Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa
File:                     3139312e3130332e38382e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          TJqMd4kLjHqjkkRx4kp6HvdmXInAX2MDz0/xH6mZ/BQ=
Subject key identifier:   D9:DB:80:E8:E2:36:63:91:39:2C:59:3E:F6:76:6D:52:74:57:1F:5E
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       0A730012F61C7529963C934C7894061BEA9B421B
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:24:08 +0000
ROA not before:           Tue 04 Feb 2025 18:19:08 +0000
ROA not after:            Tue 03 Feb 2026 18:24:08 +0000
asID:                     23383
IP address blocks:        191.103.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 13:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:73:00:12:f6:1c:75:29:96:3c:93:4c:78:94:06:1b:ea:9b:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Feb  4 18:19:08 2025 GMT
            Not After : Feb  3 18:24:08 2026 GMT
        Subject: CN=D9DB80E8E2366391392C593EF6766D5274571F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:1a:36:62:f1:bc:7c:4f:2b:5f:d9:d6:7e:
                    c7:02:ed:0f:74:e7:06:78:af:9d:01:40:6d:c0:eb:
                    49:e1:80:0c:fc:24:fc:32:4a:88:75:8a:72:11:2f:
                    64:01:57:6d:a2:2c:f2:2f:4c:44:f4:66:ee:26:80:
                    1b:75:8d:6a:e0:95:76:08:7d:41:2c:de:3a:41:01:
                    49:d1:d8:65:a8:67:08:0b:b1:67:10:98:c2:e0:ff:
                    7b:2d:6a:fa:26:96:d6:95:e1:36:b7:4e:57:cd:0e:
                    4d:c3:47:96:f3:20:e4:f1:00:51:87:58:07:90:92:
                    e5:ea:48:b8:7d:c9:bc:7c:d3:59:b4:87:b4:af:10:
                    bc:a4:26:43:2a:9b:73:c2:99:80:97:46:af:4a:68:
                    2d:35:0e:bb:96:fc:01:bb:59:e3:4e:5c:49:19:f8:
                    f7:8a:3c:d3:b6:9f:30:c6:45:8c:e8:6f:3d:7f:9b:
                    60:03:6e:34:b3:35:c6:4a:1f:f5:c2:dd:4e:38:37:
                    ba:6b:c1:c3:e9:35:76:15:88:e8:fd:2f:e1:18:08:
                    6d:46:ec:81:2d:cc:70:cf:68:4c:1f:7e:6c:39:88:
                    60:72:12:49:93:f3:fe:0e:03:c5:4d:09:62:d9:59:
                    89:43:34:d4:ce:f4:ae:b6:44:e0:23:75:fc:22:15:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DB:80:E8:E2:36:63:91:39:2C:59:3E:F6:76:6D:52:74:57:1F:5E
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:c6:30:d4:bc:12:6a:0d:26:ee:48:0a:5f:90:0f:70:2a:
         24:5c:bc:08:be:03:1a:b4:8e:3f:82:67:70:64:9e:f5:33:21:
         62:4f:7e:59:f7:8f:16:30:1a:1d:c9:a4:80:b3:e1:a2:17:4c:
         fd:3e:56:92:5f:68:04:57:b3:09:ae:d5:b2:e3:4f:02:6e:6f:
         45:14:cc:a7:63:74:e6:a0:2d:ca:e8:ac:75:a7:c9:4a:96:5f:
         21:77:6e:dc:cc:29:57:93:7a:e9:33:e4:30:71:e3:08:d0:a4:
         e7:b0:6a:33:b1:8b:8b:ac:e5:d0:85:a2:89:4b:09:01:82:74:
         4e:ef:f8:e3:df:c9:d7:f5:a1:ab:c7:3c:20:06:51:76:6a:8a:
         6a:c2:60:fd:7f:b3:21:62:1a:ba:6b:02:ea:69:b0:2c:cd:99:
         4b:c4:02:cd:48:b9:74:0f:4d:da:42:98:c3:56:3b:35:f0:5b:
         35:ee:a7:09:09:3c:4a:0b:92:4a:3b:a7:01:d4:ed:60:63:8e:
         00:e2:0a:67:5c:6f:0a:01:1b:03:4a:7e:95:2b:bb:82:03:d4:
         35:df:2e:4c:81:c6:fb:28:65:22:ea:96:25:65:e3:f1:c9:d0:
         90:76:48:ec:65:52:3f:6a:4a:c1:67:f4:b5:75:55:ce:0c:60:
         72:1f:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:35 2025 by rpki-client