Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31362d3234203d3e203232303437.roa
File:                     3139312e3131392e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          F5xoPVGpl8qo0ihW7kD8vuZ/w+ebFcVxdmw09bSncO8=
Subject key identifier:   96:E7:BD:40:C5:29:41:BE:34:7E:15:46:50:4B:23:0A:D0:97:2F:C7
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       7761628352E92F541F2354ECFA32230A28869C00
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31362d3234203d3e203232303437.roa
Signing time:             Fri 18 Jul 2025 06:25:50 +0000
ROA not before:           Fri 18 Jul 2025 06:20:50 +0000
ROA not after:            Fri 17 Jul 2026 06:25:50 +0000
asID:                     22047
IP address blocks:        191.119.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 12:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:61:62:83:52:e9:2f:54:1f:23:54:ec:fa:32:23:0a:28:86:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Jul 18 06:20:50 2025 GMT
            Not After : Jul 17 06:25:50 2026 GMT
        Subject: CN=96E7BD40C52941BE347E1546504B230AD0972FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:93:a3:2a:5c:04:d5:2f:b8:7e:d6:3a:de:
                    ac:1f:6f:47:9b:3d:8c:53:a6:77:54:c3:53:0b:e1:
                    c1:60:5d:ff:3e:ef:c6:be:e9:3c:a1:40:78:3e:d7:
                    7e:da:c4:f0:dc:12:e8:36:1e:7c:23:43:61:be:f5:
                    63:ff:82:f7:91:05:49:aa:0f:33:00:55:a2:2a:db:
                    12:f2:46:84:4b:53:0d:ff:e4:0b:18:bf:ea:dd:8d:
                    6d:f4:aa:f5:1e:e4:67:85:f3:dc:cd:7f:c8:7e:31:
                    d6:ae:48:aa:08:b8:e6:35:6a:e8:58:24:69:66:63:
                    ee:e6:96:de:41:71:24:c6:93:4b:b5:c9:e9:56:91:
                    a8:59:12:f9:06:08:27:17:89:56:01:33:94:8e:8b:
                    88:bb:71:25:c7:ae:8b:e4:11:e1:41:6e:2c:b5:97:
                    30:82:0c:bc:e0:f6:25:ed:a6:07:09:59:5c:a6:78:
                    c6:85:10:6b:b1:2d:d7:8c:7e:51:5f:00:b1:da:ac:
                    3a:0c:91:90:8e:82:bb:fc:e9:b8:57:9e:b7:11:a4:
                    00:10:f7:6b:d3:e7:65:21:87:ed:e3:5c:43:7c:be:
                    0a:47:34:f2:ef:c1:f5:e7:f2:3b:43:33:fb:07:24:
                    20:ce:a5:38:8a:f0:b1:34:4c:d7:e4:d0:c8:e4:de:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:BD:40:C5:29:41:BE:34:7E:15:46:50:4B:23:0A:D0:97:2F:C7
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.119.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:45:4f:a1:bf:12:4a:c6:84:8e:be:c3:e7:47:37:97:a1:8e:
         f6:0d:56:cd:0a:44:d5:8f:12:d7:cb:16:08:57:d8:30:2a:32:
         c5:37:fa:ff:eb:c6:59:61:c0:e6:ba:83:45:a3:b1:6f:90:e1:
         1a:86:4f:15:c1:20:32:1a:05:de:54:d2:0f:b9:c8:58:22:ba:
         a2:28:fb:c7:72:a1:19:44:55:1e:99:54:ed:d4:42:a4:3b:b1:
         2e:8e:36:5b:56:95:dc:69:1f:38:5d:10:4c:68:fd:ea:b0:fa:
         e5:e3:53:c1:53:6b:7b:01:a2:c1:06:69:70:c3:ec:c6:87:0d:
         ce:88:4b:5d:9a:51:5c:69:6b:e8:3f:c2:73:62:96:f7:2d:49:
         53:f9:0c:21:66:7a:a8:63:49:2b:92:e5:45:f7:48:f5:61:95:
         3f:fa:b5:13:be:87:7c:95:d2:3a:03:0a:c5:64:24:dc:75:dd:
         fe:b2:77:c7:ce:2d:60:64:07:00:4f:21:cc:7a:09:ea:5d:33:
         eb:e7:0e:ef:0b:11:4f:8b:0c:ea:51:fa:a3:20:e6:87:b3:01:
         5d:bb:d8:ba:25:50:a5:e0:26:5b:ac:71:8c:df:2f:5c:ef:0a:
         96:7c:7f:13:6f:88:34:33:95:a1:f2:0a:4b:dc:6c:c0:c6:29:
         6d:a2:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:17:13 2025 by rpki-client