Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37332e302f32342d3234203d3e203233333833.roa
File:                     3139312e3130332e37332e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          3mxlSK9wK1hJi48rtK0+klEBngCS+cdzbP12KzX2e9Q=
Subject key identifier:   A8:C7:0E:3D:EB:F0:6F:39:7E:8F:7D:C6:9A:05:A4:A8:57:5D:58:9D
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       6DF919DC19704F9221DBF781F9E51CCC3C9678E1
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37332e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:20 +0000
ROA not before:           Tue 05 Mar 2024 17:35:20 +0000
ROA not after:            Tue 04 Mar 2025 17:40:20 +0000
asID:                     23383
IP address blocks:        191.103.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f9:19:dc:19:70:4f:92:21:db:f7:81:f9:e5:1c:cc:3c:96:78:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:20 2024 GMT
            Not After : Mar  4 17:40:20 2025 GMT
        Subject: CN=A8C70E3DEBF06F397E8F7DC69A05A4A8575D589D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:d2:07:bd:95:f1:08:a1:4b:e1:68:79:af:
                    bf:89:e9:e2:75:d6:28:66:ef:ee:03:fa:0e:2d:e5:
                    61:99:9e:a9:e1:e2:3f:61:56:17:58:15:b7:7c:46:
                    c6:e8:aa:bb:bf:d5:f6:4e:17:ce:98:1c:d5:9e:a7:
                    c1:cd:61:71:8a:4b:e3:1d:bb:66:1f:f5:95:38:47:
                    3d:be:b9:76:cf:b4:5d:86:29:ef:14:ed:a5:4d:2f:
                    8f:11:14:8d:7d:a3:45:4f:5d:2b:06:c8:cd:63:c0:
                    0b:8d:43:f2:45:9c:c8:8d:26:2f:04:5d:da:c0:dc:
                    d3:9e:42:24:5e:75:27:bb:89:cd:72:94:1b:07:07:
                    5f:cf:61:98:35:05:27:4a:55:0e:28:02:0a:f3:39:
                    64:d4:b7:a2:0a:c6:ae:87:ee:89:41:a9:9e:fd:f1:
                    9a:25:66:2d:c2:a1:b8:76:72:e4:3a:13:1c:dd:51:
                    93:70:9c:78:97:1e:46:2e:96:2c:72:da:c3:51:88:
                    15:47:58:04:5f:91:8a:35:e2:a6:7f:63:07:4d:3a:
                    09:c6:1e:f6:aa:fb:a3:33:cd:e1:c4:49:ae:c1:34:
                    76:bd:33:29:aa:fa:d4:94:96:22:19:bd:16:a6:cb:
                    4f:31:9d:dd:c8:7e:eb:ba:1e:79:e8:26:9a:3c:87:
                    fa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:0E:3D:EB:F0:6F:39:7E:8F:7D:C6:9A:05:A4:A8:57:5D:58:9D
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37332e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:d1:1a:e7:c3:ee:59:e8:d5:bc:72:2c:99:d9:1f:1b:0d:
         40:9d:5c:5b:1f:6b:38:ef:10:ef:f2:53:b7:f5:2a:d2:fb:b2:
         ed:8a:dd:19:07:3f:83:2a:85:c2:38:a7:e2:fd:42:1b:7c:ee:
         5d:33:ed:30:c5:24:ec:bf:84:d8:ae:1e:5c:b6:6b:b1:d9:bd:
         cf:62:95:8c:5d:cb:c0:72:ff:b2:d9:00:2d:eb:aa:6f:94:a3:
         5e:40:22:61:44:51:8e:9b:c6:81:71:60:c7:75:46:73:ae:8a:
         b0:08:a2:28:7c:05:fc:3b:55:77:7c:0f:75:8f:e6:85:2d:25:
         da:71:2e:f6:88:66:13:bd:df:8f:f1:44:cf:83:9d:0e:54:4e:
         72:76:3f:82:9e:08:c5:dc:4b:2f:97:73:5b:f2:d4:9b:df:09:
         34:65:32:55:55:39:a3:d5:81:8d:0e:31:3e:8a:95:0e:8b:80:
         86:b1:ea:6f:86:05:a9:34:92:a5:ed:e7:78:58:74:36:2c:4a:
         93:aa:96:52:34:f7:cf:e1:fa:81:cb:9e:b0:46:5c:83:1a:ae:
         36:07:ee:3f:1c:db:c4:b8:77:22:f0:e4:08:c2:46:a8:41:aa:
         d0:5d:b4:b9:7f:c5:d5:fd:9e:1b:91:2f:f6:4f:b5:ab:b8:dc:
         e5:fd:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 17:54:43 2024 by rpki-client on console-ams.rpki-client.org