Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa
File:                     3139312e3130332e37362e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier:          LX+KJovLGPAuoowBlzohDe7/g4DLK7JgNwDJ3GtlqZA=
Subject key identifier:   D5:D2:4A:D6:87:00:71:D6:3E:85:34:68:D0:90:52:56:9E:AC:BD:BF
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       0952E3FF64964AAE43876766F072848606AB36C6
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:23 +0000
ROA not before:           Tue 05 Mar 2024 17:35:23 +0000
ROA not after:            Tue 04 Mar 2025 17:40:23 +0000
asID:                     23383
IP address blocks:        191.103.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:52:e3:ff:64:96:4a:ae:43:87:67:66:f0:72:84:86:06:ab:36:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:23 2024 GMT
            Not After : Mar  4 17:40:23 2025 GMT
        Subject: CN=D5D24AD6870071D63E853468D09052569EACBDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:0f:b6:03:58:d2:5b:66:d1:f6:b0:91:b5:
                    6a:e3:cb:78:ce:10:3a:dd:cf:25:cb:0d:50:db:a4:
                    44:2a:6d:27:f9:68:43:3a:5c:b1:3b:fb:fe:ef:94:
                    60:d7:4c:f0:c9:51:d5:c6:2d:d4:da:40:bb:31:d1:
                    42:a7:82:95:9d:17:f2:cb:84:2e:21:de:7d:9d:16:
                    53:98:7e:63:cf:53:48:b6:71:c5:f5:51:d2:c3:85:
                    a9:65:24:ae:54:70:ac:61:db:b7:c6:96:71:1e:2f:
                    89:b0:6c:38:91:32:27:d2:cc:4b:52:a6:3d:96:ba:
                    10:68:31:84:3e:c7:8a:46:3f:5e:39:b5:11:e6:b6:
                    fb:23:ce:32:7d:e5:0c:17:42:a3:14:2b:d8:e5:d0:
                    83:77:b8:8f:1f:94:d6:c3:e1:3a:d2:5e:5b:4d:7b:
                    45:cb:d3:5a:28:91:41:f7:fe:48:25:a2:c3:74:f8:
                    fd:9a:e3:ae:98:e9:0c:4d:21:48:67:ae:76:b7:a6:
                    02:ee:b1:30:5d:4a:c7:c4:7b:6f:4a:04:18:0f:97:
                    3a:37:2b:ed:f1:d5:b5:0a:a6:de:1d:b3:bc:dd:18:
                    69:35:54:62:84:96:e9:ae:fc:c6:6f:fe:0a:fe:38:
                    4e:c5:2e:05:98:8f:f9:f0:e2:d8:8a:3e:b7:ff:1a:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:4A:D6:87:00:71:D6:3E:85:34:68:D0:90:52:56:9E:AC:BD:BF
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:f9:ca:59:a1:5e:e5:0a:84:0e:0e:20:79:ba:d9:cc:e7:e5:
         a7:7d:39:d8:49:73:77:e4:1a:9b:73:dd:4a:6f:26:6f:00:02:
         c6:c7:40:ed:b4:10:b0:d6:dd:dd:c6:0b:df:e2:04:51:1a:f6:
         f2:e2:97:3c:19:94:ed:4c:27:a1:66:64:e7:4b:d5:12:1b:1d:
         fd:ba:ef:b5:7b:a3:ff:c9:8d:10:d7:2a:d9:5e:18:78:92:e9:
