Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e2037343138.roa
File:                     3135322e3137332e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          M6la8/h0TsrJpMcwME5E/rH6V2NqP6cRaCNa2yOuIDY=
Subject key identifier:   3D:21:2E:83:61:0C:51:02:FF:65:79:24:B1:9A:9E:E9:50:4A:AB:16
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       165765A0573A9FB8A93BC23A58046CDE4BED707C
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:12:59 +0000
ROA not before:           Tue 04 Feb 2025 18:07:59 +0000
ROA not after:            Tue 03 Feb 2026 18:12:59 +0000
asID:                     7418
IP address blocks:        152.173.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:57:65:a0:57:3a:9f:b8:a9:3b:c2:3a:58:04:6c:de:4b:ed:70:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:59 2025 GMT
            Not After : Feb  3 18:12:59 2026 GMT
        Subject: CN=3D212E83610C5102FF657924B19A9EE9504AAB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:54:3e:d7:11:92:7b:5c:67:b8:68:35:8e:
                    24:f6:08:82:ac:3c:b4:63:38:d9:48:11:03:1d:27:
                    10:21:5e:0c:3f:68:e9:d6:f2:4b:27:8f:c4:37:38:
                    ad:89:00:38:a0:d3:de:f5:6c:9c:39:27:66:19:83:
                    57:26:98:17:71:a8:a3:83:82:1c:1b:b2:8f:ef:5e:
                    9b:73:d3:13:0d:78:46:c6:00:2e:4b:9e:b2:66:a1:
                    a3:29:1f:6b:79:ad:1b:47:d4:89:82:bc:37:75:fa:
                    5e:93:a1:59:7d:3a:09:b3:da:b0:57:f4:6c:b7:27:
                    f3:5e:2e:3a:ee:3b:24:7b:13:0d:5c:45:4e:77:33:
                    5d:77:5e:17:fd:8e:85:eb:08:0b:f2:d0:b8:7f:81:
                    fd:e1:ba:aa:4d:11:8b:64:40:81:e5:1b:22:03:57:
                    2d:de:d8:c7:cd:67:17:34:b0:5b:3d:58:fc:20:d7:
                    e5:8e:46:39:84:2b:7b:6a:81:46:20:ef:b3:b3:74:
                    94:d4:51:81:3a:62:57:56:0d:bd:25:76:27:eb:1e:
                    ce:2e:7f:da:d5:2a:a9:e5:b5:3c:c4:d8:6d:33:38:
                    be:a9:f2:0e:d2:8b:0a:de:f3:9d:c6:04:67:70:83:
                    cf:73:75:27:50:db:ca:8c:0c:1f:7c:9b:55:48:14:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:2E:83:61:0C:51:02:FF:65:79:24:B1:9A:9E:E9:50:4A:AB:16
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:d4:39:78:0f:26:99:df:c2:91:1b:ff:9a:46:bc:ea:af:
         7c:4c:5b:6f:79:37:98:92:3a:90:cf:c1:f9:96:45:f9:d0:fe:
         ef:28:34:4b:bc:e3:fb:13:43:ba:37:71:fa:9c:d7:2c:ca:86:
         ac:7d:24:b2:2c:03:d2:84:07:3d:02:fe:44:53:b7:52:70:5b:
         83:27:65:8b:b2:53:d2:d7:a5:c1:ae:da:9e:2e:6d:0f:8e:11:
         58:a1:a7:ae:d4:32:83:e8:ba:b7:cf:22:22:5b:dd:ce:57:56:
         f8:94:b6:0f:35:1d:94:bb:1e:b6:d2:81:4f:a6:b1:fe:2e:3a:
         cd:b7:ed:dd:fa:16:e9:25:5f:de:5e:91:15:e8:40:84:aa:7d:
         0f:f9:d9:23:14:14:d3:3b:6c:32:cc:5c:51:8a:ce:8d:7c:0a:
         84:16:c5:e0:88:b4:48:2e:b2:a8:77:44:92:fd:df:21:23:9c:
         e9:d7:bc:96:53:ad:b0:3f:a1:28:de:a9:e5:04:0a:3d:f1:f1:
         81:f3:d0:cb:42:88:ef:cb:7d:9f:af:e3:f7:95:b4:a3:b7:36:
         43:89:f9:9a:3d:a8:c8:0a:f6:fe:b6:a3:9b:7a:db:2d:cf:f5:
         5d:1a:f2:11:39:d5:41:59:08:c8:9f:d1:bd:c4:38:fc:9f:eb:
         4c:df:10:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:45:20 2025 by rpki-client