Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36372e302f32342d3234203d3e203532323632.roa
File:                     3139312e3130332e36372e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          JFqf8yeBLSYc8QwoGv2ESwxHXTc3pbcva9TA3qSjzso=
Subject key identifier:   65:F9:A8:0D:21:03:3C:48:8B:A0:C5:9C:7F:A5:64:FB:AD:63:AF:A1
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       0E4F92F42A148FE97478C226745001EAEA501572
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36372e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     52262
IP address blocks:        191.103.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4f:92:f4:2a:14:8f:e9:74:78:c2:26:74:50:01:ea:ea:50:15:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=65F9A80D21033C488BA0C59C7FA564FBAD63AFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:8c:cb:e3:3e:fe:f3:9a:5a:46:c9:b9:73:
                    31:33:08:3d:8e:db:18:2a:fb:1e:e7:15:de:9e:23:
                    3f:90:22:51:4c:52:3e:74:0c:de:26:65:40:a1:9f:
                    54:d0:f3:29:30:8f:f2:2a:f5:72:19:48:d4:16:fd:
                    12:8c:4d:c5:93:28:d0:53:10:f9:29:00:a8:07:ae:
                    77:a0:13:1c:55:a7:f6:84:51:e8:99:7d:ce:e5:e2:
                    c3:c4:58:73:55:bc:e6:40:e9:ff:49:71:0e:40:3b:
                    b6:45:79:9a:f6:e0:72:61:41:fc:e6:00:5f:c6:a2:
                    7d:62:3a:cf:5b:b3:6d:e9:28:7a:04:6f:05:5d:0a:
                    9e:91:5c:4f:c8:5e:96:6d:0c:48:4a:0a:45:5d:22:
                    30:f0:e1:f7:4a:36:37:c3:4f:7f:cf:66:89:17:ea:
                    0e:b3:8c:c2:1b:37:55:41:1d:e2:9a:f1:23:b6:79:
                    67:39:4b:a7:4a:c0:0c:0f:f9:91:eb:1b:f1:bf:41:
                    18:11:78:29:9e:ee:c2:c3:25:d3:f6:e1:a1:95:17:
                    9a:5d:ab:cf:e1:d4:98:c3:23:61:a6:3a:71:a0:d1:
                    42:c3:94:5d:56:06:94:2f:1a:73:4c:c5:74:0a:dd:
                    1e:d4:23:cb:8f:3d:2a:01:cb:50:7e:d7:f7:b7:1a:
                    8f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F9:A8:0D:21:03:3C:48:8B:A0:C5:9C:7F:A5:64:FB:AD:63:AF:A1
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e36372e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ec:ca:de:ca:2a:83:c2:12:35:6a:2a:20:e8:6b:d1:4e:e1:
         86:08:0a:a9:67:25:aa:2a:a8:b1:48:f2:f2:e6:48:23:12:9b:
         42:cc:c5:8e:a9:64:0a:92:d8:7f:ec:91:82:ea:c5:7d:d6:b3:
         71:1b:0b:32:a3:f5:d9:f5:57:c2:12:4f:96:48:4f:21:16:0a:
         48:f2:1b:cd:28:31:f7:62:11:00:2e:3f:d0:d9:bb:98:81:93:
         5e:ab:8c:5d:72:11:be:aa:d3:35:23:f9:3a:cf:fd:66:42:b6:
         35:0a:1e:b3:f0:d7:b8:fa:6a:de:2c:4c:40:c8:07:57:93:b8:
         d0:ff:1e:c1:87:7f:0c:75:04:11:1c:c4:1d:60:30:ea:33:89:
         99:b3:79:85:4d:fd:14:9c:80:b0:74:d7:09:3f:66:01:12:62:
         2e:66:e1:85:70:60:65:31:9f:7f:53:e3:ab:36:12:20:34:12:
         16:7f:12:fa:02:9a:72:75:6c:9f:27:9c:f5:e0:e4:bd:05:79:
         f6:89:58:96:7e:49:7d:f3:73:be:ec:f4:38:5b:38:81:d6:02:
         18:0d:d4:6a:bd:a9:46:6d:fa:53:56:28:06:0c:84:3d:6c:af:
         9b:88:9f:71:eb:c9:56:d6:10:f6:43:59:9f:07:07:ec:74:51:
         e4:c5:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:11:28 2024 by rpki-client on console-fra.rpki-client.org