Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e39322e302f32332d3234203d3e203532323632.roa
File:                     3139312e3130332e39322e302f32332d3234203d3e203532323632.roa (raw, json)
Hash identifier:          dJXpJsvsWT9MA8MD+xeNR1dinITKSDPFqSuRXjn0wxQ=
Subject key identifier:   93:B1:9B:57:08:1A:22:A1:F0:CD:97:0D:45:F5:26:E4:1C:8D:4A:DC
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       1626405EE9380ACA76539C69B6C9AC1420B93513
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e39322e302f32332d3234203d3e203532323632.roa
Signing time:             Tue 05 Mar 2024 17:40:24 +0000
ROA not before:           Tue 05 Mar 2024 17:35:24 +0000
ROA not after:            Tue 04 Mar 2025 17:40:24 +0000
asID:                     52262
IP address blocks:        191.103.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:26:40:5e:e9:38:0a:ca:76:53:9c:69:b6:c9:ac:14:20:b9:35:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:24 2024 GMT
            Not After : Mar  4 17:40:24 2025 GMT
        Subject: CN=93B19B57081A22A1F0CD970D45F526E41C8D4ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2e:05:0c:00:d6:b5:9d:f5:a0:58:31:2a:9d:
                    7d:04:6d:85:be:1c:46:dd:50:27:00:47:5a:43:f6:
                    e8:e1:8c:ba:0e:54:35:a1:05:b3:45:92:1f:2d:de:
                    fd:a7:7c:85:97:91:97:62:59:9a:5a:2e:99:ba:2b:
                    1d:a1:3d:cc:74:46:d5:4e:32:1a:e7:81:92:dc:c7:
                    97:df:3a:b8:61:49:0d:6b:c9:1d:56:22:f3:48:43:
                    73:23:43:63:70:14:ee:dc:47:1a:c5:a4:12:38:dc:
                    69:5d:d0:8c:b8:d6:27:2f:82:a3:01:47:75:22:e1:
                    27:07:a6:85:5e:5b:cb:c4:fa:64:2c:5a:ba:24:6b:
                    77:04:33:c0:8e:b0:17:ae:31:23:f8:6b:19:af:aa:
                    ca:45:0a:e3:15:44:92:ff:37:86:fb:d1:3c:20:7c:
                    28:83:a6:c5:fb:29:60:21:c1:d2:82:67:9d:46:a0:
                    07:a6:22:8e:e7:8f:8d:e0:36:02:1a:be:62:27:c2:
                    c7:7c:17:c2:e2:2c:c5:d9:29:fe:47:40:64:de:4d:
                    cc:5c:b6:76:be:45:d2:f9:d1:74:95:cc:c9:10:c6:
                    03:24:b6:22:c1:4a:7f:45:55:2f:24:98:87:80:90:
                    b0:cd:ef:cb:ff:fd:87:0e:d3:98:1f:b5:f5:13:83:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B1:9B:57:08:1A:22:A1:F0:CD:97:0D:45:F5:26:E4:1C:8D:4A:DC
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e39322e302f32332d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:df:16:d8:7c:80:e1:b8:06:9b:56:83:70:a0:a5:0e:a7:
         da:97:52:bb:52:0d:f7:d3:60:4c:36:7b:cd:e3:47:2a:5c:da:
         3b:30:97:22:62:0f:36:f0:1b:fe:df:91:b5:fc:e0:19:5a:92:
         a3:75:69:47:83:dc:ea:22:d7:1c:0d:ba:48:40:1d:f0:8c:18:
         b7:1f:af:2d:af:9d:54:6c:a1:e4:d3:b8:00:99:20:34:97:d2:
         6b:67:62:2e:cc:27:d8:fd:3b:51:78:d5:55:d2:bf:2e:11:95:
         a4:54:32:4c:2f:41:a4:eb:91:ef:35:b8:78:c0:d5:31:43:78:
         e0:4d:23:7d:2b:49:03:44:d3:14:22:78:0f:17:bb:0f:a4:b9:
         63:47:90:c6:d4:e5:2e:08:92:00:28:47:20:1d:59:54:78:75:
         00:23:95:97:7a:4a:a5:55:a1:7f:75:c6:3f:62:9d:06:3a:c5:
         8a:f1:9c:30:09:27:73:3e:8a:57:4c:eb:13:ac:a1:63:fb:bd:
         53:32:dd:89:f4:53:cc:48:f3:41:a1:b0:36:5f:26:ba:b5:74:
         28:e0:9b:64:4f:96:f0:26:f9:dd:eb:62:f7:4f:0d:6c:43:01:
         76:fe:fa:4d:d3:f7:37:6b:c8:54:fc:7c:b8:26:0d:97:a1:36:
         a9:c7:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org