Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38342e302f32332d3234203d3e203233333833.roa
File:                     3139312e3130332e38342e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          QqkS0RTgmuw1bS/sZCGn1R3v8o+/epwrHBF8sADg/js=
Subject key identifier:   01:96:AC:02:76:8E:F5:FF:DA:04:66:67:41:9D:AC:2F:6D:FB:F8:D5
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       41734122BE5E44CB4129E0E697FEFFC38C9B362F
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38342e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:24 +0000
ROA not before:           Tue 05 Mar 2024 17:35:24 +0000
ROA not after:            Tue 04 Mar 2025 17:40:24 +0000
asID:                     23383
IP address blocks:        191.103.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:73:41:22:be:5e:44:cb:41:29:e0:e6:97:fe:ff:c3:8c:9b:36:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:24 2024 GMT
            Not After : Mar  4 17:40:24 2025 GMT
        Subject: CN=0196AC02768EF5FFDA046667419DAC2F6DFBF8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:7a:d4:eb:aa:2f:b8:0a:59:91:bf:a5:0a:
                    68:ba:55:8a:a1:b5:e0:f9:1a:4d:2f:7e:e3:6a:da:
                    b4:f8:87:93:17:1e:9b:f0:73:12:ad:1e:7e:24:ee:
                    13:9b:35:c9:8f:f7:ef:8a:95:c2:5b:87:7b:64:51:
                    64:a2:d2:27:05:d0:1f:08:7b:aa:31:d6:dd:fd:0b:
                    0d:b8:37:37:01:56:97:b3:4f:0c:dd:7a:78:51:73:
                    0f:72:07:9c:64:36:4d:22:b8:a0:ee:77:b6:ea:dd:
                    74:70:3e:3e:3c:83:19:7f:07:18:95:95:84:5d:16:
                    c8:c9:0b:4c:29:20:fa:07:03:21:17:e1:fa:7f:71:
                    52:ed:ba:17:db:b6:27:4c:a0:fa:c4:79:ab:4c:bc:
                    91:e2:26:ff:c4:36:b7:a6:3f:98:e1:eb:b1:b4:93:
                    d7:33:7d:09:e3:8e:d8:76:91:3b:4d:f3:a9:d6:80:
                    5e:4a:97:76:2e:a9:ec:e8:00:78:6e:18:5c:05:f2:
                    1b:8f:24:95:91:cb:71:e0:2b:b6:16:aa:be:3c:10:
                    79:d0:ab:cd:45:75:7f:61:fb:97:a7:f5:23:1f:ce:
                    2b:ea:99:8d:c5:25:ee:aa:97:92:70:52:b6:a8:f7:
                    49:8c:b9:18:6f:16:93:0b:1e:63:12:38:8b:cb:24:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:96:AC:02:76:8E:F5:FF:DA:04:66:67:41:9D:AC:2F:6D:FB:F8:D5
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38342e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:7d:fc:e6:45:f1:c9:7c:54:f4:70:f9:db:60:de:60:ad:
         d3:b1:b0:91:62:39:58:65:df:de:f8:d8:c6:bc:36:67:71:4c:
         5e:9b:21:32:7a:7a:82:3c:50:06:49:36:85:b8:3c:e6:ed:34:
         27:4c:23:e9:32:0f:32:2a:01:f9:a8:90:22:70:d6:c4:36:5b:
         8c:e4:98:8c:07:0f:ea:bd:75:68:b5:91:cc:84:6e:6d:4d:3b:
         33:0b:b1:4e:e6:81:23:ae:4d:c6:3c:ff:f9:63:98:92:6a:34:
         5f:82:1e:62:33:4b:68:fd:4a:09:30:38:07:c9:28:22:b0:f2:
         76:dd:d1:f1:cb:07:c0:fc:4a:f5:d7:ae:32:08:a3:3a:1d:e8:
         ba:8c:5d:1c:32:d9:a4:c8:66:5a:a7:85:eb:d1:49:3e:d6:c9:
         30:9f:04:c4:89:54:f3:dc:89:79:f4:66:b7:aa:71:56:1a:4b:
         87:a2:bf:61:5b:a0:54:4a:92:ad:87:17:43:b8:52:1d:11:61:
         f5:d9:01:70:da:10:d7:0b:79:6f:e6:b5:01:12:5d:70:fb:47:
         c7:ca:85:cd:7c:d3:46:1f:75:15:9b:44:d0:1c:09:70:b1:5d:
         91:b8:20:d3:c4:1c:fe:b8:9f:9c:a8:6d:55:20:2d:11:03:ef:
         a2:81:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 18:13:18 2024 by rpki-client on console-fra.rpki-client.org