Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31362d3234203d3e203232303437.roa
File:                     3139312e3131392e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          LzYTYrz3P3TlZeL9RK4QgmRNbIWLW9IHJrzkej4aayU=
Subject key identifier:   E2:8B:E0:6F:83:76:2C:B9:68:D9:56:D8:14:E9:31:72:92:63:DB:C1
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       7A85C67CAE09D21805D964A75F098FFBAFC0E6CA
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31362d3234203d3e203232303437.roa
Signing time:             Fri 16 Aug 2024 05:35:00 +0000
ROA not before:           Fri 16 Aug 2024 05:30:00 +0000
ROA not after:            Fri 15 Aug 2025 05:35:00 +0000
asID:                     22047
IP address blocks:        191.119.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:85:c6:7c:ae:09:d2:18:05:d9:64:a7:5f:09:8f:fb:af:c0:e6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Aug 16 05:30:00 2024 GMT
            Not After : Aug 15 05:35:00 2025 GMT
        Subject: CN=E28BE06F83762CB968D956D814E931729263DBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:e9:df:75:a0:53:98:23:89:a3:b2:14:2f:
                    81:69:30:50:64:2a:d5:db:2b:63:01:12:b5:d7:24:
                    5a:7f:ba:e7:dd:4d:9f:32:1b:ed:f5:2c:b3:fc:8d:
                    73:5d:ea:43:b2:ec:82:3f:2d:ff:8d:e6:69:7a:63:
                    f6:ea:87:22:a0:61:db:25:57:ef:e0:a9:03:f8:10:
                    3b:71:b9:37:fa:45:21:ef:3a:f4:27:b3:18:31:74:
                    69:2d:41:0e:9b:ae:18:8f:40:0c:de:f0:e9:78:56:
                    c4:d5:9e:6d:8f:b3:65:34:de:c8:aa:6e:35:13:38:
                    33:e8:28:95:c0:28:f4:b0:cd:6f:52:f1:1e:a2:cc:
                    9e:e8:7c:43:7e:c6:ea:56:bf:01:53:49:65:e5:b0:
                    7c:5b:b0:47:e0:6d:31:be:b0:4d:a3:e3:d8:cc:b5:
                    68:77:7d:c2:d3:c1:a1:49:9a:e1:49:69:21:23:24:
                    10:38:a9:c2:ec:8e:28:8f:e1:3b:1a:8a:e2:f1:7c:
                    b9:01:e8:f3:2e:22:d6:3d:44:89:7c:1e:02:00:18:
                    3e:b2:48:7e:7e:d2:34:71:12:03:88:e0:09:07:40:
                    59:21:3e:10:a4:fc:2d:bc:bd:46:62:4e:80:b8:da:
                    0e:06:21:98:73:8f:8d:4f:11:82:a2:5d:65:54:87:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8B:E0:6F:83:76:2C:B9:68:D9:56:D8:14:E9:31:72:92:63:DB:C1
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.119.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:cc:07:5c:f0:ef:02:cd:e2:0c:bf:f7:2b:4e:38:42:af:
         df:03:94:25:c7:e6:e9:54:49:f0:ae:a8:dd:d2:e7:75:c0:7e:
         f7:c1:c1:34:9a:84:98:bc:ad:ed:79:ea:73:f8:bf:40:d0:79:
         c4:ee:8a:a6:3d:b4:d3:b6:f3:01:b8:9f:8f:ac:2b:3e:43:d2:
         9f:3f:91:27:c1:36:e9:a6:29:3b:6b:7b:33:db:21:7e:ff:35:
         15:94:b3:75:5a:15:76:d0:b1:c0:73:0a:85:ee:a0:5f:27:eb:
         68:ed:79:74:a7:04:75:27:84:bb:6f:a3:55:18:5e:af:24:1e:
         24:c8:b4:e4:95:8a:56:36:b7:37:6a:21:2b:0c:56:32:8d:e1:
         ba:3c:7b:9b:a3:f1:f5:02:73:c7:ab:b6:cb:3f:88:ae:3d:62:
         ab:86:44:39:0f:c1:67:4c:8f:2f:e1:e7:3a:b1:0b:83:83:cb:
         46:c5:d9:ac:25:f1:50:99:80:cd:0b:67:35:02:37:47:56:11:
         44:4b:37:48:d2:dc:c4:b9:3c:53:4c:5b:ff:1a:10:8d:c4:6f:
         80:71:45:2f:4a:5b:59:b4:68:af:5b:36:20:aa:3c:a1:1e:ac:
         92:b1:2d:25:a1:57:ec:43:76:8c:cf:6b:e5:33:27:64:b2:a3:
         d6:0c:7e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org