Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e2037343138.roa
File:                     3135322e3137332e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          HuPz17HdbknBS9834wFxODlft6XiLVnGf6JVK4GtaJA=
Subject key identifier:   7A:3F:18:93:50:D7:EC:9F:06:81:E8:F9:A6:D4:CC:39:A8:52:02:D2
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       69412F7F6B8B476B51006642E91DEF9DBB99034F
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:52 +0000
ROA not before:           Tue 05 Mar 2024 17:39:52 +0000
ROA not after:            Tue 04 Mar 2025 17:44:52 +0000
asID:                     7418
IP address blocks:        152.173.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:41:2f:7f:6b:8b:47:6b:51:00:66:42:e9:1d:ef:9d:bb:99:03:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:52 2024 GMT
            Not After : Mar  4 17:44:52 2025 GMT
        Subject: CN=7A3F189350D7EC9F0681E8F9A6D4CC39A85202D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:7b:75:29:cc:56:72:21:2e:fa:17:a9:ca:
                    7b:23:c0:82:64:19:50:54:07:f0:46:9f:4c:49:37:
                    51:3f:7b:07:fa:f5:13:f6:3f:8b:2f:a4:58:77:2b:
                    3e:d7:6f:24:3c:63:26:12:84:86:9d:e9:12:4d:8b:
                    2d:f9:16:a5:75:7f:c1:de:6e:8e:bf:30:aa:e4:13:
                    0c:31:8b:56:b9:c3:de:2a:47:c0:0e:3d:c6:fa:f8:
                    bd:9c:c8:3a:f8:00:3c:c5:a7:5b:db:89:79:62:0c:
                    11:4c:cb:1a:64:55:74:3a:2c:5e:be:d6:fb:14:cc:
                    31:66:25:ea:98:e1:28:a1:4f:95:a5:2b:17:20:04:
                    77:5d:3d:a3:18:90:f6:3e:cf:83:e9:92:0a:43:dd:
                    14:ba:59:f9:dd:c2:e9:a0:4d:6f:0f:99:f9:c3:e1:
                    6b:62:a9:f5:71:da:bd:45:81:14:23:c6:ae:03:da:
                    48:10:4b:58:f7:a6:4a:42:bc:3f:d7:87:15:f6:99:
                    ab:cc:64:87:0e:b3:a6:54:65:ff:10:aa:8d:de:67:
                    bd:a3:d6:30:73:51:6c:01:6a:0c:52:b5:9f:b1:45:
                    0a:ac:44:d7:36:12:06:40:c9:a5:6b:10:1c:c8:9f:
                    67:95:65:1e:96:7f:6f:9b:94:3f:12:70:22:ff:61:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:18:93:50:D7:EC:9F:06:81:E8:F9:A6:D4:CC:39:A8:52:02:D2
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137332e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:dd:e8:5b:e9:aa:1f:bc:75:07:be:27:10:60:7f:f2:25:
         a7:65:b4:6d:00:a5:d2:be:e2:a9:f2:fa:c6:3e:8d:09:ba:39:
         a3:8c:c0:7c:d6:18:06:dc:ab:f7:cd:c7:54:30:46:6e:19:4e:
         f2:d8:f4:05:2d:2d:d4:a9:3a:13:71:0d:b1:74:e8:23:e3:d0:
         2d:32:92:39:fc:cb:cf:8f:90:59:be:05:07:db:56:c4:45:4a:
         be:d2:6d:7d:ff:be:2f:15:55:0f:40:07:01:91:90:f1:29:0d:
         6b:71:f3:47:d4:38:cf:09:14:62:e4:96:c5:79:a6:98:86:09:
         31:e4:1a:24:9d:a8:0f:50:2f:32:22:07:7c:53:b0:71:1f:94:
         23:04:03:35:d9:b6:b8:5a:d3:e9:1b:a4:de:18:8f:7d:53:ab:
         7a:3a:0a:74:60:b2:53:55:16:b5:81:ab:7b:61:9b:1f:35:bd:
         a6:94:22:0f:61:99:99:6d:0a:84:59:57:16:b0:33:89:af:37:
         92:c1:02:90:0d:86:f9:73:86:5e:2f:d0:5b:47:ba:16:34:7d:
         9b:ba:ce:30:ed:52:c8:4d:7d:fb:82:5c:5d:2d:28:00:92:95:
         3a:d0:43:d2:e2:04:74:ac:89:eb:8d:39:ca:5b:29:31:7d:92:
         21:b9:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org