Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa
File:                     3139312e3130332e37362e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier:          Npgzhhb97eXyBLsWORJqFoQjfmll8EahabezjyrwSLk=
Subject key identifier:   62:53:EE:01:E2:F0:9E:ED:21:A3:46:99:90:58:D1:09:FE:0A:B1:0B
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       5DA48C08F9793EC23EE5D6EA69B72128E47328DD
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:10 +0000
ROA not before:           Tue 04 Feb 2025 18:19:10 +0000
ROA not after:            Tue 03 Feb 2026 18:24:10 +0000
asID:                     23383
IP address blocks:        191.103.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 13:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a4:8c:08:f9:79:3e:c2:3e:e5:d6:ea:69:b7:21:28:e4:73:28:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:10 2025 GMT
            Not After : Feb  3 18:24:10 2026 GMT
        Subject: CN=6253EE01E2F09EED21A346999058D109FE0AB10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:e3:f8:61:e7:91:df:34:04:5a:a6:f9:3a:
                    48:bc:1f:82:36:ea:9a:ef:e8:a4:93:c4:92:e8:da:
                    da:85:39:6e:64:b5:21:c5:81:bc:5d:ef:2f:15:00:
                    8b:a6:9e:e1:d5:37:45:64:17:b5:ca:4b:4b:26:50:
                    e8:e5:3a:7e:0e:33:c8:af:96:91:5a:ef:53:d9:74:
                    f2:5c:06:8e:18:b8:db:97:34:6a:03:b4:e6:25:59:
                    a7:89:0d:50:e0:1e:f8:d2:79:ae:1a:cc:47:47:de:
                    0b:63:ea:26:7c:34:bd:3f:95:71:bd:a8:b3:6d:79:
                    73:ba:88:4b:71:97:26:3f:5f:21:19:6e:78:3a:9c:
                    48:f9:cf:e9:48:86:96:eb:ed:62:66:76:9d:81:07:
                    18:36:58:29:7c:47:f5:28:8a:ae:7f:b1:c3:37:cf:
                    57:f9:77:e8:90:29:93:12:04:a0:17:75:01:09:60:
                    4f:4c:e0:ef:91:33:25:c2:cb:68:e6:b5:a7:81:02:
                    50:92:76:97:7e:94:9d:2f:a1:a6:93:88:6b:d6:c8:
                    50:77:d7:8e:da:dd:29:b8:0a:74:47:6a:2c:10:85:
                    1d:9f:95:15:ef:32:67:5b:77:bd:fc:4c:4a:a5:23:
                    d5:4d:81:c6:5e:3e:9a:7f:1c:e7:3c:4f:66:1f:e9:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:53:EE:01:E2:F0:9E:ED:21:A3:46:99:90:58:D1:09:FE:0A:B1:0B
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:c7:15:e7:e0:c1:10:3e:4d:4c:07:9c:0d:b8:1e:ab:d3:
         40:3a:eb:29:69:88:51:cd:2b:38:bb:80:8a:5f:a9:19:9e:65:
         45:97:df:ba:b7:57:ec:d8:6a:23:e5:1b:c2:4e:04:49:2b:b0:
         be:a5:d6:e4:91:fc:28:97:ab:10:f4:0d:e8:35:6a:77:6f:64:
         08:4a:1e:d4:1d:6b:e2:4f:2d:d7:ee:1f:d4:bd:64:14:3d:d2:
         bc:86:bf:8f:8f:ca:11:98:f9:9a:4d:a5:23:13:c2:7b:6d:78:
         6b:2b:2a:95:a0:7d:9f:17:46:2d:80:65:9c:17:b6:f0:c3:1c:
         00:3c:27:b5:45:91:e9:8a:06:eb:f1:f0:23:72:00:f7:69:04:
         4d:a6:4f:f6:4c:bb:42:b4:47:66:40:0e:c2:c4:87:97:7b:4a:
         68:12:15:68:c2:e7:73:82:b0:8d:67:05:05:93:bc:00:8b:80:
         c4:c0:c3:1d:9e:ee:8d:56:6f:1f:35:65:f6:3d:b4:0c:08:68:
         7a:9d:93:d7:2d:7e:7f:5f:e8:64:ef:8a:2a:56:4c:af:83:1a:
         5e:ef:58:ac:4f:be:6b:eb:67:70:99:f3:ad:cc:82:b5:f7:0a:
         e4:e5:fa:08:bc:ad:5a:dc:38:47:1b:28:73:ef:28:df:86:25:
         8f:22:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:41 2025 by rpki-client