Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa
File:                     3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa (raw, json)
Hash identifier:          L39uFfFIYluHuYsaosmwkCtohcBYoJ8Zb9tA2RtBcho=
Subject key identifier:   10:1F:15:C3:E8:32:AD:9A:1A:32:B4:CC:F9:37:4C:D1:F8:5A:C5:13
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       43EABEC7CF67346D9F971A47E28E42C1CCA40CA3
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 18:17:03 +0000
ROA not before:           Tue 05 Mar 2024 18:12:03 +0000
ROA not after:            Tue 04 Mar 2025 18:17:03 +0000
asID:                     15311
IP address blocks:        186.103.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:be:c7:cf:67:34:6d:9f:97:1a:47:e2:8e:42:c1:cc:a4:0c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:03 2024 GMT
            Not After : Mar  4 18:17:03 2025 GMT
        Subject: CN=101F15C3E832AD9A1A32B4CCF9374CD1F85AC513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:28:64:ba:01:0c:3f:f1:d8:1d:8c:60:7b:
                    e9:d6:a3:b1:d1:72:85:8d:4b:2b:e6:9d:94:95:24:
                    73:91:fe:6a:45:fb:30:ac:64:ca:7b:a5:cb:6c:f0:
                    ca:f5:30:a6:f3:df:56:8c:a5:02:bf:6b:57:6f:8d:
                    53:fd:7b:5a:f3:84:48:a0:a7:45:24:5d:56:cf:fa:
                    a4:77:6d:7a:d5:59:d5:4b:47:9e:77:34:d9:f1:19:
                    24:b7:a8:75:35:28:d3:f7:75:5d:bb:6e:a1:3d:60:
                    fd:87:81:b8:f6:7d:5e:09:9e:31:c9:f0:11:8f:49:
                    8e:3a:03:44:3f:f3:c9:37:24:e8:ce:82:cf:4d:20:
                    78:68:c0:ab:96:a3:4a:21:bc:5e:e9:a7:4e:e8:65:
                    28:9c:b0:2b:a7:a1:b2:f4:9b:27:7b:20:1c:55:d6:
                    b8:47:9e:82:ea:a2:85:81:12:bc:cf:64:f3:a9:f2:
                    bf:d0:dc:6d:a6:6e:11:d7:b6:86:5f:e0:24:b2:41:
                    fa:d2:28:73:90:2a:80:af:74:cc:8f:29:46:c1:02:
                    af:f1:49:e1:d3:10:20:1f:3f:c5:6c:54:fb:11:53:
                    e9:a3:cf:16:13:9e:46:ec:1d:b1:48:c3:ba:93:28:
                    b9:12:6a:a1:ea:27:1b:10:a4:0a:5e:aa:c5:23:5e:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:15:C3:E8:32:AD:9A:1A:32:B4:CC:F9:37:4C:D1:F8:5A:C5:13
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3132382e302f31372d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         16:29:3c:3c:8d:76:64:5b:b3:f0:ff:6f:f9:b9:d4:a1:e0:39:
         a3:4c:9c:a9:33:75:b1:de:df:e7:df:2a:23:76:fa:94:5d:5b:
         b4:12:3b:15:4e:ad:b4:5f:de:69:02:ac:e7:fa:4d:33:7c:f8:
         1e:02:e5:bd:e6:cb:d0:4c:93:eb:f7:3f:2c:b5:12:1d:b9:a6:
         9f:6a:ac:d5:5b:08:c0:46:a5:cd:ae:6f:b1:7d:ac:2d:df:2e:
         09:de:57:2d:2e:d2:b5:99:b1:d2:14:07:2d:ec:50:70:69:68:
         3b:84:90:5e:5a:9c:35:e1:2e:26:b5:ad:ba:42:7c:ee:95:ca:
         a6:b5:66:ff:64:a9:b2:80:b1:71:be:40:a1:88:d5:33:ba:89:
         5b:59:bf:02:d9:52:18:5f:6e:1e:12:d8:ba:20:c0:24:ff:1d:
         3c:e9:6b:53:2b:f5:dc:1f:b7:bf:83:6d:83:35:d9:84:8d:9d:
         e5:1d:34:a7:46:29:f6:3a:44:e4:2d:d2:e3:44:32:d4:a5:ea:
         03:b2:13:fc:f5:ea:35:95:59:2c:19:f5:85:bc:ca:99:7d:99:
         dc:06:b8:44:d2:08:5a:26:55:06:0d:de:fc:1f:b4:8e:63:8d:
         3a:43:70:35:15:c1:e5:19:f9:18:ae:f4:b8:f2:4c:15:04:03:
         45:02:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org