Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3139312e39372e32342e302f32342d3234203d3e203131303134.roa
File:                     3139312e39372e32342e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          WdHt+IoktO7rkLdvp6CJpXzdSmHJ9/ULwi/dVYhs5VU=
Subject key identifier:   F4:72:4D:37:EF:2F:12:4B:AC:7F:8C:7F:CA:A7:D0:69:64:5E:28:49
Certificate issuer:       /CN=53B392C71D73A953C0321875651DEFD6AC96AE92
Certificate serial:       5CB444FB5EFD9B4DE7C3665FB09563EA8C6D0C3C
Authority key identifier: 53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3139312e39372e32342e302f32342d3234203d3e203131303134.roa
Signing time:             Thu 05 Dec 2024 16:35:00 +0000
ROA not before:           Thu 05 Dec 2024 16:30:00 +0000
ROA not after:            Thu 04 Dec 2025 16:35:00 +0000
asID:                     11014
IP address blocks:        191.97.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Dec 2024 14:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b4:44:fb:5e:fd:9b:4d:e7:c3:66:5f:b0:95:63:ea:8c:6d:0c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B392C71D73A953C0321875651DEFD6AC96AE92
        Validity
            Not Before: Dec  5 16:30:00 2024 GMT
            Not After : Dec  4 16:35:00 2025 GMT
        Subject: CN=F4724D37EF2F124BAC7F8C7FCAA7D069645E2849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:e6:8b:13:71:a4:56:de:ec:d1:54:6f:05:
                    c7:92:e0:46:60:fe:5e:ee:dd:14:c6:8d:d8:c3:e9:
                    e3:3b:a8:09:aa:89:39:a5:71:87:36:eb:05:32:44:
                    80:ac:5d:1a:02:31:0a:67:8e:85:43:78:bb:10:93:
                    ec:a0:04:e2:bf:34:01:7d:98:51:4a:13:86:85:f6:
                    3f:38:b9:b9:be:01:fe:47:d9:28:40:c8:3c:c4:21:
                    80:83:9c:e4:fd:2b:b4:53:cf:80:42:99:30:28:cb:
                    fd:f6:c6:aa:61:44:64:d9:0b:15:20:27:94:80:e8:
                    51:15:bc:e3:fd:1e:62:e9:6d:d9:8b:63:4f:92:e2:
                    80:c7:4a:5b:01:b1:69:25:63:4c:b9:1a:fc:db:cf:
                    39:73:bc:2d:b0:d0:63:1c:af:4e:a8:5d:e2:09:28:
                    43:c7:09:20:36:51:25:67:74:f9:90:31:78:89:0c:
                    ea:e7:95:14:26:89:75:15:c6:06:1a:c7:c0:97:a4:
                    73:aa:1c:b1:dc:d6:91:cb:cc:aa:10:2e:84:28:af:
                    97:d6:53:cc:de:26:8c:51:b1:16:9b:c7:cb:9e:00:
                    34:09:6e:42:6b:d6:2d:f9:29:cc:2e:f0:72:2f:21:
                    e6:31:3a:48:e5:57:25:7b:74:8a:20:35:26:b3:9c:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:72:4D:37:EF:2F:12:4B:AC:7F:8C:7F:CA:A7:D0:69:64:5E:28:49
            X509v3 Authority Key Identifier:
                keyid:53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3139312e39372e32342e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:7e:d3:5b:7b:52:c5:b1:ee:27:36:05:be:1c:ad:00:2d:
         90:34:6f:9c:11:4c:56:d0:10:fc:15:43:b8:11:99:29:cd:ac:
         98:f4:77:64:0c:74:f9:ec:6f:59:48:f9:87:88:eb:15:40:1e:
         41:1d:26:e4:18:76:76:24:83:47:64:a1:44:3f:53:21:31:22:
         63:9c:39:ce:5e:8f:63:00:66:a4:f2:47:55:69:bb:13:6c:b9:
         9c:b4:49:50:e0:ec:58:9e:59:c4:54:7c:2b:b2:1f:1e:ee:8b:
         e4:35:85:88:61:b9:aa:d1:2f:35:12:97:d3:ed:8f:d2:03:5c:
         24:05:1e:0c:cc:62:5d:ae:61:ef:f0:46:b4:f7:db:23:0a:a5:
         27:fd:9e:82:73:49:b1:a7:0a:53:df:d5:a1:7b:2c:12:78:5a:
         bf:c4:bb:05:1f:c9:ea:b7:02:44:da:6a:65:1e:49:ef:79:a2:
         42:ef:ba:b8:0b:b2:11:59:09:5f:6a:c2:2f:b3:10:3a:74:ac:
         27:a9:c5:a8:da:ca:19:d0:f9:e9:88:ec:d2:7a:77:8d:c8:41:
         7d:38:77:c1:d4:70:99:84:77:f3:91:92:97:1b:b5:67:80:63:
         e3:df:ae:09:fa:e9:9f:54:38:72:47:f0:16:b7:db:33:f9:dc:
         5f:cd:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:17:35 2024 by rpki-client on console-fra.rpki-client.org