Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa
File:                     3139312e3130332e37322e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          w5sqqiuEww/MlAer2UcwAa2xHaPHAt5oVUcPz2lnIyU=
Subject key identifier:   EB:1C:77:07:8D:69:14:9E:6D:24:BF:43:36:AB:B1:16:AA:B1:A1:C7
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       6D909C620F3F86A65D5A250F447A901118F60A2D
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:20 +0000
ROA not before:           Tue 05 Mar 2024 17:35:20 +0000
ROA not after:            Tue 04 Mar 2025 17:40:20 +0000
asID:                     23383
IP address blocks:        191.103.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:90:9c:62:0f:3f:86:a6:5d:5a:25:0f:44:7a:90:11:18:f6:0a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:20 2024 GMT
            Not After : Mar  4 17:40:20 2025 GMT
        Subject: CN=EB1C77078D69149E6D24BF4336ABB116AAB1A1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:4c:e6:e7:f8:6b:9e:3e:1f:90:0b:55:b4:
                    32:88:08:75:3d:03:3e:7d:99:00:05:bd:6c:8b:12:
                    2a:7e:c4:5b:2c:16:01:af:99:57:59:91:7d:04:c1:
                    fe:e5:bc:1b:a3:76:42:cc:9d:9b:1b:69:b8:84:7e:
                    af:6c:c3:b6:02:5b:ba:a0:cc:9a:7e:cd:d6:e4:1d:
                    e5:ff:b6:71:26:6f:ab:c9:50:04:f7:11:ec:68:fe:
                    3f:8e:eb:37:bb:62:16:95:3f:a9:9b:5d:7b:bd:60:
                    d3:e9:35:0c:d9:64:fb:dc:e7:7e:42:71:25:d6:31:
                    ed:d9:91:fa:35:3e:2f:dd:e7:b8:f6:ca:4b:06:64:
                    47:d7:32:29:9f:90:16:8d:44:fd:67:bb:31:a9:f4:
                    72:14:7b:fb:d3:67:e3:2d:45:b8:a5:95:8f:fd:e5:
                    c4:df:2e:25:73:56:1b:6f:ec:09:51:16:bd:29:9b:
                    62:05:1e:49:84:9d:6e:ab:6c:16:36:88:d1:3b:69:
                    5f:90:6f:62:f1:e7:60:06:51:fb:f8:6e:e1:68:ae:
                    d5:13:ab:9e:3b:f5:88:df:7b:ed:6a:ec:8f:af:c4:
                    26:cf:85:2b:90:f1:e6:ea:95:cd:58:38:74:05:2d:
                    39:7d:69:12:d3:9d:eb:6c:23:28:52:6f:e0:8a:0f:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:77:07:8D:69:14:9E:6D:24:BF:43:36:AB:B1:16:AA:B1:A1:C7
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:6d:f6:4e:37:b0:35:d1:d0:42:03:5e:b0:ef:1d:3e:42:6f:
         4f:71:9b:59:38:62:01:21:86:d1:73:0b:c2:18:5f:e6:24:e3:
         83:4e:25:02:50:53:85:ad:c1:49:ce:66:78:d9:7e:01:2b:17:
         53:17:15:9e:6d:45:2e:db:b5:4f:be:35:93:18:c7:85:c8:60:
         87:b6:97:96:11:cf:37:a9:55:3b:ea:32:0e:b9:ce:87:38:28:
         a5:78:c6:09:40:57:2e:b9:3a:91:d9:ff:fc:b1:7d:5f:21:3d:
         19:32:f8:00:da:be:10:3a:ed:62:d5:5c:d7:d1:74:cb:ab:9f:
         6d:20:7b:da:93:9b:6f:75:74:a9:7f:3e:67:3c:f3:cf:bc:7c:
         ba:c7:ce:da:bf:25:1c:67:30:13:15:93:49:97:eb:99:d2:52:
         60:46:16:a6:c6:aa:91:e8:0c:06:19:77:44:19:2d:98:d6:11:
         46:85:bb:f4:48:a2:df:93:fa:2b:e2:e9:89:7a:cd:40:47:fd:
         72:b2:14:0c:a2:74:8a:75:df:cc:e5:75:fb:c5:e9:80:45:8e:
         fd:bc:53:45:63:6c:87:1d:60:80:96:81:aa:83:5c:31:18:09:
         20:6a:28:a6:65:1e:df:b5:7b:4b:ec:50:49:a1:48:10:4d:9d:
         35:b5:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:58:04 2024 by rpki-client on console-ams.rpki-client.org