Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa
File:                     3139312e3132342e302e302f31342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          2js1FVjf2Yi0mimg+sVvJrywtywaSIFUKb0APdsE/cw=
Subject key identifier:   F9:C0:A0:2D:46:CD:81:C5:42:AB:9F:D4:EA:5C:16:88:3A:BE:73:CB
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5561B8C0D72A32D3BC822687882C635EEE476475
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:13:01 +0000
ROA not before:           Tue 04 Feb 2025 18:08:01 +0000
ROA not after:            Tue 03 Feb 2026 18:13:01 +0000
asID:                     16629
IP address blocks:        191.124.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:61:b8:c0:d7:2a:32:d3:bc:82:26:87:88:2c:63:5e:ee:47:64:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:08:01 2025 GMT
            Not After : Feb  3 18:13:01 2026 GMT
        Subject: CN=F9C0A02D46CD81C542AB9FD4EA5C16883ABE73CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:4d:c3:e4:e3:88:90:98:55:ea:c4:6c:1f:
                    2d:76:19:96:fa:6e:42:17:ba:c2:23:f0:fc:3e:c6:
                    c4:9d:60:c2:09:55:54:d7:ed:4c:18:69:0b:35:cb:
                    be:3c:5a:3e:9f:ad:0f:b5:12:b8:59:60:92:c0:a6:
                    6f:87:89:17:01:bf:17:52:0e:5f:0b:e2:9a:e9:3b:
                    71:61:3a:f3:ab:ef:56:ae:7c:c1:3f:80:34:70:53:
                    32:5f:f2:c3:39:1a:19:97:c5:34:f4:33:2e:12:38:
                    db:cd:04:00:ee:83:9b:0c:4a:78:c9:56:48:54:25:
                    e3:53:d2:45:55:e8:25:00:ed:b7:e0:3e:f7:0d:f7:
                    91:5d:30:40:1d:8d:c9:03:80:03:a8:14:01:b9:64:
                    87:c4:a4:25:56:e7:bf:04:02:8e:7a:34:1b:7c:5b:
                    a5:32:39:cf:18:13:71:bc:e1:0c:72:3c:15:3e:8f:
                    d8:e2:68:b8:26:07:18:c1:8e:92:99:39:d7:f8:24:
                    43:34:25:2b:ab:c7:a4:6b:4d:f3:23:61:6c:6a:12:
                    ef:19:05:ac:e7:a6:06:55:46:ad:a3:a4:85:53:49:
                    31:44:d4:92:80:61:88:26:56:0a:d6:a8:11:31:c9:
                    0b:ff:c8:02:ff:25:6c:09:cd:df:e0:50:21:b4:f0:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C0:A0:2D:46:CD:81:C5:42:AB:9F:D4:EA:5C:16:88:3A:BE:73:CB
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.124.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         be:90:74:fb:d5:0f:cb:7b:e5:24:bc:2d:32:98:d2:da:06:fd:
         d3:7c:02:78:28:02:7b:98:7c:43:39:41:99:fe:80:99:8b:80:
         98:dd:19:55:96:a2:50:68:85:52:fd:2e:dd:20:d8:25:52:01:
         7f:ec:68:0a:43:6a:1e:df:b5:d2:a3:c3:3a:01:7a:e4:7b:e7:
         41:53:3d:d3:70:7e:aa:d1:2a:73:52:9e:b4:ab:dd:32:1c:85:
         94:d7:6f:d8:ab:28:3e:36:fd:68:6a:89:26:12:3d:8d:ae:ec:
         81:07:c5:c6:11:7a:e1:92:70:a7:bb:16:fa:b5:ed:2a:ca:cd:
         dc:b8:da:6e:8a:8a:a9:49:3e:0f:25:96:c7:8c:ae:58:df:06:
         bf:c9:f5:9f:1c:33:f9:69:95:4b:51:ae:16:8b:14:a9:bf:c7:
         85:65:39:fa:52:a5:69:8d:ce:ec:78:1a:6d:d0:44:99:56:a0:
         92:05:e8:5a:9f:09:69:21:fc:ba:7b:8e:8d:34:20:e3:93:91:
         cf:67:1e:d7:a3:78:61:15:0f:b0:0f:5f:d8:11:30:1b:15:f9:
         13:4a:d2:3e:4a:77:aa:1b:61:e6:10:73:e8:29:75:6a:a8:8b:
         0b:36:e7:93:8d:fe:82:f0:b1:e5:d7:50:96:a3:89:e6:e3:01:
         11:d4:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:41:46 2025 by rpki-client