Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa
File:                     3139312e3132342e302e302f31342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          jtRMEvaeccuqR6XrC976szcmZ43mJTYiv0NdzofUpH4=
Subject key identifier:   29:08:77:82:33:9A:CC:8A:F8:EE:02:1A:7D:6B:68:60:CA:B8:CD:4A
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       4C5FA56616BDA91631F77DFCA2B332669AE19F90
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:44:51 +0000
ROA not before:           Tue 05 Mar 2024 17:39:51 +0000
ROA not after:            Tue 04 Mar 2025 17:44:51 +0000
asID:                     16629
IP address blocks:        191.124.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5f:a5:66:16:bd:a9:16:31:f7:7d:fc:a2:b3:32:66:9a:e1:9f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:51 2024 GMT
            Not After : Mar  4 17:44:51 2025 GMT
        Subject: CN=29087782339ACC8AF8EE021A7D6B6860CAB8CD4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:ee:12:a9:3a:00:4f:dc:43:8a:07:1b:42:
                    d8:79:d8:a4:9d:a8:29:91:a3:fe:ca:25:b0:ab:28:
                    9e:69:a2:3f:ac:07:8d:85:cd:a4:42:8f:fb:ba:81:
                    e6:a9:cb:f0:4f:b9:5d:6c:8d:be:76:c0:50:2b:30:
                    20:60:a5:ec:38:c6:eb:1d:06:45:67:e7:4c:7a:9f:
                    7f:c1:9a:82:c7:8b:46:26:61:d2:93:13:b2:ea:c9:
                    33:54:26:54:e6:d9:1b:e6:38:b9:46:a2:67:65:bc:
                    3e:bf:70:e0:9f:9e:c4:81:5d:35:61:af:c6:0a:94:
                    57:29:48:f4:db:93:bd:49:e0:16:6d:44:43:a0:72:
                    1b:28:bb:ed:ed:f8:58:b5:02:78:b2:e4:28:7b:ea:
                    10:ad:a1:9c:27:11:18:38:75:8b:de:a8:d3:1a:e1:
                    30:3d:bb:3d:36:a8:25:f6:1c:d4:29:ee:c0:a2:84:
                    68:9d:74:31:28:19:f9:92:af:64:48:42:09:ee:a2:
                    80:cb:96:74:a6:81:f7:f8:e5:62:1e:f0:94:62:54:
                    53:76:12:69:cd:80:07:da:2e:f5:ca:68:e3:93:e6:
                    60:fa:36:56:87:e4:b1:44:30:bd:1a:a6:8d:15:37:
                    28:31:e1:c6:73:ef:a0:6a:23:3b:9a:ff:d7:bd:fc:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:08:77:82:33:9A:CC:8A:F8:EE:02:1A:7D:6B:68:60:CA:B8:CD:4A
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.124.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:5d:69:e8:b3:15:08:6d:49:e1:40:cb:60:10:e2:52:ec:
         09:7b:cd:55:53:9d:00:4a:ba:3e:7b:08:a5:c1:38:26:1c:b0:
         1b:b4:a7:90:db:e9:cf:2e:32:0c:d4:15:5a:90:13:13:c2:a5:
         52:5f:7d:8e:7a:4b:2c:83:61:f6:0e:8d:09:53:b2:3c:92:14:
