:07:b2:
         0b:94:18:80:5f:e7:71:f2:eb:8c:7d:ba:e2:fd:84:57:e9:21:
         37:ff:f3:5c:b8:9a:8d:62:c4:6c:2c:db:19:ee:a5:bf:f3:4c:
         ba:98:99:69:e8:ee:41:7f:5a:aa:6b:28:3d:fc:16:1c:a1:11:
         2b:00:e0:74:12:fe:5c:75:cd:2d:b6:ec:e0:1d:88:c6:dc:75:
         63:e8:e8:b6:57:66:39:17:9c:c9:e2:d4:49:4b:0f:b3:4e:d9:
         1b:52:6a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:23 2024 by rpki-client on console-fra.rpki-client.org