Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa
File:                     3139312e3130332e38372e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          obbPhKSjw5Rt4vbmx/dZXgAAcaBOwrjF0fW3BvDcxqA=
Subject key identifier:   B8:DF:80:B4:61:12:61:84:29:86:29:C1:DB:AE:62:43:D2:E0:F6:D4
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       4F9F3D354121BB3A761E1B72E28BFF1DC8D9B9BD
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:22 +0000
ROA not before:           Tue 05 Mar 2024 17:35:22 +0000
ROA not after:            Tue 04 Mar 2025 17:40:22 +0000
asID:                     23383
IP address blocks:        191.103.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9f:3d:35:41:21:bb:3a:76:1e:1b:72:e2:8b:ff:1d:c8:d9:b9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:22 2024 GMT
            Not After : Mar  4 17:40:22 2025 GMT
        Subject: CN=B8DF80B461126184298629C1DBAE6243D2E0F6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3f:da:de:cd:15:14:c3:5b:0e:d1:27:bd:0a:
                    d9:41:b0:76:ca:82:17:0c:7d:69:2f:87:78:45:cc:
                    65:2d:df:a1:d5:9f:de:9a:45:67:33:94:6b:e2:a5:
                    90:d3:4e:0a:95:53:c9:7d:64:a8:01:35:55:9a:04:
                    72:bc:5f:0f:4e:70:f3:aa:83:67:24:7b:a0:3d:87:
                    da:4c:8f:1e:7c:70:e2:42:6c:92:e9:85:e9:c3:b1:
                    cc:ed:0c:00:ec:13:d0:c2:45:66:9d:6f:7c:ea:42:
                    a1:61:c6:56:52:2a:5b:15:e1:da:28:5c:e3:a0:5e:
                    42:2b:b9:b6:63:fb:3d:74:90:86:a5:4b:c7:0a:1e:
                    53:6e:ea:1b:dd:8c:81:50:4e:d6:c6:7a:35:19:c2:
                    3e:98:1d:0a:04:0c:23:de:cf:65:fd:10:d4:26:88:
                    2f:98:1b:72:f2:c9:57:ef:e5:f1:78:cd:e9:d2:ea:
                    73:59:05:b8:27:f6:6c:8a:11:35:24:49:27:65:fe:
                    2e:03:bd:10:dc:55:bf:b9:29:5d:9c:de:4d:74:d3:
                    24:34:9f:92:dc:55:57:d1:ab:f3:0c:af:60:a1:4b:
                    be:d5:99:b9:64:92:98:24:24:55:c1:e4:f8:cf:69:
                    53:c7:b8:a9:65:8c:ed:af:13:68:fe:92:2c:c7:ad:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DF:80:B4:61:12:61:84:29:86:29:C1:DB:AE:62:43:D2:E0:F6:D4
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:5f:cd:6d:12:c3:de:45:41:00:74:88:57:49:63:de:d4:
         9d:b8:d3:4f:11:02:1f:cc:7a:48:50:b0:c9:29:d8:ee:55:06:
         b3:70:28:b9:48:88:f5:7c:c6:d3:e9:34:53:39:7c:f1:6f:63:
         00:56:59:e1:d7:5c:44:e0:bf:f4:93:bf:e8:e0:5c:20:c5:74:
         ff:1c:d0:94:45:51:62:06:37:ea:4a:54:06:c4:08:f0:da:f7:
         0d:b5:b9:72:51:43:f8:c4:35:ae:b9:63:54:5b:0a:d1:a7:9b:
         a8:30:56:95:95:9c:59:33:07:e1:b3:48:da:c0:cf:df:eb:aa:
         71:19:8f:09:ac:50:25:48:de:b3:13:a3:83:b3:12:1f:af:13:
         59:8c:be:95:da:44:f3:0b:9b:df:d4:58:6d:52:cd:2f:35:68:
         5e:47:bf:f1:df:12:29:9b:2a:0f:24:5d:e4:09:27:c8:d2:db:
         ea:45:a2:67:88:ed:c8:44:c0:94:f7:3c:8d:53:32:ef:c9:b2:
         2f:cd:53:1f:e4:e6:59:5f:ce:71:dc:e9:6b:e4:c0:1a:68:08:
         77:9b:54:43:ab:e2:95:b6:af:4a:27:19:60:5d:50:7d:4b:ac:
         0c:ed:46:73:83:3b:42:15:82:3c:e6:69:8a:2e:a8:a5:ed:0d:
         3e:f0:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:26 2024 by rpki-client on console-ams.rpki-client.org