Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa
File:                     3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (raw, json)
Hash identifier:          frosHF4IVA9x8DBAO2E7cfeohpiJevtdfOPq1yLBIa8=
Subject key identifier:   5E:7D:FB:EF:06:53:30:1D:89:47:20:97:CC:56:A1:E5:BD:B8:38:64
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       4BBE5C6F3BEFC7095B24504E5C75042EC5DEE018
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa
Signing time:             Fri 20 Sep 2024 16:00:00 +0000
ROA not before:           Fri 20 Sep 2024 15:55:00 +0000
ROA not after:            Fri 19 Sep 2025 16:00:00 +0000
asID:                     272865
IP address blocks:        191.97.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:5c:6f:3b:ef:c7:09:5b:24:50:4e:5c:75:04:2e:c5:de:e0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Sep 20 15:55:00 2024 GMT
            Not After : Sep 19 16:00:00 2025 GMT
        Subject: CN=5E7DFBEF0653301D89472097CC56A1E5BDB83864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:73:49:cd:d1:48:cc:2a:1a:a4:d1:89:a4:
                    f8:69:74:f0:17:19:3e:d1:ad:e0:3c:e9:5e:91:45:
                    0f:24:35:0f:92:f3:25:b5:28:35:ef:2b:cc:9b:f1:
                    a3:a4:c8:8a:e8:26:28:44:45:99:a9:46:c2:11:d9:
                    53:39:19:b7:bd:50:3f:56:35:d0:5b:83:3c:66:44:
                    a8:d2:f9:44:40:f9:f3:11:c4:85:e6:98:37:20:1b:
                    38:53:19:2a:f8:2d:fc:7b:e1:ce:46:a7:d3:2d:a7:
                    8c:6c:4b:10:31:5b:dc:01:76:ac:56:a4:e2:c5:bb:
                    8c:03:da:32:b8:92:03:d1:ed:06:74:e7:58:8f:03:
                    51:58:c8:71:25:57:dc:61:cd:c2:f0:c5:9c:27:1f:
                    85:09:04:19:6b:83:36:fe:09:1c:43:69:28:d2:e1:
                    60:2e:74:b6:63:9e:8e:88:55:bc:71:e2:23:83:bb:
                    4b:4d:75:6f:21:39:fc:89:ee:93:91:33:ba:e9:4f:
                    d3:6b:7c:7e:e1:c2:14:ee:20:2e:19:c1:3b:36:cb:
                    15:48:c7:39:92:4a:4a:e1:58:b4:b6:54:e7:85:0b:
                    af:a6:f1:26:d9:e5:69:08:00:7a:50:a7:39:91:8f:
                    f9:36:ec:bf:91:c7:34:aa:28:dc:77:c2:d2:74:fe:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7D:FB:EF:06:53:30:1D:89:47:20:97:CC:56:A1:E5:BD:B8:38:64
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3139312e39372e31372e302f32342d3234203d3e20323732383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:2d:5e:0a:29:82:fa:11:04:6c:87:bd:02:a1:83:2e:c0:
         0e:71:dd:2a:f3:5a:10:d4:f0:8f:dd:18:f0:2a:f9:49:a1:ef:
         b9:84:a0:d1:35:97:7a:4c:43:8b:ae:eb:27:d0:a4:66:c5:b2:
         ac:bc:c3:16:3d:8c:3e:1d:93:0d:e4:e6:61:85:c5:d7:63:38:
         e4:d3:1a:0d:17:4f:2c:1e:81:a9:b8:d4:e6:22:9f:8e:b0:84:
         53:1e:7c:85:ff:0c:ff:af:d5:9a:ab:4f:52:ac:34:7a:8a:ac:
         ea:3a:72:2a:08:7b:6d:fd:7a:85:5a:c2:ea:d2:bd:8e:e4:02:
         dc:bc:50:a0:55:0c:66:6f:d5:1c:5e:79:5b:27:4f:cf:e7:54:
         26:5b:09:19:ff:0a:05:53:32:64:93:75:37:3e:b9:97:cb:f5:
         d6:af:04:1a:d3:ed:fa:17:a3:07:9d:44:c8:a4:49:83:7c:8a:
         f6:3b:26:60:ad:e4:6b:75:78:6e:34:c4:55:3d:83:d3:4b:ed:
         20:4c:81:d6:92:6d:4a:c4:c7:3a:48:c3:8d:3f:70:7a:1f:79:
         91:30:2f:02:17:35:0b:4a:f7:fd:c0:70:4b:5c:51:f5:8f:2f:
         c5:e7:c5:5a:85:0f:82:29:3b:1d:c0:d9:2e:26:b5:95:89:7c:
         b1:cc:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:16 2024 by rpki-client on console-fra.rpki-client.org