Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131372e36342e302f31382d3138203d3e203237383336.roa
File:                     3139312e3131372e36342e302f31382d3138203d3e203237383336.roa (raw, json)
Hash identifier:          A23R3xAPPIaLiMmCMWR3jN5HjvR7Zmxnus6DJfByQhI=
Subject key identifier:   E1:6D:D2:0F:85:2F:E1:AF:15:07:B8:69:D2:5A:4F:A0:89:F5:CE:2C
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       2F39843C597CCE097AF9A737690E80678E1F3A3D
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131372e36342e302f31382d3138203d3e203237383336.roa
Signing time:             Tue 04 Feb 2025 18:12:10 +0000
ROA not before:           Tue 04 Feb 2025 18:07:10 +0000
ROA not after:            Tue 03 Feb 2026 18:12:10 +0000
asID:                     27836
IP address blocks:        191.117.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:39:84:3c:59:7c:ce:09:7a:f9:a7:37:69:0e:80:67:8e:1f:3a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:10 2025 GMT
            Not After : Feb  3 18:12:10 2026 GMT
        Subject: CN=E16DD20F852FE1AF1507B869D25A4FA089F5CE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:03:fb:1d:5c:d8:e8:a1:df:d2:0d:48:55:
                    7b:86:47:b0:25:b4:eb:e2:a0:f9:95:02:74:09:20:
                    f9:d4:4d:eb:a7:3e:e3:ae:04:1e:0c:62:5d:27:e5:
                    7f:7b:f6:fb:73:aa:1b:d2:6b:89:62:93:74:7b:5b:
                    67:d5:2d:46:7a:a2:a2:dc:90:8e:1e:45:e0:54:13:
                    0a:f7:af:a8:22:fa:8a:00:6b:0b:1b:9a:e9:62:cd:
                    0e:89:f0:5c:b4:3a:7f:54:e3:bc:08:a0:70:62:17:
                    3a:84:11:be:0f:33:30:ff:64:83:6f:08:b9:19:1e:
                    f4:5f:02:f1:e7:a6:11:df:75:52:1b:7b:8b:4e:5a:
                    ee:92:21:18:a2:89:fa:5f:88:3f:81:13:9f:64:f7:
                    12:98:59:b4:f0:31:14:13:90:2f:ba:8a:67:14:eb:
                    b5:8d:3f:a9:32:1f:4e:b0:9b:29:c6:a4:21:16:76:
                    ec:79:ee:cc:e6:3f:85:7f:df:6c:71:ba:fb:d7:e1:
                    4a:08:c8:3f:7c:63:de:b0:fe:41:54:4c:0d:f0:6a:
                    8e:b0:a1:fa:1d:72:bb:6d:f5:ed:84:85:91:b1:24:
                    ae:b5:ef:e5:22:f4:96:89:5e:49:9e:6b:84:68:5e:
                    f1:d1:d0:bd:24:ba:5d:35:55:a1:87:f6:48:5f:2c:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6D:D2:0F:85:2F:E1:AF:15:07:B8:69:D2:5A:4F:A0:89:F5:CE:2C
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131372e36342e302f31382d3138203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.117.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:22:c8:2f:fb:69:d7:5e:8b:50:cf:33:78:5e:5e:36:20:a3:
         3d:63:96:df:96:08:77:5a:ec:43:be:e7:e1:17:91:27:c4:4f:
         86:dc:0c:2a:d3:4f:f7:16:15:6f:66:66:56:e6:bf:55:95:d6:
         2f:09:53:56:09:a2:bf:aa:b4:70:28:55:a3:2c:9a:9c:8e:91:
         3a:18:ca:14:1b:76:86:12:ab:71:53:3e:91:c5:b9:2a:07:dc:
         ca:e3:4d:19:09:94:bb:38:b3:b5:6f:6e:bd:9a:9f:e3:67:5b:
         ed:f2:07:90:3d:e4:68:4f:98:6c:d6:3b:ff:99:8c:12:8c:53:
         97:e6:cc:30:67:a7:a4:57:41:5e:6d:52:38:3b:3c:38:9e:69:
         68:a3:c6:a8:0b:b5:8f:5a:27:25:8e:e4:76:a5:94:cb:38:87:
         87:a3:ef:e4:6a:cc:99:88:be:25:55:78:c5:f5:99:7a:d1:30:
         6d:c9:32:ca:97:f7:16:56:c0:43:4d:38:6e:26:fa:b8:06:10:
         c1:00:cf:4c:59:2a:fa:e9:5b:ae:06:82:74:ea:95:36:5d:23:
         26:ed:79:17:e6:b2:3c:7b:0c:d6:36:9b:33:5d:fb:ec:e0:f2:
         b2:5e:35:07:9f:35:8c:d3:81:01:3d:6e:ef:7e:65:69:be:73:
         9e:9e:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:35:42 2025 by rpki-client