Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36342e302f32312d3234203d3e203233333833.roa
File:                     3139312e3130332e36342e302f32312d3234203d3e203233333833.roa (raw, json)
Hash identifier:          O8f0k2DWESDkuugJR5ubf0l4C7TQnjqlc6+saNSxoT4=
Subject key identifier:   DA:10:4C:71:24:1F:F1:7E:F0:79:95:02:DA:A4:F4:9D:36:9A:8E:5A
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       5CDAF976819203F6382460F8FFDA75A4B175AC23
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36342e302f32312d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:20 +0000
ROA not before:           Tue 05 Mar 2024 17:35:20 +0000
ROA not after:            Tue 04 Mar 2025 17:40:20 +0000
asID:                     23383
IP address blocks:        191.103.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:da:f9:76:81:92:03:f6:38:24:60:f8:ff:da:75:a4:b1:75:ac:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:20 2024 GMT
            Not After : Mar  4 17:40:20 2025 GMT
        Subject: CN=DA104C71241FF17EF0799502DAA4F49D369A8E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:c2:66:2d:6d:b9:97:be:d8:3d:6c:36:08:
                    db:6d:a7:0b:f6:af:83:89:0e:1e:bf:82:b3:e1:e4:
                    b6:09:3a:99:6b:d5:4c:f8:2c:8d:42:4a:99:52:56:
                    d6:58:e7:a6:db:d0:cf:31:fb:3a:e8:00:c2:81:75:
                    41:50:c4:f9:96:f3:96:12:be:1c:75:97:0d:51:be:
                    cf:5b:45:0d:ab:16:fc:cb:fc:3a:52:a3:5f:a4:ea:
                    4e:fa:2c:e5:ae:96:dd:ae:8b:0a:3f:50:0f:56:d1:
                    33:a0:6f:3a:96:a5:6b:ba:50:d4:ca:06:5d:dc:8d:
                    c6:18:15:e4:ff:7f:d3:01:96:3b:9f:8f:72:26:01:
                    06:cc:1c:55:98:b8:18:75:20:9a:a7:b9:0e:58:16:
                    ff:b9:7a:5a:8a:1d:6f:a8:4c:3b:4b:be:c9:6b:b6:
                    d1:d5:af:30:d7:bb:c9:78:a2:c4:98:ba:04:ea:4f:
                    2a:e2:7a:4a:66:9b:0f:e4:10:4c:02:68:e7:fc:cc:
                    d9:d6:f0:53:75:23:ef:c2:e0:5b:84:49:81:91:7d:
                    c6:ec:43:62:b3:3d:53:74:9a:60:20:45:23:e3:f5:
                    4f:3c:fd:36:d3:7b:68:1e:1c:58:3a:cc:63:0c:1e:
                    d1:7d:57:12:82:0d:bc:bf:35:f8:6b:f2:be:97:ef:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:10:4C:71:24:1F:F1:7E:F0:79:95:02:DA:A4:F4:9D:36:9A:8E:5A
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36342e302f32312d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:27:e9:b0:af:b9:18:1f:45:d8:23:89:4e:07:8c:08:b2:
         0b:8f:21:6a:b6:d1:9d:21:5c:bd:71:bb:98:cc:a3:24:4d:64:
         c2:cd:2c:d6:b6:da:d5:c0:cf:66:d0:17:af:0f:ce:8b:5d:fa:
         90:7a:ae:50:bd:0a:31:cb:cc:7f:1d:62:9d:ad:f7:e2:ce:c6:
         5d:3a:82:06:a6:37:80:68:de:9e:6d:1b:47:c9:2e:f7:b2:71:
         68:e6:c7:4c:60:4e:27:19:e0:17:97:ef:00:c2:7a:50:ae:37:
         b3:62:e6:c8:d6:b5:f0:83:e0:17:62:8d:68:40:55:44:38:7a:
         ec:bd:b4:c0:99:9f:d9:d4:e8:7b:da:b8:d8:11:d0:a9:2d:fd:
         be:76:b5:95:b9:82:0e:64:89:f5:63:76:61:aa:d8:48:93:e0:
         00:d7:0d:09:b3:1e:4d:a7:f0:87:b9:7b:9b:b7:2b:6b:5f:37:
         31:87:47:80:ff:86:27:89:04:91:4e:2e:b8:ce:2a:f4:da:63:
         95:0d:43:03:82:42:10:5e:4a:14:d7:c8:eb:70:6d:93:51:69:
         51:d4:f2:d8:6c:f8:15:9b:7e:88:8c:12:05:b2:04:4a:70:83:
         bc:4e:2e:ec:95:8c:d3:ac:ce:58:3b:7b:23:d9:98:74:15:f3:
         b7:ec:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 17:54:43 2024 by rpki-client on console-ams.rpki-client.org