Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/3139312e39372e3132302e302f32312d3234203d3e20323634373333.roa
File:                     3139312e39372e3132302e302f32312d3234203d3e20323634373333.roa (raw, json)
Hash identifier:          77IRIxGM6ZZ361EQLQ30Un2dFDG0xbtntexb+quPHi0=
Subject key identifier:   D0:54:62:DE:23:F4:14:E6:BD:A4:DF:3E:25:3B:6C:65:65:7D:56:51
Certificate issuer:       /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial:       17ED2D79FD46CA8D79BAA561E7800E389FA1BBDD
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/3139312e39372e3132302e302f32312d3234203d3e20323634373333.roa
Signing time:             Tue 04 Feb 2025 18:09:45 +0000
ROA not before:           Tue 04 Feb 2025 18:04:45 +0000
ROA not after:            Tue 03 Feb 2026 18:09:45 +0000
asID:                     264733
IP address blocks:        191.97.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ed:2d:79:fd:46:ca:8d:79:ba:a5:61:e7:80:0e:38:9f:a1:bb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
        Validity
            Not Before: Feb  4 18:04:45 2025 GMT
            Not After : Feb  3 18:09:45 2026 GMT
        Subject: CN=D05462DE23F414E6BDA4DF3E253B6C65657D5651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:4c:2c:a2:14:75:10:e5:05:c3:fa:98:be:
                    dc:89:b1:d7:75:85:ca:2e:05:f5:a5:d9:8f:85:6a:
                    4b:bb:7e:95:62:db:ad:6f:a7:96:28:e8:28:47:ad:
                    5b:ed:82:b8:90:65:72:f7:62:0e:10:54:f7:9f:53:
                    d3:4c:83:61:2e:24:03:92:f2:15:2b:ac:7f:54:84:
                    a5:19:60:63:83:b8:87:df:57:c3:be:93:5c:8e:2c:
                    e0:73:78:d3:33:30:71:45:59:3e:10:35:8e:43:e4:
                    c7:f7:d4:70:52:d2:4a:66:13:ca:97:c3:91:f7:d1:
                    e0:0e:5c:91:df:93:53:5e:6f:6f:94:23:34:c6:3d:
                    32:ff:81:61:d4:cf:55:fa:ee:43:37:36:8f:91:b8:
                    b1:a1:16:ab:72:4e:19:83:fe:2c:e6:7b:06:b5:98:
                    ea:4e:ee:4e:6c:7f:3d:92:b4:3d:b4:fd:9b:77:fe:
                    3b:6c:49:07:11:61:84:9c:83:e6:e0:97:75:0b:8d:
                    b9:bc:90:67:73:7c:4e:ea:41:9d:8a:8e:35:f8:95:
                    80:cf:79:eb:68:22:ba:24:57:0a:d7:a3:05:3e:b9:
                    68:c1:50:cc:30:78:16:d8:3e:43:d7:0f:3b:59:ee:
                    a2:83:ff:47:7f:47:07:73:8a:ba:0a:49:d2:2a:58:
                    22:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:62:DE:23:F4:14:E6:BD:A4:DF:3E:25:3B:6C:65:65:7D:56:51
            X509v3 Authority Key Identifier:
                keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/3139312e39372e3132302e302f32312d3234203d3e20323634373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:fe:86:a6:08:e7:81:0c:e2:40:43:ca:23:51:e2:14:b5:2d:
         6f:e0:b7:b4:9c:d8:3f:7e:7e:f8:2d:e2:f2:41:78:79:05:82:
         d5:f5:21:63:f2:e1:1e:bc:59:89:d0:d3:7d:bf:18:06:55:17:
         10:94:59:eb:0c:3b:95:d4:9e:0b:a4:f6:f8:d3:69:56:bb:48:
         d9:e2:ea:c7:70:46:b4:e3:fd:a9:86:02:fe:7d:0d:d5:a4:e6:
         9a:36:92:d3:a1:ea:12:27:df:6e:79:d3:01:33:87:5b:e9:30:
         48:85:1d:63:3c:70:f6:a2:5b:d9:8a:cf:39:03:d4:24:03:af:
         88:2c:5b:f0:99:d0:2e:ac:c2:2c:04:3d:65:b0:de:87:dd:72:
         8d:e8:b5:1f:0b:16:b2:f3:09:0c:1b:14:d9:4b:af:27:77:36:
         f9:c3:da:a0:19:94:c4:56:93:9d:c2:eb:d7:65:fa:b7:2c:3e:
         19:72:44:f5:00:4a:09:89:25:aa:1d:9b:28:cf:06:90:17:5e:
         9f:67:81:69:0d:0e:f6:50:fe:93:5c:1d:de:0c:92:ce:33:f2:
         76:07:bd:a9:95:cc:24:13:1a:e3:26:b3:44:f1:a3:d3:26:5a:
         40:e1:d2:fb:9c:86:bf:95:f4:73:de:5f:78:3d:06:54:31:0a:
         99:2e:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:33 2025 by rpki-client