Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32302d3234203d3e203238303332.roa
File:                     3139312e39372e34382e302f32302d3234203d3e203238303332.roa (raw, json)
Hash identifier:          HeGMGkUYdOmB0rEUEXl1XOkM7x6eHF/K12FP6Si7toI=
Subject key identifier:   80:E9:B5:CE:B9:79:06:E3:79:6C:C7:95:0A:02:E9:A2:B8:C7:C3:6E
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       2E3DD743F8E434AB52EF40226565506173451C2C
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32302d3234203d3e203238303332.roa
Signing time:             Tue 05 Mar 2024 18:14:01 +0000
ROA not before:           Tue 05 Mar 2024 18:09:01 +0000
ROA not after:            Tue 04 Mar 2025 18:14:01 +0000
asID:                     28032
IP address blocks:        191.97.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3d:d7:43:f8:e4:34:ab:52:ef:40:22:65:65:50:61:73:45:1c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Mar  5 18:09:01 2024 GMT
            Not After : Mar  4 18:14:01 2025 GMT
        Subject: CN=80E9B5CEB97906E3796CC7950A02E9A2B8C7C36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:60:95:23:91:09:4b:15:1c:b7:d5:6d:04:
                    74:99:78:5b:21:e5:d4:65:e4:19:fb:be:04:c0:2e:
                    cf:02:91:40:59:cd:42:7b:35:00:0d:07:3c:9c:f2:
                    66:42:77:b1:ba:5b:5a:24:33:da:89:46:ae:f0:05:
                    17:f1:97:3f:12:42:fa:d5:f1:9c:ba:4b:37:ea:97:
                    d6:94:8b:2f:b1:59:6b:7f:2f:ad:16:2a:46:46:70:
                    46:57:3b:c6:46:41:47:df:c8:05:50:9e:62:fa:b6:
                    a0:eb:9d:1a:61:f0:c2:75:47:9f:c4:85:bf:b3:2e:
                    1a:c9:6a:ed:c9:9b:3f:0e:f3:26:93:f5:84:22:5d:
                    ae:b4:46:ca:0e:39:72:fd:ef:2f:bf:1e:46:5e:e2:
                    a1:2d:37:d5:40:41:da:38:63:09:0c:24:20:6b:e2:
                    49:91:c4:14:e1:82:0b:2f:3c:b1:07:b0:26:c2:d1:
                    fa:5b:00:ce:f1:e6:60:1a:95:b3:5d:c0:a6:ef:52:
                    c6:f7:cd:31:45:c1:35:27:2b:3a:71:e0:a4:e6:87:
                    43:e0:72:db:13:26:59:b1:29:4c:c8:5d:34:c1:80:
                    48:89:29:10:f8:c9:6f:05:89:b1:cb:46:e6:2f:d9:
                    95:02:3b:58:47:a2:59:03:d3:78:bc:93:36:27:7f:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:B5:CE:B9:79:06:E3:79:6C:C7:95:0A:02:E9:A2:B8:C7:C3:6E
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32302d3234203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:a1:8b:0a:97:64:b2:7f:5e:d3:76:5e:80:07:ea:41:db:
         72:a8:9a:ad:b1:ce:0c:f0:0c:f4:79:c4:d3:b8:ce:96:0a:82:
         8e:c3:00:2f:ae:a4:cd:0a:4c:3b:dd:8f:c6:57:65:8a:72:d4:
         03:1e:84:4d:6b:e3:ab:11:c7:22:c6:89:56:de:8f:16:aa:cb:
         b7:ef:d5:13:d7:1e:f5:cc:45:0a:26:3f:b6:0a:a7:df:7a:2f:
         b3:f8:79:69:58:63:10:43:ef:cc:ed:8c:a9:16:d8:ce:d6:66:
         b0:fa:68:d8:5c:98:e0:ec:43:27:d8:3d:23:95:05:aa:59:e9:
         af:3b:49:75:51:21:45:6f:b9:cf:4c:74:26:9c:4c:11:ca:0f:
         02:6d:d1:f3:24:33:79:21:45:53:d1:5b:fb:8b:cc:25:d6:b1:
         6d:45:10:9e:ec:72:50:fc:d6:90:76:bc:ec:ac:26:f6:21:49:
         30:35:a2:44:0e:19:4c:b0:93:38:f2:5f:cf:ee:57:ad:66:b8:
         83:d5:0f:38:4d:cb:90:f4:35:9c:9e:09:77:0f:fb:e3:83:2e:
         ac:5b:40:df:83:cf:4f:5a:6a:43:7a:86:47:50:8f:3c:59:b2:
         ca:47:d2:6e:5b:48:52:a4:6c:c8:4f:32:1b:f1:c4:c3:81:f4:
         5b:64:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:05 2024 by rpki-client on console-ams.rpki-client.org