Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137342e302e302f31362d3234203d3e2037343138.roa
File:                     3135322e3137342e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          S8rzIS0de48BOe+M6QsfJf+FZQLMxxdyoe+o6Wz3vDs=
Subject key identifier:   17:A9:98:78:81:20:AD:7A:BC:CF:3D:62:E7:BA:E9:A8:C2:D5:58:71
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5DEAD61ECB608B7AACF51F4C97E7081E25052211
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137342e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:12:58 +0000
ROA not before:           Tue 04 Feb 2025 18:07:58 +0000
ROA not after:            Tue 03 Feb 2026 18:12:58 +0000
asID:                     7418
IP address blocks:        152.174.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ea:d6:1e:cb:60:8b:7a:ac:f5:1f:4c:97:e7:08:1e:25:05:22:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:58 2025 GMT
            Not After : Feb  3 18:12:58 2026 GMT
        Subject: CN=17A998788120AD7ABCCF3D62E7BAE9A8C2D55871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:ef:d1:6c:52:95:63:dc:41:ff:74:3c:6c:
                    9e:f7:30:99:18:98:b7:ca:e2:d9:61:43:3d:0a:98:
                    f4:0f:7f:70:7a:05:85:e9:11:40:af:eb:e2:38:23:
                    96:7e:b1:6d:53:16:5e:5d:9c:68:bb:92:94:41:2b:
                    11:5d:2c:f1:e3:5e:9a:45:b0:d1:70:9a:53:08:43:
                    4b:9b:66:18:45:58:ae:3b:ad:92:ac:79:83:dd:16:
                    9e:4d:e5:17:06:fc:30:b4:d8:e1:4e:57:98:59:44:
                    c1:b9:de:50:45:a9:b2:97:b2:a3:14:0a:d7:37:7d:
                    fc:20:5b:27:ac:7b:b4:74:fa:9b:9c:be:23:20:b9:
                    66:58:6b:bb:43:91:d9:46:17:89:b3:21:d7:69:50:
                    f1:48:95:0c:3e:a5:3f:61:67:58:9b:14:23:65:14:
                    6c:a2:2c:c3:05:4b:24:92:14:c9:33:f7:4e:14:21:
                    80:41:97:0f:f9:96:4c:d3:d5:ac:a4:3d:1b:d7:45:
                    45:1e:dc:0a:26:e7:ea:04:d7:6a:c8:32:68:65:53:
                    45:62:50:1d:94:48:95:21:0d:32:2e:fc:c3:2a:43:
                    dd:78:4c:db:44:2c:98:8f:b6:4a:64:26:e4:85:65:
                    a8:86:79:0b:29:13:6b:4f:b0:03:cf:b3:1b:7e:cd:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:98:78:81:20:AD:7A:BC:CF:3D:62:E7:BA:E9:A8:C2:D5:58:71
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137342e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:b6:38:87:b7:54:0b:6b:53:3f:7f:3a:fd:51:9e:01:f2:aa:
         b5:3e:c7:f1:29:15:11:93:40:8c:b0:70:64:16:49:d2:19:76:
         86:d4:4f:d9:2c:0d:13:ba:e8:38:26:4e:11:e4:b2:49:b9:18:
         8d:ff:67:cb:d4:61:90:d0:91:6b:61:f7:15:57:d6:1e:3e:93:
         f3:bf:5c:b4:12:7e:b4:c9:d0:c8:18:25:72:c7:0e:4f:5a:27:
         cb:0a:4e:24:39:d2:4a:e2:b3:9a:6d:8c:0d:39:bc:f6:56:23:
         26:f1:ef:11:b1:e7:40:b9:59:1d:58:dc:64:36:03:9e:2c:b6:
         e8:3e:85:fc:78:aa:d0:8b:ad:3a:73:72:97:f7:85:0e:78:eb:
         48:70:f4:ca:8b:f6:d8:a8:34:af:18:42:57:9e:5c:14:55:d1:
         7d:26:dc:1b:e2:0a:f0:d2:ee:5c:04:05:15:fd:ba:70:ed:25:
         e0:c4:31:46:a7:4b:60:c4:7a:85:60:f4:aa:60:0e:e4:28:d5:
         1c:ea:2c:b6:6d:e2:9f:1d:0e:72:1f:f7:f5:e4:2e:52:98:2c:
         35:c3:68:c6:e4:f2:be:98:ea:1e:8c:1c:9c:bd:cd:06:30:fc:
         6d:2d:06:13:4c:ee:93:94:64:cf:61:45:64:61:35:4b:dc:30:
         57:70:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:17 2025 by rpki-client