Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
File:                     3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa (raw, json)
Hash identifier:          MzYZ8RoN1vrl4xG3UwlBIj4NvNTY+30+1PFMa24TWf4=
Subject key identifier:   BF:A3:4F:ED:C8:9D:D2:3B:82:59:CF:01:97:2C:CF:20:CE:0F:C2:F9
Certificate issuer:       /CN=29144D8070C44852403F550F31DEC53EBF48A61F
Certificate serial:       25FFA9178F9852460A1ACCBC98573E95C31F0A7D
Authority key identifier: 29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
Signing time:             Tue 05 Mar 2024 18:02:53 +0000
ROA not before:           Tue 05 Mar 2024 17:57:53 +0000
ROA not after:            Tue 04 Mar 2025 18:02:53 +0000
asID:                     27695
IP address blocks:        191.103.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ff:a9:17:8f:98:52:46:0a:1a:cc:bc:98:57:3e:95:c3:1f:0a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29144D8070C44852403F550F31DEC53EBF48A61F
        Validity
            Not Before: Mar  5 17:57:53 2024 GMT
            Not After : Mar  4 18:02:53 2025 GMT
        Subject: CN=BFA34FEDC89DD23B8259CF01972CCF20CE0FC2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:01:a1:fc:e9:5e:7f:92:07:e2:89:bb:87:
                    f0:91:ca:c7:f5:81:a4:f0:3f:f0:44:ac:30:e9:6b:
                    ee:33:15:ac:31:fc:e9:60:09:a7:9e:e4:a8:a3:d7:
                    f2:33:18:4d:03:d0:c6:f4:e3:37:c1:6b:56:41:dc:
                    9c:7e:5a:5b:a5:a8:27:0a:45:2f:3c:54:34:cc:58:
                    4f:96:cc:76:14:21:11:41:e1:87:33:7b:5d:9e:f4:
                    6b:2a:47:d5:28:f1:e9:75:ce:46:e4:58:97:35:99:
                    ca:00:7c:ed:33:d2:6b:4c:c8:07:25:ff:8d:20:42:
                    0f:f1:30:a1:e6:07:08:c2:1b:a3:d2:90:34:38:7c:
                    5c:05:ca:a7:79:0a:57:5e:7c:8e:e1:46:73:e9:76:
                    07:4e:d0:c8:df:87:bd:9c:66:37:0a:20:f8:fe:2b:
                    f3:6e:bc:60:3b:61:9f:60:f4:e6:44:da:8d:98:78:
                    ee:58:46:eb:d2:a9:6b:f6:7b:8f:f1:61:ef:59:00:
                    0f:c9:23:66:c5:9b:56:a5:20:e4:e4:e9:9b:8a:38:
                    3f:cf:c8:df:77:15:ec:a0:92:b9:0e:3d:51:e6:af:
                    f3:04:6c:92:7e:fa:0b:eb:38:1c:e0:32:82:da:5e:
                    c7:62:af:99:a3:e2:3f:ad:24:3a:34:49:8b:5b:fb:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A3:4F:ED:C8:9D:D2:3B:82:59:CF:01:97:2C:CF:20:CE:0F:C2:F9
            X509v3 Authority Key Identifier:
                keyid:29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b1:5c:35:64:d6:c5:f2:05:71:de:b0:7b:4e:20:25:bf:4d:4d:
         c4:f2:68:f8:16:37:41:c5:f1:27:6e:49:c3:ba:75:a0:35:39:
         ba:47:25:0d:32:cc:7c:c5:d0:a0:4a:67:2a:23:14:de:d6:b2:
         73:67:5c:59:7e:2c:a1:e2:2c:fb:44:a1:b2:be:b4:7e:fe:87:
         30:09:db:67:b6:9e:c9:b1:9e:77:a3:56:49:88:c6:57:6f:68:
         49:bb:47:95:77:c0:fe:37:ee:c0:b3:80:80:7b:b8:62:93:03:
         52:ae:05:a8:84:51:b5:37:43:49:15:a2:fd:70:dc:88:9d:a8:
         7d:14:06:e9:ec:8d:eb:96:b1:68:4c:8b:46:da:67:7d:70:d5:
         e4:ac:a0:b3:29:df:53:18:16:0d:1a:ac:d3:cc:d6:73:ca:64:
         4a:8e:d9:cc:94:ff:cb:87:0c:ad:c6:1a:a0:07:96:b6:e1:0e:
         6e:84:32:c5:3a:14:50:ca:0d:d7:1e:36:10:18:e6:3b:d1:0e:
         c9:7b:fa:e2:61:1d:95:cb:d9:22:74:29:41:ff:1f:a5:30:41:
         64:75:9a:2d:b5:c0:35:9c:fb:d7:d6:fb:58:65:af:81:09:b4:
         f1:a3:6d:1f:b2:72:23:aa:3c:24:51:4c:eb:31:1a:69:2c:66:
         93:cf:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:06:48 2024 by rpki-client on console-ams.rpki-client.org