Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36332e302f32342d3234203d3e20323632353839.roa
File:                     3139312e39372e36332e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          AO6wVNcqWmIO2WKvCrpnfcJUuHwaCrK0fVAfkqSKbqE=
Subject key identifier:   87:1D:9F:51:84:78:3B:BE:08:02:A4:79:95:C4:EE:9F:F1:13:20:71
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       623F44829F02715F548D44F32B84D5AE30B80DA9
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36332e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:14:02 +0000
ROA not before:           Tue 05 Mar 2024 18:09:02 +0000
ROA not after:            Tue 04 Mar 2025 18:14:02 +0000
asID:                     262589
IP address blocks:        191.97.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3f:44:82:9f:02:71:5f:54:8d:44:f3:2b:84:d5:ae:30:b8:0d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Mar  5 18:09:02 2024 GMT
            Not After : Mar  4 18:14:02 2025 GMT
        Subject: CN=871D9F5184783BBE0802A47995C4EE9FF1132071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:24:b2:a7:67:c7:7f:9e:c0:5f:40:21:53:
                    9c:cd:15:19:b6:19:65:28:09:19:ed:e1:cb:69:e9:
                    1a:a2:06:6b:cf:57:58:fb:7b:23:8c:37:ae:08:d5:
                    40:0d:f7:64:42:dd:ca:6d:bd:48:87:f0:90:67:d3:
                    01:62:8a:91:74:49:ad:90:d1:1c:c1:a4:6f:7f:25:
                    8c:bf:7a:5d:be:42:d4:f9:4e:14:24:5f:c1:9b:1b:
                    e9:36:12:a8:1b:36:2e:1c:bb:44:6f:0e:83:18:dc:
                    f2:33:32:80:17:42:b0:7f:8e:41:23:2b:d4:6d:d9:
                    5c:f0:75:b3:a0:f1:4c:cb:db:9c:ac:97:fd:90:8c:
                    1a:6d:39:4e:22:ee:14:91:48:23:9f:12:d8:78:d6:
                    42:da:ac:5c:f9:7c:bc:0d:e7:8d:74:e2:d3:08:a8:
                    15:db:a9:0e:3d:20:8c:64:10:61:b0:b5:5d:92:11:
                    51:a7:0f:6e:3e:0b:36:d8:23:04:36:cb:63:6e:f9:
                    6d:e2:44:6a:bd:ae:5e:d3:42:ac:f7:68:1d:74:74:
                    30:96:68:f0:9b:19:60:54:00:ae:00:68:03:8f:9a:
                    79:8e:21:3d:32:db:42:32:95:f9:9f:52:ec:d2:c2:
                    0e:0a:b6:de:3d:5b:27:46:c5:e1:3c:fb:5b:c8:f4:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1D:9F:51:84:78:3B:BE:08:02:A4:79:95:C4:EE:9F:F1:13:20:71
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e36332e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:53:9a:e0:de:b1:77:03:61:9c:84:ca:f8:0e:be:d3:87:
         52:78:a2:73:a3:7c:e6:3a:09:38:9a:ed:ad:ee:50:a1:90:b2:
         d4:c5:81:40:64:1f:3d:35:e2:d8:cf:d8:e7:03:00:22:80:c8:
         9a:7e:fc:57:db:92:16:59:c2:49:d0:66:fe:15:2a:df:b9:2c:
         de:8b:60:c0:af:4a:ed:0c:ed:bb:6f:55:fb:60:a5:86:56:b8:
         2c:0f:62:21:62:1d:36:9b:ec:a3:0d:a3:9a:bc:6e:59:ed:e5:
         62:15:27:f9:cc:bd:77:91:f3:72:0a:16:2d:e8:55:3f:14:ba:
         c9:9b:b1:2c:9e:90:f1:10:5d:a6:ed:8f:9a:d4:86:18:c9:e3:
         fe:fe:c5:89:16:2e:5a:84:6b:08:bd:40:e0:23:71:0f:4c:4c:
         cd:0f:26:3c:99:73:f9:f3:1c:7b:ce:92:53:80:f1:e9:52:98:
         fa:74:e8:f1:a4:45:91:cf:f6:03:3d:cd:79:ba:7f:2d:f9:b4:
         df:2a:22:b2:b1:8d:c7:49:c0:8f:12:29:1c:63:a7:f4:4b:04:
         91:92:1c:91:07:72:bb:f5:a4:e0:b0:c5:ad:46:c7:69:77:ba:
         cf:22:e8:81:3e:71:6f:2b:77:62:9c:49:fc:e6:eb:90:41:6f:
         09:0a:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:19:52 2024 by rpki-client on console-fra.rpki-client.org