Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e203136363239.roa
File:                     3135322e3137332e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          i4V0GS1hE4zlJfB19Tri32mRR/HXMRsk3ICGPuOiPy0=
Subject key identifier:   5C:B4:26:DF:5A:E6:7D:4A:90:CC:93:87:E4:34:F8:1B:E0:C7:E3:A5
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       23AE859B5C8961DD71EA16D31DC8E48E1842D65D
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:12:59 +0000
ROA not before:           Tue 04 Feb 2025 18:07:59 +0000
ROA not after:            Tue 03 Feb 2026 18:12:59 +0000
asID:                     16629
IP address blocks:        152.173.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ae:85:9b:5c:89:61:dd:71:ea:16:d3:1d:c8:e4:8e:18:42:d6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:59 2025 GMT
            Not After : Feb  3 18:12:59 2026 GMT
        Subject: CN=5CB426DF5AE67D4A90CC9387E434F81BE0C7E3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:a6:db:8f:db:d0:60:bd:eb:e1:f3:4d:86:
                    7a:58:5c:ee:67:63:3e:ea:b3:67:4d:33:fb:62:39:
                    57:aa:ed:a1:0f:06:55:2a:21:db:e9:c8:9c:91:fe:
                    97:aa:d5:bf:09:3c:d0:96:ff:1b:0d:9c:d7:5d:bd:
                    d2:8f:88:2c:be:15:71:de:eb:c5:bc:fc:d3:a7:ca:
                    a6:ca:6d:fe:3e:54:4d:24:c7:c5:c8:44:86:3d:24:
                    dd:08:8c:60:ab:be:0a:b8:e6:af:ee:04:1d:32:80:
                    a0:97:3e:a2:1d:7f:a2:1f:cd:db:b6:98:5c:7c:eb:
                    05:60:92:a0:81:ec:e5:8b:8e:ee:3f:fa:47:ae:bf:
                    61:43:90:5f:67:8d:68:39:48:e1:5b:6d:fa:4c:12:
                    e8:1a:2b:95:0f:55:aa:70:c0:03:42:f6:18:86:4f:
                    8b:d8:56:ac:5f:47:a9:49:bd:9a:a2:b9:af:61:14:
                    31:27:d0:45:a5:65:fc:3a:b6:42:7f:35:c1:b3:21:
                    fc:50:f1:49:1c:aa:7d:cb:da:77:4c:2b:3e:c7:34:
                    f8:4a:6f:78:5f:e1:c4:69:a2:61:8d:fb:ca:ab:b5:
                    97:eb:5f:0a:3f:45:e0:63:5a:0f:0b:34:2d:bd:e9:
                    0b:07:67:6f:43:c9:45:13:bc:d8:9c:a2:22:7e:b1:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B4:26:DF:5A:E6:7D:4A:90:CC:93:87:E4:34:F8:1B:E0:C7:E3:A5
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:00:68:25:c9:6a:2b:f3:6b:cb:d2:de:99:a9:bf:81:29:ed:
         37:6d:51:0d:c5:48:dc:20:2d:09:44:50:f8:de:d5:13:4a:fe:
         98:af:94:ee:4a:5f:73:0a:65:2a:12:a0:a5:91:50:37:80:97:
         2c:00:6a:78:b6:eb:a4:3c:ed:69:c9:1e:10:6e:e3:d6:2b:15:
         e4:50:c4:ad:68:c5:28:cd:a7:6c:00:4f:b4:9d:1b:5f:1f:62:
         f7:8b:67:0b:00:9a:09:eb:9b:8c:7c:c1:26:53:1f:d7:89:ed:
         c4:a0:7c:e0:a4:97:ce:13:ae:44:70:d6:d6:f5:08:85:b3:8d:
         24:9a:b4:eb:39:c1:28:b9:81:25:cd:fd:2d:13:c8:32:29:34:
         65:0a:8d:b2:59:8b:c1:52:90:05:db:55:28:c3:b1:b0:28:db:
         f6:f7:60:54:9e:4e:52:f0:28:08:ae:1b:31:97:2d:c8:85:e1:
         26:42:36:d0:3e:36:77:b2:87:c4:33:38:55:4f:98:ae:1e:18:
         8d:b5:cd:8d:e2:5d:0d:7b:b6:25:c1:3e:1d:ed:3a:0b:90:ce:
         51:33:d3:63:09:f5:a9:55:e0:ff:23:7d:85:2c:46:13:c0:40:
         d7:9c:9b:aa:14:ff:a2:43:e5:83:83:11:a8:16:56:c5:12:dd:
         6c:e5:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:53:32 2025 by rpki-client