Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa
File:                     3139312e3130332e37322e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          Rv631U3dBs4cnbtlEOioc5DHJCHSYUny4ncNRflTrc0=
Subject key identifier:   D8:7A:C5:11:84:D2:C5:8B:3C:24:A3:B2:15:A9:E9:FD:FB:C8:8A:DF
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       53A4E4D02FDA56FB00E961C04D6DEE3D4FCFED0A
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:10 +0000
ROA not before:           Tue 04 Feb 2025 18:19:10 +0000
ROA not after:            Tue 03 Feb 2026 18:24:10 +0000
asID:                     23383
IP address blocks:        191.103.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 13:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a4:e4:d0:2f:da:56:fb:00:e9:61:c0:4d:6d:ee:3d:4f:cf:ed:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:10 2025 GMT
            Not After : Feb  3 18:24:10 2026 GMT
        Subject: CN=D87AC51184D2C58B3C24A3B215A9E9FDFBC88ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:9d:53:7e:46:68:62:f8:6b:bc:f3:f0:59:
                    08:d1:90:6d:2b:f6:95:92:cf:06:5d:92:39:0e:69:
                    7d:0b:41:2c:74:89:d4:e5:86:b6:8d:c5:5c:ac:ff:
                    7c:b1:09:28:79:71:86:4b:db:a6:bc:df:1e:2c:6c:
                    f3:ee:1c:63:0f:f2:07:f5:49:84:1b:5f:b8:ea:b9:
                    6a:16:a3:e6:a1:a3:5d:88:44:21:1d:5b:43:05:36:
                    3d:a1:1a:0b:13:38:fa:4c:dc:a7:1c:71:0f:39:6d:
                    7a:a2:04:9a:19:10:5d:2d:0e:6e:7a:bd:3d:ed:81:
                    dd:85:60:e4:7d:f2:d1:df:8f:9b:48:01:0e:9d:1c:
                    9c:cb:d2:26:f7:69:9d:d0:a5:a6:2b:6e:13:06:e3:
                    78:bb:22:d7:86:74:fb:87:3d:40:27:1a:21:61:d5:
                    a4:d2:ee:dd:3f:e4:1d:05:eb:ee:16:01:5a:fb:cc:
                    fd:b3:5d:41:7a:24:4b:bd:5b:88:3d:f4:be:9c:85:
                    ff:7a:31:10:5c:fa:96:e3:a3:be:16:83:71:04:84:
                    87:0e:62:ef:7d:49:dd:bf:9a:44:2f:4f:2c:ba:d9:
                    7c:72:46:80:75:7f:11:0d:1c:a8:f5:a3:b6:81:91:
                    34:2c:c6:40:89:a6:12:4f:3f:c9:83:d2:7e:9d:2a:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7A:C5:11:84:D2:C5:8B:3C:24:A3:B2:15:A9:E9:FD:FB:C8:8A:DF
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:33:c3:2a:1a:09:b0:a2:42:40:2d:dd:56:b9:6e:1a:4d:
         d0:93:b5:59:8b:32:ba:d4:4b:f3:9f:d1:97:dc:79:ba:a5:d2:
         3c:46:b2:a6:bf:5f:c1:b7:95:5c:36:48:b5:be:b0:69:6d:4d:
         f0:34:c6:16:bb:17:72:74:d5:26:29:c7:e1:f3:7b:d8:87:56:
         f1:8b:1f:6f:e6:79:08:95:66:eb:8d:3b:75:70:6f:28:4b:da:
         bc:9e:d6:5e:e4:49:04:03:b5:9e:cc:f9:d3:42:69:a0:96:0b:
         02:87:25:37:bf:fd:c6:c5:4a:74:fd:e7:4f:fc:84:8b:72:d5:
         dc:04:e2:a5:98:69:ab:ab:83:d5:a5:fc:be:bc:42:32:22:0b:
         3b:29:8b:3b:b0:fa:e9:d7:1d:9d:4e:bb:c8:90:08:ec:bc:05:
         c4:e4:5a:e1:00:b8:12:9c:43:55:4f:c4:45:9b:d4:c4:35:a7:
         60:c4:8a:d0:4c:9e:88:1f:68:a8:5e:5a:c8:ee:2d:e9:85:13:
         7d:3d:7c:a4:2f:ba:47:b4:9e:77:01:60:5d:8e:e7:52:c1:d7:
         a5:f8:ef:29:00:ee:52:10:75:f0:d7:51:6f:56:74:49:c8:ba:
         ce:77:41:6a:bd:4b:a0:a7:57:05:3f:67:d3:18:b8:14:9d:15:
         2c:2a:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:30 2025 by rpki-client