Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39362e302f32322d3234203d3e20323633323133.roa
File:                     3139312e39372e39362e302f32322d3234203d3e20323633323133.roa (raw, json)
Hash identifier:          S9JXUuVpUwYHFJzcje2HDcG0lerQM9deqEA3bte8XTs=
Subject key identifier:   E3:9E:B0:29:25:53:B4:72:D1:96:B2:AB:B8:4E:60:99:2A:CE:7F:2C
Certificate issuer:       /CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
Certificate serial:       0420F788FF45CF30021DD54706B910EBE77E4E5D
Authority key identifier: 92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39362e302f32322d3234203d3e20323633323133.roa
Signing time:             Tue 04 Feb 2025 18:34:05 +0000
ROA not before:           Tue 04 Feb 2025 18:29:05 +0000
ROA not after:            Tue 03 Feb 2026 18:34:05 +0000
asID:                     263213
IP address blocks:        191.97.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:20:f7:88:ff:45:cf:30:02:1d:d5:47:06:b9:10:eb:e7:7e:4e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
        Validity
            Not Before: Feb  4 18:29:05 2025 GMT
            Not After : Feb  3 18:34:05 2026 GMT
        Subject: CN=E39EB0292553B472D196B2ABB84E60992ACE7F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:e0:d8:6f:e4:9c:f7:d9:04:8c:07:67:32:
                    e4:4d:3e:3e:42:9e:b3:da:61:d5:3a:91:b3:19:61:
                    66:e2:c2:c2:6d:d1:f7:f0:e1:00:4d:34:95:da:9d:
                    06:be:c8:ce:a3:ab:cf:88:20:a8:bc:6b:35:03:dd:
                    58:d2:40:c2:d3:77:25:4c:d8:01:df:f3:27:0e:c4:
                    ac:67:a3:2c:2f:99:cf:1c:ef:66:52:8f:68:1f:7c:
                    b0:2a:20:65:2b:53:d1:02:14:15:9d:33:56:4b:d5:
                    ee:63:e5:fb:e5:2c:6f:65:48:8c:f4:d6:a2:db:30:
                    03:ca:00:e6:c4:e6:27:d8:6c:fb:81:ff:39:21:30:
                    39:b2:b8:68:b4:7a:1e:f9:1b:f3:e1:4a:f3:fd:77:
                    c3:74:e7:7b:ce:35:f3:42:87:22:fa:71:00:3e:24:
                    98:89:b6:a7:c2:a8:9d:57:71:01:e1:bf:c6:37:a4:
                    41:2e:34:37:9e:bb:58:04:02:b5:0d:88:f6:ed:d6:
                    a9:5b:a9:5b:87:d3:86:8d:a9:76:36:b8:ea:86:4a:
                    9b:e5:60:1a:52:c2:d9:41:c1:e5:38:51:7b:e8:8c:
                    7b:25:90:41:8f:73:c5:7d:d9:24:d7:2f:ca:5a:1e:
                    94:b7:ef:09:99:96:41:2e:90:24:76:8f:7c:70:d3:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:B0:29:25:53:B4:72:D1:96:B2:AB:B8:4E:60:99:2A:CE:7F:2C
            X509v3 Authority Key Identifier:
                keyid:92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39362e302f32322d3234203d3e20323633323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:f4:33:38:95:fc:ce:0b:77:f8:77:2d:17:a8:b7:c7:21:
         e3:f8:50:20:a5:9a:0a:da:fd:95:ec:57:fa:5d:f3:10:04:e8:
         5b:3f:c7:bd:5d:dc:52:5c:7a:f6:f7:a9:a8:96:81:e2:c5:ca:
         e0:58:9e:14:20:ff:3c:80:09:49:6d:c1:99:1a:11:b3:49:5f:
         84:d6:98:7c:d8:68:8f:8a:31:34:30:64:ff:29:ef:83:30:0a:
         e0:d5:96:59:1d:85:63:75:72:91:91:30:81:3e:d1:d2:1f:67:
         1e:b9:2c:59:25:3a:6b:1b:29:31:d8:1e:7e:f0:4f:f4:34:1a:
         1b:29:16:09:da:7f:2c:9f:cb:cd:20:3b:3e:1f:7c:2a:41:12:
         f5:69:ba:60:54:41:d5:e2:18:22:54:b3:3e:40:d8:11:7c:e2:
         bc:eb:53:8b:2c:79:86:3d:f0:e9:9c:dc:97:a8:55:81:a6:f8:
         1f:38:76:b4:91:9c:95:84:d0:5c:e8:80:f4:7c:d9:73:e0:73:
         be:f7:a1:3a:d9:37:78:08:2e:b6:73:d6:42:ed:b9:dd:c0:7e:
         26:08:d0:45:f8:37:6f:12:1c:19:9f:77:b2:8e:5e:39:70:cb:
         4c:cc:32:a6:6b:42:d1:9d:b1:c3:16:a2:de:89:9d:4c:9c:76:
         6b:66:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:37 2025 by rpki-client