Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37342e302f32332d3234203d3e203233333833.roa
File:                     3139312e3130332e37342e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          WHDo7GR04w9Ps0x4+DxF1X5Qd128X/wIbnRcuBDfxr8=
Subject key identifier:   5C:64:AC:F2:0B:47:E9:D1:65:29:C2:4A:F1:39:33:82:0E:6F:66:30
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       0D1808E031A01A34F78E1BED2948576A8550E034
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37342e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:12 +0000
ROA not before:           Tue 04 Feb 2025 18:19:12 +0000
ROA not after:            Tue 03 Feb 2026 18:24:12 +0000
asID:                     23383
IP address blocks:        191.103.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:18:08:e0:31:a0:1a:34:f7:8e:1b:ed:29:48:57:6a:85:50:e0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:12 2025 GMT
            Not After : Feb  3 18:24:12 2026 GMT
        Subject: CN=5C64ACF20B47E9D16529C24AF13933820E6F6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:9e:4c:6a:a6:7d:f3:bd:63:48:85:70:cb:
                    35:e6:3c:7e:db:f4:8a:28:ba:e7:5e:cb:84:5e:bf:
                    a9:b6:fb:e6:64:45:4e:f6:ca:10:41:79:1a:ec:9c:
                    c3:16:73:19:7f:15:7e:79:c6:cb:60:4b:73:a2:b8:
                    5a:8b:14:e6:32:aa:4a:76:c7:d2:62:85:b9:e7:59:
                    6a:dc:f2:8a:02:b0:c1:08:e6:4e:ae:aa:55:5b:16:
                    12:60:62:cf:12:de:22:03:a8:49:58:c0:9a:9c:8d:
                    c4:19:61:6c:f8:f0:94:ae:42:9f:c2:30:8d:10:34:
                    08:2c:07:1e:1b:f7:32:cf:75:4f:9e:4b:8d:bd:be:
                    8d:50:1f:5e:d1:ff:4f:ff:4d:be:fa:59:0f:cb:f6:
                    e2:5b:68:59:8d:ca:36:5e:72:33:c5:17:5c:f2:ba:
                    0a:b6:22:44:65:54:cc:2c:8b:c0:56:db:ce:81:c3:
                    5e:b2:26:17:c7:27:23:1f:d2:ce:2c:f1:03:2e:a9:
                    28:cd:a6:5e:6e:e6:4e:89:0e:98:37:e0:6b:5d:84:
                    85:ae:26:eb:98:43:2c:f6:ad:90:12:b9:ae:d9:2e:
                    cc:ae:aa:d1:df:81:d6:3c:68:09:07:1b:2f:b0:d6:
                    1a:8c:fa:54:83:5b:44:d3:f7:9f:a4:4d:fc:d9:b6:
                    5c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:64:AC:F2:0B:47:E9:D1:65:29:C2:4A:F1:39:33:82:0E:6F:66:30
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37342e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:dc:71:60:c7:63:c7:38:71:8f:f5:8f:0d:b2:b9:3f:64:
         3f:12:0d:5b:cc:17:a3:1b:d0:c1:09:d8:90:7c:34:4c:ef:d5:
         e3:d4:18:c6:46:3b:39:28:e6:e3:cc:2f:7d:f6:97:1d:ca:a0:
         13:1f:d7:1a:df:06:04:26:de:3a:ec:f1:20:32:d0:27:dd:90:
         45:6b:8c:00:bc:47:cb:59:18:b0:53:70:a5:9c:61:5b:65:d1:
         a2:d7:fb:f7:02:c5:fa:d3:46:80:9d:61:4a:94:05:7e:16:7d:
         ff:3b:0f:a1:a6:c3:70:18:87:4b:76:8d:3c:d9:25:46:5b:9b:
         6a:09:2b:c7:4c:17:60:60:f4:f7:9b:3a:be:6a:75:cd:81:3e:
         ca:57:bc:c2:95:37:78:fd:c6:05:31:90:da:12:a9:63:01:fd:
         52:a9:c3:d3:da:5c:d6:65:20:58:a8:54:2f:71:10:d8:ad:60:
         01:de:33:22:24:4c:75:d2:ef:98:6b:18:c3:26:a1:74:ab:90:
         51:ce:6c:98:3c:bd:08:cd:ab:87:8a:af:4a:20:39:cb:4d:4d:
         27:77:4c:4f:2d:12:22:0f:d7:b4:2a:1e:ea:f1:1a:68:d9:40:
         4f:eb:55:4c:80:ae:84:52:e0:d8:de:e5:11:63:58:c6:87:ad:
         57:ef:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:48 2025 by rpki-client