Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e2037343138.roa
File:                     3135322e3137352e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          G/1BCIt0sjJJGvXgFqJjphJ8VHMJXqC9n4E5MOZc1nI=
Subject key identifier:   6E:4B:98:E1:40:84:B7:24:62:91:51:11:3C:B1:FA:90:D7:36:F1:B4
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       6F11945E3298D98EB2512C62E33C2C4DB8F0C9AB
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:49 +0000
ROA not before:           Tue 05 Mar 2024 17:39:49 +0000
ROA not after:            Tue 04 Mar 2025 17:44:49 +0000
asID:                     7418
IP address blocks:        152.175.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:11:94:5e:32:98:d9:8e:b2:51:2c:62:e3:3c:2c:4d:b8:f0:c9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:49 2024 GMT
            Not After : Mar  4 17:44:49 2025 GMT
        Subject: CN=6E4B98E14084B724629151113CB1FA90D736F1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:0a:88:b8:4b:84:fc:d0:79:f9:19:8f:2e:
                    55:b1:04:92:74:2c:db:90:20:0e:3f:b5:d4:d5:29:
                    ec:bf:3b:b5:d5:ee:9f:ac:7d:11:a0:c9:31:d9:ad:
                    ba:09:80:85:3d:2e:de:76:3d:cf:6e:77:c7:36:07:
                    b2:95:d1:1b:04:8d:d2:40:e6:a6:0a:b5:e6:b4:0a:
                    04:8a:52:2b:b0:b2:06:2f:a3:f1:25:eb:6d:2a:cf:
                    8e:e4:d2:10:87:88:14:9d:98:be:59:ab:36:d9:0e:
                    aa:10:8c:5b:7b:33:b6:b0:de:f3:e4:b8:4d:99:cc:
                    39:64:93:c1:33:6c:68:10:92:10:fe:9c:35:15:44:
                    19:13:79:f3:25:7a:94:5c:5e:66:4c:de:47:65:0a:
                    6b:68:14:45:45:09:b9:81:0f:6b:30:cf:f8:64:88:
                    69:1f:be:34:44:d3:74:c5:8c:b7:bb:01:76:06:97:
                    b0:11:19:67:d8:de:59:ec:e2:a5:bf:ff:82:c8:de:
                    63:16:c6:ee:6b:fb:59:dc:4b:9e:27:10:39:70:eb:
                    45:be:24:70:25:79:2f:ad:76:d9:bd:91:55:4f:23:
                    d3:9d:41:92:32:c4:c8:57:10:8e:c8:21:fb:86:17:
                    61:e8:ad:d5:42:c7:5b:2b:70:37:f1:c5:ec:35:d6:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:98:E1:40:84:B7:24:62:91:51:11:3C:B1:FA:90:D7:36:F1:B4
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:3d:38:74:44:e0:b9:5b:1c:cb:fa:75:20:55:30:60:44:
         bc:a9:db:23:1d:14:79:65:e7:5d:17:1d:84:7a:1e:81:7e:19:
         f0:6b:f3:20:e2:8d:7a:7e:00:fb:ed:51:0b:af:8f:3a:53:08:
         a0:7c:31:e0:9e:8b:25:53:d7:90:3e:42:92:5c:2e:6b:c3:93:
         99:05:0a:2b:fd:6c:1e:6b:2a:42:11:4b:5a:e4:68:2d:0b:a4:
         2e:6d:41:fa:ee:31:5f:92:09:58:e2:66:26:e5:76:be:79:49:
         1f:c1:7f:7b:8d:b7:6d:ba:d5:a7:4c:8a:fd:02:06:43:46:76:
         f3:7e:c9:48:ef:a9:c5:a1:bf:e4:da:37:70:62:cf:ee:d8:b7:
         ff:6c:6b:c7:18:6b:2e:47:51:1b:58:5f:3b:b5:b2:16:e4:f3:
         c4:73:6e:00:d9:6c:fc:13:8d:4a:95:54:55:27:89:3f:82:fe:
         a7:bb:df:3d:6a:7b:56:19:9d:70:6c:32:8b:c0:be:67:2c:78:
         65:97:21:19:32:92:76:8c:10:d4:ac:f3:e7:78:ed:c8:57:4b:
         11:95:87:d2:81:c3:66:35:63:2b:39:c9:14:43:25:70:53:78:
         a9:c4:cf:b6:1b:d7:2b:fc:29:4f:fd:41:63:bb:6a:65:d7:58:
         14:64:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org