         f0:5a:55:f6:20:18:86:dc:20:db:68:8b:7b:52:d1:fe:c2:35:
         a7:d9:85:e6:ca:bd:f6:39:b5:51:88:37:e1:2c:b4:12:e2:0b:
         6a:29:7f:69:ba:6e:48:32:bd:24:9e:a5:c4:55:f8:7f:0e:bb:
         d3:a6:da:75:b4:a3:1a:ce:62:f0:54:be:65:b0:3d:2a:b6:d4:
         1a:45:c1:32:a5:24:92:da:ac:b1:92:1a:5a:54:58:2c:72:59:
         ab:d3:76:4b:e8:3b:60:a5:46:8d:31:e8:89:dd:3a:36:5c:23:
         df:01:3a:d8:e9:c4:e6:0e:1c:49:c2:dc:02:e1:bd:06:4c:f0:
         d2:32:51:63:20:9b:a8:ed:91:b5:00:1c:b4:bc:d2:6a:2e:71:
         5c:08:cd:a5:e8:49:74:77:70:34:92:52:5c:d5:c9:e1:2c:6b:
         a6:2b:91:c0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCVLj/2SWSq5Dh2dm8HKEhgarNsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0N0JERDdGNjE5RUNBRDdBOTFDRkRBMjczRTgxRUQ4
ODM2RjdFODAeFw0yNDAzMDUxNzM1MjNaFw0yNTAzMDQxNzQwMjNaMDMxMTAvBgNV
BAMTKEQ1RDI0QUQ2ODcwMDcxRDYzRTg1MzQ2OEQwOTA1MjU2OUVBQ0JEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5g+2A1jSW2bR9rCRtWrjy3jO
EDrdzyXLDVDbpEQqbSf5aEM6XLE7+/7vlGDXTPDJUdXGLdTaQLsx0UKngpWdF/LL
hC4h3n2dFlOYfmPPU0i2ccX1UdLDhallJK5UcKxh27fGlnEeL4mwbDiRMifSzEtS
pj2WuhBoMYQ+x4pGP145tRHmtvsjzjJ95QwXQqMUK9jl0IN3uI8flNbD4TrSXltN
e0XL01ookUH3/kglosN0+P2a466Y6QxNIUhnrna3pgLusTBdSsfEe29KBBgPlzo3
K+3x1bUKpt4ds7zdGGk1VGKElumu/MZv/gr+OE7FLgWYj/nw4tiKPrf/Gpk7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1dJK1ocAcdY+hTRo0JBSVp6svb8wHwYDVR0j
BBgwFoAUE0e91/YZ7K16kc/aJz6B7Yg29+gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNUM4NUI2OTcxRDhEODkwMkI3MDVDNTY0RDE2NjBEMzcw
MDFDMTQwQkYzRUQ2NzVGMUIyOEMyNDAyQUQyQzg3LzAvMTM0N0JERDdGNjE5RUNB
RDdBOTFDRkRBMjczRTgxRUQ4ODM2RjdFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzQ3QkREN0Y2MTlFQ0FEN0E5
MUNGREEyNzNFODFFRDg4MzZGN0U4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTVDODVCNjk3MUQ4RDg5MDJCNzA1QzU2NEQxNjYwRDM3MDAxQzE0MEJG
M0VENjc1RjFCMjhDMjQwMkFEMkM4Ny8wLzMxMzkzMTJlMzEzMDMzMmUzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzMzMzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr9nTDAN
BgkqhkiG9w0BAQsFAAOCAQEANfnKWaFe5QqEDg4gebrZzOflp3052Elzd+Qam3Pd
Sm8mbwACxsdA7bQQsNbd3cYL3+IEURr28uKXPBmU7UwnoWZk50vVEhsd/brvtXuj
/8mNENcq2V4YeJLp8FpV9iAYhtwg22iLe1LR/sI1p9mF5sq99jm1UYg34Sy0EuIL
ail/abpuSDK9JJ6lxFX4fw6706badbSjGs5i8FS+ZbA9KrbUGkXBMqUkktqssZIa
WlRYLHJZq9N2S+g7YKVGjTHoid06Nlwj3wE62OnE5g4cScLcAuG9Bkzw0jJRYyCb
qO2RtQActLzSai5xXAjNpehJdHdwNJJSXNXJ4SxrpiuRwA==
-----END CERTIFICATE-----
Generated at Thu May 9 13:01:08 2024 by rpki-client on console-fra.rpki-client.org