Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa
File:                     3139312e3130332e38372e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          QXrPMQ77J1wdaxg78aVNq5t6mDTacSnk1umDCBbBR+g=
Subject key identifier:   7C:F0:00:E3:E4:CB:B6:04:E3:C5:43:B4:79:BC:A6:99:88:FF:A8:0E
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       6B5A3B2A04AE3BDDDB25764EF08CA2D39EE7847D
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:10 +0000
ROA not before:           Tue 04 Feb 2025 18:19:10 +0000
ROA not after:            Tue 03 Feb 2026 18:24:10 +0000
asID:                     23383
IP address blocks:        191.103.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5a:3b:2a:04:ae:3b:dd:db:25:76:4e:f0:8c:a2:d3:9e:e7:84:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:10 2025 GMT
            Not After : Feb  3 18:24:10 2026 GMT
        Subject: CN=7CF000E3E4CBB604E3C543B479BCA69988FFA80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:2d:af:cd:04:45:87:3e:ec:b6:35:bf:62:
                    28:7d:b6:38:dd:27:67:1c:cd:07:c9:9b:1e:26:15:
                    e1:02:d9:ad:0f:e0:d0:ce:d1:6e:58:80:1a:d0:7f:
                    6e:bf:a1:ff:32:4d:27:98:55:8f:ab:b1:74:e3:7a:
                    81:06:07:42:7d:38:63:8b:29:26:95:57:38:b2:6e:
                    e9:85:0e:10:54:b7:e3:4f:f4:7f:0d:73:c0:c0:73:
                    53:d3:a4:aa:cd:02:c0:d2:8e:42:29:10:ae:30:0b:
                    4f:8b:30:e9:73:84:94:3c:1c:ff:ba:25:cd:77:e2:
                    0c:b7:71:09:0d:87:52:3f:e9:e3:95:32:05:c6:78:
                    84:01:3e:0a:a1:82:10:48:9e:8b:ef:f7:63:5c:a1:
                    0b:f1:b8:56:87:86:78:ab:9a:d1:4b:e0:02:da:59:
                    a7:ab:de:f1:c2:fd:eb:29:59:59:21:b4:3f:a2:e1:
                    fa:28:7f:f5:88:4e:cf:0d:c5:28:1a:5b:20:26:67:
                    c8:26:6b:5a:05:c7:db:65:47:4f:db:45:c8:76:e5:
                    1a:9b:da:a9:d9:b4:65:5a:34:9d:cc:c2:25:54:93:
                    78:31:48:8e:80:30:46:f0:e2:b2:12:0f:75:4c:36:
                    51:d9:36:62:e0:36:43:6b:13:15:12:33:e9:ae:52:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:00:E3:E4:CB:B6:04:E3:C5:43:B4:79:BC:A6:99:88:FF:A8:0E
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:3e:68:29:d9:0e:19:0d:9b:98:52:bb:bc:d1:1f:bc:fa:
         10:4f:c1:ad:5d:39:e7:25:dd:e0:56:11:c8:dd:8b:6b:8f:39:
         ac:be:92:4f:a7:f2:0f:5b:6c:0f:3f:33:b6:32:cd:04:aa:76:
         cf:c3:ad:e8:16:eb:44:28:b1:48:31:a7:1c:b7:8c:a0:da:3e:
         0c:8e:49:5c:a6:c4:cb:af:48:47:50:7a:4b:22:e7:1d:64:4a:
         ec:7b:ba:7f:58:ab:69:a4:f1:f7:be:8e:f6:b4:00:42:72:4e:
         d3:43:70:4a:52:5e:93:79:fd:18:42:c7:e1:fc:d7:ae:db:07:
         47:0d:db:72:e9:20:ef:13:ec:8a:45:e8:0a:63:91:10:87:1a:
         e4:2d:9c:ab:73:67:6c:67:a9:63:63:f7:04:38:70:cf:06:88:
         66:1a:92:2c:4a:f1:72:d8:15:48:63:f0:60:cc:bb:81:f0:82:
         7e:b6:ec:ee:49:06:66:1d:14:a0:a9:fb:8d:6c:9d:62:a0:ec:
         67:f7:dd:95:42:cb:68:c7:6d:bf:14:f1:3b:d3:6b:ba:b1:aa:
         a8:1b:13:06:11:ac:a4:6d:2e:87:63:16:de:84:4a:0c:a3:4d:
         1b:5f:9b:78:7e:6e:e6:7a:fe:74:d2:71:94:8c:63:61:b0:cd:
         0e:fa:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:45 2025 by rpki-client