Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36332e302f32342d3234203d3e20323632353839.roa
File:                     3139312e39372e36332e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          E8fujvC9Opj4eAV6kos474fapl5mjpHcdGfK4FcKKIE=
Subject key identifier:   30:4F:73:5D:8E:F0:C3:98:77:C5:22:69:82:14:E4:8F:29:F3:10:8E
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       6CF1059939751571F2D13B8D2299F17C2BA25931
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36332e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:31:35 +0000
ROA not before:           Tue 04 Feb 2025 18:26:35 +0000
ROA not after:            Tue 03 Feb 2026 18:31:35 +0000
asID:                     262589
IP address blocks:        191.97.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f1:05:99:39:75:15:71:f2:d1:3b:8d:22:99:f1:7c:2b:a2:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Feb  4 18:26:35 2025 GMT
            Not After : Feb  3 18:31:35 2026 GMT
        Subject: CN=304F735D8EF0C39877C522698214E48F29F3108E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:43:78:a0:5e:9e:77:60:8f:36:60:f7:b7:
                    3a:d1:15:b3:cb:c0:02:b6:55:a1:fb:59:51:ae:1f:
                    99:12:f9:07:90:66:e5:69:7e:e4:40:e1:24:9e:5e:
                    45:03:e5:ef:d9:a9:d6:ce:ae:c6:d0:aa:d5:d9:a0:
                    81:a8:24:95:e9:6b:87:4a:e2:ad:4d:c8:6a:13:54:
                    ca:9d:85:7f:1a:6d:48:6e:a0:2e:bc:b5:27:46:0a:
                    10:d8:7f:48:bb:c3:52:65:4b:56:74:73:03:29:f4:
                    ae:18:ea:ed:c5:2a:23:83:ac:2a:60:0e:99:d9:44:
                    37:8f:e4:f5:e3:37:b8:63:a0:a1:71:b5:b6:88:47:
                    60:d2:e3:a7:50:77:55:71:56:8e:ce:db:64:b5:5f:
                    9d:47:51:18:8f:b4:cc:31:4f:8d:ae:51:bf:77:6b:
                    3c:76:34:50:3b:a4:9a:d2:ae:40:e2:6e:5f:5b:2e:
                    a4:19:96:17:a2:87:74:4b:cb:77:68:b8:48:25:23:
                    31:0d:15:de:c0:bf:8c:da:f6:af:bf:61:eb:99:18:
                    8d:27:38:5e:80:69:a3:0a:81:9b:91:b1:50:08:c6:
                    44:8f:15:ef:fd:06:20:ee:52:24:44:31:2d:73:4d:
                    c8:ab:d2:a8:0a:54:71:f4:24:ba:e8:da:ab:66:bf:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:73:5D:8E:F0:C3:98:77:C5:22:69:82:14:E4:8F:29:F3:10:8E
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36332e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:df:22:85:8c:33:31:fa:63:9d:4b:58:1e:22:18:26:0b:
         63:43:f7:3c:e8:45:eb:b5:aa:cd:b2:05:5c:80:19:57:00:61:
         fe:8f:99:2f:f7:90:27:db:3f:5b:95:bd:fc:1d:01:56:a1:46:
         cd:94:b9:87:9f:37:b8:4c:9f:41:ef:d6:84:ba:ae:d3:60:85:
         0e:8e:4f:e6:19:17:3d:42:79:6b:fb:68:3e:3b:d5:00:bc:bb:
         a0:65:39:d5:1c:0d:db:c0:7d:ff:c0:88:cb:2c:61:5a:06:30:
         bc:32:4c:bb:07:c5:1e:c2:8f:37:51:1c:1f:7b:78:f9:10:cb:
         ed:50:82:5b:80:1e:92:39:4a:21:2f:23:b7:85:5d:35:da:74:
         f9:c3:d8:e8:62:e3:f5:ed:76:9f:cb:7d:1a:87:b2:3f:b1:d6:
         14:1c:6b:a1:d3:c7:c2:8f:58:0f:ba:7e:ad:43:24:65:13:b8:
         7d:7a:c9:b5:0c:fb:f1:ef:a9:a6:db:bf:2f:a8:b0:68:e9:8d:
         39:04:98:b8:33:92:8e:fa:7b:2e:b5:30:db:55:b7:66:67:8e:
         fc:bb:56:06:7b:4b:f8:19:3c:c0:dc:1a:01:aa:a1:99:19:c8:
         ef:aa:3a:bf:ff:aa:e9:03:65:d2:a7:fc:05:17:4c:39:d4:25:
         4f:9c:99:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:29 2025 by rpki-client