Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38302e302f32322d3234203d3e203233333833.roa
File:                     3139312e3130332e38302e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier:          vQiifCc0mAKGO+Dg616ffxZOkrSL/RtoaeTIJ7/19Aw=
Subject key identifier:   78:BD:D6:93:41:BD:77:7C:80:CD:57:05:33:6A:23:04:C5:83:59:6E
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       E075119D9A47D459ABA8A6C42DB83EF60E3F79
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38302e302f32322d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     23383
IP address blocks:        191.103.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e0:75:11:9d:9a:47:d4:59:ab:a8:a6:c4:2d:b8:3e:f6:0e:3f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=78BDD69341BD777C80CD5705336A2304C583596E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:c0:ed:78:14:94:03:49:27:0f:7f:f7:8b:
                    6a:cf:cf:64:ef:2f:8d:ef:2a:8f:d1:70:90:23:04:
                    cf:e8:43:a4:6d:56:45:be:f5:4c:b1:ca:c1:fd:a3:
                    bc:26:02:44:e7:65:ad:eb:37:6f:65:bc:d4:06:11:
                    05:d8:0c:a4:0d:4b:f6:8d:e8:78:95:8e:cd:98:a2:
                    11:1d:a1:e1:0b:87:d9:42:ef:18:44:5e:6b:5a:38:
                    c7:74:83:0a:ee:cf:30:82:74:19:b5:15:dc:e3:d7:
                    fe:93:06:da:20:30:89:27:1f:c0:73:ba:50:44:dc:
                    ea:91:19:c5:ec:92:a8:d7:0b:99:f6:7f:54:10:6d:
                    4c:59:c7:68:b9:c5:ae:65:7c:bf:bf:d1:24:42:6a:
                    d2:e3:f6:9c:c5:e5:c9:22:26:b4:d1:6c:1c:50:ea:
                    a8:a6:a2:7c:73:22:d8:1a:f5:b6:52:1b:3f:7f:98:
                    5b:06:93:56:b4:e3:34:3d:c0:b2:dd:30:9f:ae:7b:
                    35:b2:3c:bc:14:43:e2:76:8e:cf:c1:98:2e:c0:4a:
                    67:b5:12:79:52:7b:48:ca:dc:65:94:e6:d4:3d:d0:
                    63:c0:42:e2:26:a0:b4:87:fd:7b:3e:8e:2f:df:e6:
                    c8:43:e5:91:4f:4b:2d:ba:4d:20:99:d1:6a:3f:96:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BD:D6:93:41:BD:77:7C:80:CD:57:05:33:6A:23:04:C5:83:59:6E
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38302e302f32322d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:48:1e:26:4a:30:bc:d1:ac:43:5e:fa:5b:49:71:04:1b:
         b5:7c:cc:64:2d:b4:a7:c8:80:f0:04:33:93:84:98:3b:ae:7c:
         97:bb:9d:01:31:57:bf:db:1c:70:34:fd:91:20:9a:c2:3f:84:
         2f:84:03:90:5c:bb:fb:d2:81:12:30:44:f6:e4:6a:b5:a1:38:
         1e:04:65:14:de:99:8f:69:1d:32:98:49:63:1b:1a:8b:01:fe:
         01:8e:2f:73:01:22:b9:48:f6:20:50:3c:6b:76:cc:62:a2:0b:
         92:ce:da:7c:c6:69:c8:1c:4e:0f:a3:21:49:34:2a:d9:64:55:
         41:e0:4a:22:df:ab:7a:f3:c3:d2:c9:5d:de:4a:a5:c8:49:d3:
         53:df:ea:9c:44:ec:db:a0:44:76:a9:a1:a1:56:ab:ce:bb:b5:
         04:ba:fe:7b:09:c8:aa:6e:35:bc:51:bb:f9:32:6e:7f:8d:00:
         12:ea:bf:e4:b0:f7:4f:36:bc:38:65:cc:53:f9:a3:44:9e:b9:
         9d:c8:1a:73:0a:5f:ed:2e:e8:ea:2e:c8:43:c5:4c:7a:51:c3:
         d1:3d:35:9f:e7:20:ce:c3:4a:95:13:62:9c:bb:e5:26:3e:59:
         6f:65:52:bc:7e:11:2b:e3:8e:6e:d2:07:01:34:ca:be:be:12:
         c3:70:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:26 2024 by rpki-client on console-ams.rpki-client.org