Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137342e302e302f31362d3234203d3e203136363239.roa
File:                     3135322e3137342e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          IZmLXnuJ7cMXmXXXc9uJeeSCobBDg7wmM5Lq23RZCB8=
Subject key identifier:   14:A4:AB:EA:3B:BA:8A:6F:D6:47:3B:FA:37:C1:48:B0:E8:51:54:59
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       7BDABDA9EE57821B327762568584FDB2880FD219
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137342e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     16629
IP address blocks:        152.174.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:da:bd:a9:ee:57:82:1b:32:77:62:56:85:84:fd:b2:88:0f:d2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=14A4ABEA3BBA8A6FD6473BFA37C148B0E8515459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:f3:a2:4d:dd:10:c3:ce:8e:11:e5:97:4a:
                    c6:47:60:6b:ed:0b:f4:f7:fd:db:21:77:e4:36:e1:
                    37:c4:4d:39:8a:52:09:9f:cc:3e:f4:79:d8:11:c9:
                    37:05:89:27:cb:21:2e:d7:5d:d3:28:94:ca:58:03:
                    ee:c1:84:4d:61:d3:fb:7e:bf:94:0a:57:df:4f:25:
                    59:8f:96:bc:73:a1:c5:70:88:aa:5f:aa:81:af:13:
                    b4:f9:28:dc:c3:9b:92:58:39:a9:39:77:7a:7e:41:
                    c4:db:26:99:70:97:21:66:2e:3c:8e:05:56:0c:34:
                    b7:cd:14:47:cc:35:85:51:04:30:5a:a3:02:3f:7e:
                    b4:af:5c:1b:2b:80:e1:e0:c6:a3:b9:b4:6b:3a:06:
                    b8:d8:36:4a:d5:d4:9e:d7:68:f3:9d:2d:5f:e0:4c:
                    d0:8b:86:2d:5d:cc:fa:05:e2:87:d8:15:16:06:63:
                    82:fa:13:6b:e6:62:c8:16:73:38:6c:f1:5a:fc:15:
                    47:ec:8c:f6:40:7f:b2:85:bb:83:f7:a4:b3:1d:e6:
                    de:a1:f4:17:f5:48:dd:a4:26:8c:cf:94:ef:3a:5b:
                    48:b9:06:1b:11:2d:28:e5:58:78:b1:ed:3d:91:16:
                    88:0b:53:21:86:8f:af:4b:e4:03:48:e8:f0:59:bb:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A4:AB:EA:3B:BA:8A:6F:D6:47:3B:FA:37:C1:48:B0:E8:51:54:59
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137342e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:5d:f5:3f:1a:27:a6:d1:47:75:d2:02:ca:4d:17:ea:7d:55:
         b2:e0:83:fa:8b:14:b1:49:b6:46:14:b8:ec:22:93:05:c4:c9:
         63:aa:a2:4f:f6:06:13:ab:0a:5f:c4:d2:68:25:38:a6:b7:eb:
         b6:21:1e:f5:76:81:6a:91:cc:9e:98:62:fc:ec:5e:2b:b8:9f:
         93:08:8c:0c:56:ef:ed:96:ec:5b:68:f2:d3:88:9a:35:2f:f8:
         a9:b4:ad:91:2c:8c:f8:c9:f3:10:c2:ef:5f:71:7b:68:ed:5b:
         e8:7c:10:74:ed:2b:f0:16:31:fb:83:ef:e5:30:68:8f:ae:9c:
         0a:d4:d8:65:b7:93:4b:c4:1e:31:02:90:cb:c5:d7:72:80:f4:
         18:12:aa:78:c6:52:98:ff:a1:07:32:41:72:a7:af:df:f2:80:
         7a:a6:44:1b:64:7e:03:a5:79:c3:7d:12:ff:75:83:77:43:74:
         01:ab:60:1e:04:11:09:9c:58:f2:1d:dd:0e:2a:52:0b:6e:be:
         c2:d3:41:1e:d9:b8:f8:51:d1:15:34:08:f3:df:1b:62:ed:6a:
         6b:fd:bd:00:69:d8:3c:a3:08:76:89:33:74:d2:52:1e:61:0a:
         46:d6:5c:ef:6c:84:01:3b:c8:0b:39:49:40:48:ac:e1:8d:c8:
         6c:e6:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org