Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31372d3234203d3e203232303437.roa
File:                     3139312e3131392e302e302f31372d3234203d3e203232303437.roa (raw, json)
Hash identifier:          hwpJS9RpLZxlVLsqtUocOUfrsUwgwCa/dAXlFv22Ek0=
Subject key identifier:   BA:B4:92:9F:1A:6E:23:0F:CF:8F:68:E2:17:A5:39:B5:5B:AB:1C:F2
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       19EBD09FA7C8D173986FDBB95718F0D75F1E252B
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31372d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 17:47:51 +0000
ROA not before:           Tue 05 Mar 2024 17:42:51 +0000
ROA not after:            Tue 04 Mar 2025 17:47:51 +0000
asID:                     22047
IP address blocks:        191.119.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:eb:d0:9f:a7:c8:d1:73:98:6f:db:b9:57:18:f0:d7:5f:1e:25:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:51 2024 GMT
            Not After : Mar  4 17:47:51 2025 GMT
        Subject: CN=BAB4929F1A6E230FCF8F68E217A539B55BAB1CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:a6:d9:00:61:01:6c:bb:4c:69:1b:9f:90:
                    51:d1:9d:fb:de:c4:07:b6:6f:d3:42:17:b7:03:7d:
                    ab:a7:38:56:75:34:2d:aa:4c:7e:70:eb:68:54:f0:
                    47:93:f8:12:42:0f:16:46:4e:fb:8a:39:97:d2:c7:
                    b2:9b:22:c7:c1:06:13:e1:0a:05:7e:10:1d:99:b8:
                    5a:f2:47:0b:15:36:6b:5e:04:ab:3c:9e:3a:c2:ae:
                    f0:c9:3b:2d:80:8e:c8:98:b9:b7:c2:7e:58:b5:63:
                    85:f0:4c:4a:f0:32:0a:78:65:ca:9a:f8:4a:e7:c2:
                    79:5c:6d:74:17:0f:cc:e6:c7:55:1e:77:97:dc:5f:
                    2f:b3:f1:df:8a:d3:14:39:d6:f9:58:c9:9d:b8:e4:
                    dd:25:0c:a9:61:61:dc:a7:23:66:ea:d3:5d:43:58:
                    e1:d6:c2:37:a3:86:a2:b5:b2:93:d8:7a:b6:00:f0:
                    7e:4b:7d:f2:c8:ae:1a:b2:a4:77:ee:02:36:fd:6f:
                    ce:09:3e:1e:a1:73:2b:f3:35:2f:27:8c:d2:14:a3:
                    99:fe:93:37:e1:7f:5b:95:87:49:b8:a3:4a:b4:1b:
                    10:bd:20:1c:ba:89:99:20:c7:f7:11:93:1b:4d:fa:
                    2c:4b:37:4f:26:f8:e3:ce:96:bc:cf:bb:a9:0c:d5:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B4:92:9F:1A:6E:23:0F:CF:8F:68:E2:17:A5:39:B5:5B:AB:1C:F2
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e302e302f31372d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.119.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:61:07:8c:24:93:8a:56:51:0c:d9:f1:55:a4:df:fd:51:
         33:8e:c1:ab:22:a8:ba:7d:ec:42:9f:37:6d:7e:7c:7d:4e:e0:
         fa:24:f7:ba:16:e1:01:e0:a3:b3:12:a3:52:fb:fa:aa:bd:aa:
         12:0f:1f:b6:12:bd:e5:09:5f:bc:08:30:7a:e7:ed:74:22:60:
         71:b4:fc:ac:64:bd:09:eb:72:39:cc:4c:fb:00:2e:b7:aa:c7:
         82:6d:f2:89:43:f6:03:9f:81:97:6c:1e:f9:aa:1b:0a:94:d9:
         9f:ee:af:c6:eb:f6:eb:9a:a4:1e:18:62:55:02:b7:ca:3e:b8:
         c6:b3:7b:eb:13:c2:9a:53:73:c2:3b:7a:07:03:ac:50:3c:04:
         1f:02:c6:b1:0c:7a:ff:a8:85:b9:2c:0e:b3:ca:3a:a1:e1:2f:
         48:8c:7f:fc:8e:22:a3:c6:e7:58:0d:b6:0d:df:87:db:3e:e5:
         33:45:ca:62:17:99:a0:5a:a2:e2:10:37:a7:48:39:fd:0b:15:
         18:94:70:ad:ab:60:1d:35:30:13:8d:1b:be:45:66:7b:a4:bd:
         2c:2f:fc:15:fa:48:18:ed:91:81:f9:c1:d3:1b:31:87:86:7f:
         6b:78:b8:8a:af:ac:8b:05:2c:f4:5d:fb:d7:30:91:98:63:34:
         3b:0d:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 06:33:31 2024 by rpki-client on console-ams.rpki-client.org