Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38362e302f32342d3234203d3e203532323632.roa
File:                     3139312e3130332e38362e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          K1jqobNvTNfIquMUbEZN3EK5IJfQ/bZU0Ok1xh91UVI=
Subject key identifier:   B1:EF:52:B3:10:1A:71:CE:82:82:50:D4:EA:D8:0C:85:1B:45:3C:3E
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       1C3B81ED083C80B2A5680AAC0D5D5E74801DFDCD
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38362e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     52262
IP address blocks:        191.103.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3b:81:ed:08:3c:80:b2:a5:68:0a:ac:0d:5d:5e:74:80:1d:fd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=B1EF52B3101A71CE828250D4EAD80C851B453C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:81:69:45:61:da:e2:8c:c6:3a:25:2d:7c:
                    85:dc:05:fa:cb:5d:12:27:8e:70:1f:e7:fe:db:90:
                    52:01:98:33:c8:68:38:a1:ef:ea:e1:3d:25:b2:67:
                    2f:7b:10:0d:71:8b:28:e6:1d:e5:7b:07:09:d1:73:
                    88:ba:ad:59:8f:4e:ee:f5:ec:ec:ec:c2:ac:64:3f:
                    d2:79:b1:21:a2:1f:4a:ee:b3:cb:15:93:06:45:0a:
                    74:9a:53:32:cd:c3:e3:8a:0b:79:60:18:ed:8c:39:
                    c6:1e:6d:be:de:3b:3e:92:a4:3b:d6:57:75:a9:1d:
                    ac:fd:1b:86:33:c6:08:82:73:3b:1b:32:2f:4b:a5:
                    c7:08:76:90:ea:f0:e6:99:00:ad:62:e6:11:b1:d2:
                    53:c1:30:91:0d:ce:94:49:9c:fb:b0:a7:60:68:38:
                    69:01:70:a6:b0:2c:1a:81:af:6d:1a:a9:0a:7e:84:
                    b8:7b:0f:6f:3c:5c:a2:30:81:83:ee:4b:8d:ce:5a:
                    88:bc:d3:5b:98:ff:42:ec:e5:bf:16:55:3c:2b:71:
                    5f:fe:41:a9:c4:33:95:46:37:34:de:ef:ab:bb:6e:
                    63:85:9f:c7:2e:c4:a0:d9:f4:5a:62:08:cd:35:52:
                    75:e2:0b:b8:13:bb:c4:95:0b:b5:61:2e:95:e9:27:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:52:B3:10:1A:71:CE:82:82:50:D4:EA:D8:0C:85:1B:45:3C:3E
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38362e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:f1:db:9e:41:66:83:5b:4f:ef:d6:84:59:2e:f2:1a:1a:
         fe:67:3a:18:ad:4e:c7:5d:97:6f:d0:14:57:9d:36:36:4e:e3:
         92:7e:0e:bf:6d:b9:93:6c:4e:d3:20:49:51:12:58:b5:82:5b:
         a7:22:e4:0f:5e:d6:4f:28:02:a6:61:c2:68:dd:d6:55:7c:1c:
         d3:e3:91:2b:ee:36:83:8e:bc:41:14:21:d2:c6:a5:9d:09:52:
         b2:c1:99:10:56:3d:0c:10:4e:6f:a7:fb:6f:2d:57:a4:a3:be:
         56:3b:09:ca:70:28:9f:a0:7a:71:7b:12:b4:a0:5a:69:4e:a4:
         1a:e4:bb:25:da:23:db:05:5f:f7:29:98:26:cd:f1:af:a7:cb:
         a3:7d:82:fa:f4:5d:fc:1a:63:9f:db:92:3c:9d:39:ee:c7:c1:
         be:77:e0:41:23:c9:32:9d:47:40:ca:f5:fc:21:c7:b6:47:01:
         fc:0d:c7:fb:08:9f:1e:fb:8e:da:3e:69:9a:d3:fe:5b:09:70:
         bd:3d:14:f4:b9:fe:0d:6a:d1:1d:29:9c:17:34:f6:1c:61:97:
         39:75:a2:e9:59:f5:2c:c4:af:60:21:cd:8c:a8:1b:7c:53:02:
         89:bf:1d:b3:71:d7:4b:be:35:f8:07:37:63:98:f7:01:4e:44:
         e7:ac:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:11 2024 by rpki-client on console-ams.rpki-client.org