Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e203136363239.roa
File:                     3135322e3137352e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          MuTHixKMuzr4thhOcnmG/kj0bRUuiRYbZ+TI9dnD+Aw=
Subject key identifier:   D3:4A:EA:8F:0F:09:29:AF:55:44:11:F7:60:6F:F7:D3:C0:BB:26:B6
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       14E3FB7C8909CA46F9838F25E14FDF41289B22EE
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:44:51 +0000
ROA not before:           Tue 05 Mar 2024 17:39:51 +0000
ROA not after:            Tue 04 Mar 2025 17:44:51 +0000
asID:                     16629
IP address blocks:        152.175.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e3:fb:7c:89:09:ca:46:f9:83:8f:25:e1:4f:df:41:28:9b:22:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:51 2024 GMT
            Not After : Mar  4 17:44:51 2025 GMT
        Subject: CN=D34AEA8F0F0929AF554411F7606FF7D3C0BB26B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:4e:f7:6c:c6:2c:a7:56:c8:db:44:dd:74:
                    82:c8:50:05:95:d6:6a:c7:75:45:57:6c:85:ea:41:
                    f5:b0:cd:f8:30:5a:a7:74:43:d6:70:98:80:bd:5e:
                    a2:b2:64:c5:ed:f4:15:2f:e4:c7:84:1f:4b:e3:70:
                    f1:ea:aa:aa:d0:a2:a2:f3:e5:74:35:a0:21:d9:e4:
                    a4:b1:c9:61:81:5b:40:7a:19:09:27:f0:9d:b2:11:
                    91:e7:df:ef:f5:d2:bc:df:f5:ec:6d:68:7f:c1:37:
                    5b:0e:d4:01:f7:cb:48:3f:f5:77:43:1c:d8:48:13:
                    a6:2f:1a:56:bd:c8:b0:07:04:db:95:ea:07:ea:d9:
                    04:44:35:7e:b6:05:9d:6f:d7:99:00:1b:a3:76:03:
                    b8:0c:05:1e:31:6b:66:d4:5b:60:74:9b:c8:96:81:
                    2e:28:01:74:ba:99:20:62:d4:c1:85:3a:06:81:ad:
                    1c:60:d9:bb:80:a6:78:bb:4b:d0:b8:d8:3a:4a:27:
                    e5:41:85:72:72:09:60:cc:29:54:b3:dd:44:f8:66:
                    d1:d0:62:b8:a1:8c:62:de:85:9c:37:87:42:f7:90:
                    18:17:ee:ac:0f:b4:71:a3:be:f2:0e:61:b8:80:60:
                    ac:d5:7a:dd:d0:83:d5:01:61:16:21:7d:66:0b:d3:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4A:EA:8F:0F:09:29:AF:55:44:11:F7:60:6F:F7:D3:C0:BB:26:B6
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:7d:f3:54:4d:5d:02:ed:9c:9c:2c:60:1a:d7:65:c5:66:
         c1:69:c6:9f:17:fc:c5:27:f7:92:e9:5f:4f:cf:63:e4:82:d7:
         64:c3:52:48:37:a5:54:45:5b:88:e1:ef:5b:91:52:2e:67:29:
         b0:e2:ce:62:e4:2a:54:ef:38:43:48:ed:c3:10:f8:6a:60:61:
         ba:24:1f:85:85:cf:b8:00:c8:9a:95:a3:d9:ad:c8:c9:6f:fe:
         77:ae:e4:3c:13:5e:5c:13:67:a5:a8:f2:fa:4a:a7:c5:4a:03:
         09:7f:7e:cd:1c:e9:a5:a3:a9:cd:a5:55:b8:51:66:f7:91:9e:
         9b:56:13:70:53:8f:8b:68:33:30:ac:4f:be:6b:da:17:71:42:
         cd:38:bc:4d:2b:02:ab:fc:b3:95:56:b4:72:6b:52:95:fd:b6:
         36:b5:2c:e6:81:6d:0b:62:92:42:a2:de:8e:42:02:a6:e1:91:
         a5:aa:e9:d4:9e:82:6f:60:d6:88:ec:94:c6:ca:8f:13:8a:ab:
         22:8e:78:d2:c6:fb:76:94:09:c4:07:20:7f:82:d7:6f:1e:c1:
         18:95:03:3f:21:c3:35:c6:7b:26:71:29:30:95:a9:5b:a7:be:
         40:4e:4f:c7:ac:13:7b:49:62:63:cb:5b:eb:45:8e:fa:27:d1:
         bf:74:29:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:28 2024 by rpki-client on console-ams.rpki-client.org