Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3234203d3e20323633383039.roa
File:                     3139312e39372e39372e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          U8qmSG85sHOVJVb4YZJ2qeF3TpFTZFEb3fogVHumymk=
Subject key identifier:   9C:08:4D:20:F1:D3:14:CD:60:D6:CD:10:09:0A:E3:29:98:EA:C0:58
Certificate issuer:       /CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
Certificate serial:       1BEDBFD6ED8D19DA0B40B4295858715F084017DB
Authority key identifier: 92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 05 Mar 2024 17:46:15 +0000
ROA not before:           Tue 05 Mar 2024 17:41:15 +0000
ROA not after:            Tue 04 Mar 2025 17:46:15 +0000
asID:                     263809
IP address blocks:        191.97.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ed:bf:d6:ed:8d:19:da:0b:40:b4:29:58:58:71:5f:08:40:17:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
        Validity
            Not Before: Mar  5 17:41:15 2024 GMT
            Not After : Mar  4 17:46:15 2025 GMT
        Subject: CN=9C084D20F1D314CD60D6CD10090AE32998EAC058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:e5:a2:f1:86:3e:a9:b0:1c:af:05:5e:7a:
                    c5:83:81:95:12:9f:4c:4d:3e:8f:0e:ee:6e:97:15:
                    ad:c9:92:61:aa:03:dd:5d:03:da:f5:45:ac:1a:e3:
                    fa:46:38:b7:70:70:92:19:87:75:d8:56:50:22:c9:
                    6b:34:6f:ff:2d:4b:6f:b3:07:60:c1:1d:64:33:5d:
                    62:b3:70:d6:8a:a0:d1:83:93:c8:8c:87:58:6f:bc:
                    7e:62:f3:59:64:64:01:90:7b:c6:42:64:ae:e6:7d:
                    2e:42:84:7f:99:f8:f1:d0:3a:43:c0:23:31:3d:d7:
                    4e:7d:78:3f:e4:9f:fc:e9:3e:1b:cc:48:22:47:ba:
                    fb:99:8e:c9:07:3f:88:e1:2a:9e:ac:92:e0:61:c0:
                    46:73:16:31:e3:ca:e9:e6:2d:04:cb:f7:01:2c:43:
                    2b:1a:53:b2:a4:8a:b7:b1:3e:24:05:2a:d7:6b:f6:
                    b2:30:16:80:98:c7:11:07:08:8a:96:e6:b7:14:ae:
                    3c:4f:bf:6b:5d:07:80:a3:f7:9b:cc:ab:d2:8f:8a:
                    74:3f:09:e6:f5:96:7a:d2:e4:a8:a4:b5:5f:fb:e1:
                    70:50:bc:8c:0b:21:5d:48:4c:de:84:84:32:a8:d8:
                    b6:ab:af:a1:20:37:cc:bd:bd:5e:34:dd:d1:05:72:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:08:4D:20:F1:D3:14:CD:60:D6:CD:10:09:0A:E3:29:98:EA:C0:58
            X509v3 Authority Key Identifier:
                keyid:92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:19:e0:cd:15:62:b5:bd:3c:7c:31:0d:c8:b3:20:59:33:7f:
         7a:82:d3:52:f0:a5:b9:4a:ab:9b:cf:54:c7:12:95:04:8e:d0:
         e0:f1:53:1b:bd:84:da:84:e3:0c:73:5b:ae:c0:b2:a6:ae:e2:
         55:d4:85:9a:ef:5f:24:ce:28:8b:cf:37:43:a5:c4:5d:71:15:
         4a:c2:82:74:47:2a:ad:94:e8:2c:db:32:76:ca:59:2e:86:e7:
         9b:a4:a6:a1:aa:ec:a2:bf:73:bf:a0:62:ee:d9:82:bd:24:6e:
         af:aa:0e:3a:a4:cb:3e:7c:73:1a:e8:b9:21:c1:2b:49:32:58:
         ae:66:b2:8c:6c:09:a0:13:c0:d5:db:ab:12:25:80:b5:6f:0d:
         f6:6f:6b:4c:24:72:57:06:98:15:2d:02:a2:40:ef:44:5c:4d:
         a9:46:a6:27:4a:a0:51:0c:b7:3b:14:b0:81:d2:64:5d:e4:ce:
         71:57:2d:35:1e:6f:a6:ee:bc:b1:8e:0a:ad:c9:80:0e:a0:32:
         e0:51:bb:84:b4:e3:d2:fb:35:39:78:4d:f3:50:73:c9:f5:b6:
         8f:e2:5c:28:38:44:1e:c5:34:e1:3e:44:4f:58:52:c0:db:e3:
         69:f3:7b:3b:e9:53:72:e1:df:45:87:d1:48:2f:72:ba:ce:5e:
         59:8b:5b:1a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUG+2/1u2NGdoLQLQpWFhxXwhAF9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDQkEwMjg4NDMwMjUxREQ0RkVEODlBODc5QjBDNTdB
NzVBRjhDMjAeFw0yNDAzMDUxNzQxMTVaFw0yNTAzMDQxNzQ2MTVaMDMxMTAvBgNV
BAMTKDlDMDg0RDIwRjFEMzE0Q0Q2MEQ2Q0QxMDA5MEFFMzI5OThFQUMwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaS+Wi8YY+qbAcrwVeesWDgZUS
n0xNPo8O7m6XFa3JkmGqA91dA9r1Rawa4/pGOLdwcJIZh3XYVlAiyWs0b/8tS2+z
B2DBHWQzXWKzcNaKoNGDk8iMh1hvvH5i81lkZAGQe8ZCZK7mfS5ChH+Z+PHQOkPA
IzE91059eD/kn/zpPhvMSCJHuvuZjskHP4jhKp6skuBhwEZzFjHjyunmLQTL9wEs
QysaU7KkirexPiQFKtdr9rIwFoCYxxEHCIqW5rcUrjxPv2tdB4Cj95vMq9KPinQ/
Ceb1lnrS5KiktV/74XBQvIwLIV1ITN6EhDKo2Larr6EgN8y9vV403dEFctP3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnAhNIPHTFM1g1s0QCQrjKZjqwFgwHwYDVR0j
BBgwFoAUksugKIQwJR3U/tiah5sMV6da+MIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjlCQjUwRTgzOEI1ODBBMTlDRjQ0Rjc0QTE1OTgyRjVE
MkIzRTQ1RTkwQkFFRjI2Q0JERDlCNkQwOTA2MEJBLzAvOTJDQkEwMjg4NDMwMjUx
REQ0RkVEODlBODc5QjBDNTdBNzVBRjhDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkNCQTAyODg0MzAyNTFERDRG
RUQ4OUE4NzlCMEM1N0E3NUFGOEMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDI5QkI1MEU4MzhCNTgwQTE5Q0Y0NEY3NEExNTk4MkY1RDJCM0U0NUU5
MEJBRUYyNkNCREQ5QjZEMDkwNjBCQS8wLzMxMzkzMTJlMzkzNzJlMzkzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM4MzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9hYTAN
BgkqhkiG9w0BAQsFAAOCAQEAQhngzRVitb08fDENyLMgWTN/eoLTUvCluUqrm89U
xxKVBI7Q4PFTG72E2oTjDHNbrsCypq7iVdSFmu9fJM4oi883Q6XEXXEVSsKCdEcq
rZToLNsydspZLobnm6Smoarsor9zv6Bi7tmCvSRur6oOOqTLPnxzGui5IcErSTJY
rmayjGwJoBPA1durEiWAtW8N9m9rTCRyVwaYFS0CokDvRFxNqUamJ0qgUQy3OxSw
gdJkXeTOcVctNR5vpu68sY4KrcmADqAy4FG7hLTj0vs1OXhN81BzyfW2j+JcKDhE
HsU04T5ET1hSwNvjafN7O+lTcuHfRYfRSC9yus5eWYtbGg==
-----END CERTIFICATE-----
Generated at Thu May 2 20:02:25 2024 by rpki-client on console-ams.rpki-client.org