Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3232352e302f32342d3234203d3e20323730303537.roa
File:                     3139312e3130322e3232352e302f32342d3234203d3e20323730303537.roa (raw, json)
Hash identifier:          OfKpXBSnZ5/4ePLozi1pg6RUC4pCOVqoNDua+hitY2A=
Subject key identifier:   C7:C2:05:D0:C6:F4:83:9A:9C:E8:DE:4C:92:10:3F:A9:10:F9:40:E8
Certificate issuer:       /CN=076991290F5B947E0E07A8223FE219EC05478D0F
Certificate serial:       0DA9917987160B43F98657D1596CF5EEE7CF4339
Authority key identifier: 07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3232352e302f32342d3234203d3e20323730303537.roa
Signing time:             Tue 05 Mar 2024 18:12:22 +0000
ROA not before:           Tue 05 Mar 2024 18:07:22 +0000
ROA not after:            Tue 04 Mar 2025 18:12:22 +0000
asID:                     270057
IP address blocks:        191.102.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a9:91:79:87:16:0b:43:f9:86:57:d1:59:6c:f5:ee:e7:cf:43:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076991290F5B947E0E07A8223FE219EC05478D0F
        Validity
            Not Before: Mar  5 18:07:22 2024 GMT
            Not After : Mar  4 18:12:22 2025 GMT
        Subject: CN=C7C205D0C6F4839A9CE8DE4C92103FA910F940E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:01:54:7b:1f:af:8d:4e:42:e4:29:91:ce:
                    2a:02:8e:df:dd:79:cd:ab:f5:b5:a0:cf:78:0c:0c:
                    84:90:87:60:34:86:f1:69:22:77:18:9b:79:06:49:
                    97:46:b4:39:0f:49:3d:d6:61:b8:1d:4f:57:ce:b7:
                    0f:8b:c0:9d:d6:f6:a1:78:06:59:c7:b0:39:d5:d3:
                    88:40:9f:2e:bc:dc:25:73:6e:a3:e7:8d:5a:12:86:
                    d4:92:4b:50:4f:36:60:64:39:f2:76:63:b0:6f:41:
                    08:a8:0c:7b:77:ba:fa:f9:82:dc:57:6e:c2:0f:e8:
                    dc:69:59:c6:da:38:34:12:84:9c:e4:35:cd:43:fb:
                    ce:71:c5:4c:35:c2:2d:98:3a:0a:3c:7a:48:f2:a9:
                    13:ad:95:f9:12:4c:34:c0:cc:8c:e7:81:30:55:a2:
                    f0:07:2a:46:51:59:da:c6:2c:b4:dd:7b:ff:c5:91:
                    58:93:fc:9b:f1:d1:0c:99:74:63:da:d3:5e:65:55:
                    ae:1e:b2:da:b2:6a:24:75:ff:26:f2:58:f5:64:b8:
                    d9:ee:8e:28:10:3b:e5:b4:7b:f3:34:6a:4e:6f:1e:
                    64:5a:72:3d:5a:e5:2b:ed:5b:ed:46:60:bc:43:8c:
                    71:d9:a9:44:47:70:9f:7c:f8:44:10:b5:d4:79:63:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:05:D0:C6:F4:83:9A:9C:E8:DE:4C:92:10:3F:A9:10:F9:40:E8
            X509v3 Authority Key Identifier:
                keyid:07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3232352e302f32342d3234203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:42:39:ff:4b:cf:ad:b9:db:ec:39:00:54:e6:47:99:96:f6:
         b9:76:87:f6:58:03:4e:b7:44:51:5b:af:98:4e:00:93:ac:85:
         a3:ae:5c:87:e7:fe:16:55:59:bf:53:b1:c0:ef:05:fe:7d:2f:
         1c:54:0f:39:e2:31:59:ee:f6:e2:9e:38:a2:9b:17:f3:38:54:
         bf:12:18:3a:c0:ba:e5:f6:c3:7f:a1:98:30:0e:35:06:60:85:
         cd:35:45:8c:fc:d4:ce:2c:54:f7:de:df:61:f4:64:d8:ab:14:
         e5:9f:4c:37:4f:28:a0:5a:09:b0:ca:d0:5d:1f:d2:9d:3b:5d:
         ba:25:0d:11:46:45:c9:c8:2a:f9:95:6d:bf:16:71:50:5d:65:
         39:2e:b4:17:46:5c:ee:d3:35:09:93:9f:c9:8c:58:d5:df:61:
         72:00:52:cc:e1:6e:77:35:43:f8:71:5c:1a:24:76:df:26:a0:
         df:b1:99:43:86:74:18:63:2e:02:8d:38:ba:e5:e8:7d:39:5e:
         3b:51:76:b7:71:d2:31:35:56:80:c5:1f:04:9e:db:f1:06:93:
         93:a6:6c:77:e2:87:1e:88:07:ce:1e:3a:82:f3:41:01:af:1c:
         cc:80:ce:d5:29:f0:da:51:e2:f6:05:8e:1f:b8:fe:a3:e9:29:
         e7:74:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org