         91:7c:5d:d3:ef:24:07:ac:8e:92:fb:c1:53:da:77:a6:81:dd:
         20:11:2d:4a:28:09:35:04:91:38:1a:73:6d:aa:32:0c:88:36:
         80:55:1f:ff:7d:82:8b:1c:65:32:f4:f4:cd:9b:aa:73:d8:89:
         ea:15:cd:76:72:7d:72:70:a3:68:f7:29:3f:09:cc:48:e8:37:
         99:93:70:1b:20:d1:f2:b0:0c:97:03:1e:cc:ea:bf:e5:83:b7:
         bc:22:22:dd:82:0b:ac:6f:31:61:47:66:c2:e2:c2:8f:64:a3:
         2f:93:58:2e:47:58:ca:d9:c7:8d:b1:18:72:b0:20:ee:41:c2:
         33:4e:2c:3d:c2:c7:49:e3:7b:6f:01:fe:3d:74:07:81:db:3a:
         2d:ec:b1:64:e0:9a:06:94:a5:59:9c:68:7b:ec:12:8a:1a:fc:
         9d:a2:27:a3:78:e0:05:b1:e7:5a:c9:b4:ba:3a:74:37:36:38:
         d8:7e:c1:0d
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUTF+lZha9qRYx9338orMyZprhn5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCMzkxRjU1Nzc1MTRFMzBGNjRFREY2RTM2MTkwNUNB
MDhDRjU3MjAeFw0yNDAzMDUxNzM5NTFaFw0yNTAzMDQxNzQ0NTFaMDMxMTAvBgNV
BAMTKDI5MDg3NzgyMzM5QUNDOEFGOEVFMDIxQTdENkI2ODYwQ0FCOENENEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/O4SqToAT9xDigcbQth52KSd
qCmRo/7KJbCrKJ5poj+sB42FzaRCj/u6geapy/BPuV1sjb52wFArMCBgpew4xusd
BkVn50x6n3/BmoLHi0YmYdKTE7LqyTNUJlTm2RvmOLlGomdlvD6/cOCfnsSBXTVh
r8YKlFcpSPTbk71J4BZtREOgchsou+3t+Fi1Aniy5Ch76hCtoZwnERg4dYveqNMa
4TA9uz02qCX2HNQp7sCihGiddDEoGfmSr2RIQgnuooDLlnSmgff45WIe8JRiVFN2
EmnNgAfaLvXKaOOT5mD6NlaH5LFEML0apo0VNygx4cZz76BqIzua/9e9/NtRAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUKQh3gjOazIr47gIafWtoYMq4zUowHwYDVR0j
BBgwFoAUKbOR9Vd1FOMPZO3242GQXKCM9XIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0MwQ0VGQzYyNkE5NDk3MjM0REQ3QTI5RjU3Q0EzRjhG
QkFCNUM2RTYwNUE0MEFEQUIxRTA5QTAzOTNEQTE2LzAvMjlCMzkxRjU1Nzc1MTRF
MzBGNjRFREY2RTM2MTkwNUNBMDhDRjU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOUIzOTFGNTU3NzUxNEUzMEY2
NEVERjZFMzYxOTA1Q0EwOENGNTcyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdDMENFRkM2MjZBOTQ5NzIzNEREN0EyOUY1N0NBM0Y4RkJBQjVDNkU2
MDVBNDBBREFCMUUwOUEwMzkzREExNi8wLzMxMzkzMTJlMzEzMjM0MmUzMDJlMzAy
ZjMxMzQyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK/fDANBgkq
hkiG9w0BAQsFAAOCAQEAinFdaeizFQhtSeFAy2AQ4lLsCXvNVVOdAEq6PnsIpcE4
JhywG7SnkNvpzy4yDNQVWpATE8KlUl99jnpLLINh9g6NCVOyPJIUkXxd0+8kB6yO
kvvBU9p3poHdIBEtSigJNQSROBpzbaoyDIg2gFUf/32CixxlMvT0zZuqc9iJ6hXN
dnJ9cnCjaPcpPwnMSOg3mZNwGyDR8rAMlwMezOq/5YO3vCIi3YILrG8xYUdmwuLC
j2SjL5NYLkdYytnHjbEYcrAg7kHCM04sPcLHSeN7bwH+PXQHgds6LeyxZOCaBpSl
WZxoe+wSihr8naIno3jgBbHnWsm0ujp0NzY42H7BDQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:28 2024 by rpki-client on console-ams.rpki-client.org