Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3233382e302f32332d3234203d3e20323730303537.roa
File:                     3139312e3130322e3233382e302f32332d3234203d3e20323730303537.roa (raw, json)
Hash identifier:          /7X7Fb+Win8jFu98hx9oHezfr6MTw5Eke1oER6834mE=
Subject key identifier:   79:5B:63:FB:D7:1E:64:D0:12:92:78:4F:29:9F:AC:7E:56:FA:26:7C
Certificate issuer:       /CN=076991290F5B947E0E07A8223FE219EC05478D0F
Certificate serial:       0F968916683E421A4B3E857C201FC0EDA5CECE0D
Authority key identifier: 07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3233382e302f32332d3234203d3e20323730303537.roa
Signing time:             Tue 05 Mar 2024 18:12:21 +0000
ROA not before:           Tue 05 Mar 2024 18:07:21 +0000
ROA not after:            Tue 04 Mar 2025 18:12:21 +0000
asID:                     270057
IP address blocks:        191.102.238.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:96:89:16:68:3e:42:1a:4b:3e:85:7c:20:1f:c0:ed:a5:ce:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076991290F5B947E0E07A8223FE219EC05478D0F
        Validity
            Not Before: Mar  5 18:07:21 2024 GMT
            Not After : Mar  4 18:12:21 2025 GMT
        Subject: CN=795B63FBD71E64D01292784F299FAC7E56FA267C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:00:55:73:a8:c1:2a:73:c2:5f:68:8e:08:
                    00:f6:2a:a5:6b:b3:59:5a:b7:3b:f8:67:49:45:82:
                    14:88:ab:74:bd:a5:b7:4f:f6:12:ee:88:2e:af:1d:
                    72:0f:50:63:2e:56:64:8a:37:7c:8e:e2:08:a7:95:
                    50:3f:ae:b9:e8:5e:d6:b6:fb:0d:be:f8:fc:bf:77:
                    fb:f2:d5:58:aa:1e:2c:ac:20:9e:33:52:62:2c:9e:
                    83:dd:39:0c:84:64:3b:3c:ad:62:b4:1e:e2:46:da:
                    ae:43:dc:ab:8d:57:78:7d:cb:89:dc:a1:d5:3e:9f:
                    d3:eb:b3:4b:1f:55:51:c4:7c:e7:36:9f:d0:8e:b2:
                    b0:15:85:03:bc:c0:ed:96:89:41:0a:74:cd:7d:77:
                    a6:c7:8d:d5:04:e6:09:2c:d1:77:07:df:99:5a:a2:
                    f6:72:74:e2:d1:c1:e1:41:47:5d:69:20:0d:b5:4f:
                    77:4f:ed:86:c7:d1:6f:1b:e6:ec:2d:ea:a0:1a:a8:
                    8f:b3:a3:dc:f2:4c:2b:78:c7:ca:1c:2f:89:64:28:
                    c9:57:9e:bd:95:10:8e:eb:26:36:1f:32:e3:df:2e:
                    02:8f:1e:21:0c:43:87:5f:f3:08:a5:b4:ae:d9:6a:
                    b2:23:f1:4a:20:a3:15:04:30:30:fb:5e:2a:5f:7e:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5B:63:FB:D7:1E:64:D0:12:92:78:4F:29:9F:AC:7E:56:FA:26:7C
            X509v3 Authority Key Identifier:
                keyid:07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/3139312e3130322e3233382e302f32332d3234203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:e4:b8:b7:4b:53:40:cb:de:85:cb:2b:19:2b:b2:56:98:
         30:1b:6e:4e:0c:09:2c:a9:7d:23:4f:b0:8d:45:a5:86:1f:52:
         1a:51:ff:85:90:fe:89:fa:23:f9:56:3b:e3:d3:89:48:92:fd:
         8f:9a:4b:88:10:46:5a:d1:7e:7c:44:cd:d5:b9:71:9d:e9:df:
         d0:fa:e4:f4:df:cc:4e:21:d7:af:d8:b8:e7:8c:a4:0a:ec:88:
         27:5f:71:9f:23:59:2e:00:1c:66:c9:9d:49:9b:06:34:d8:15:
         1c:c8:50:4a:36:11:a3:54:19:26:9c:f1:27:72:b5:31:16:96:
         e8:1b:61:a7:dd:dc:62:82:35:07:d0:05:ac:72:9d:95:cb:bd:
         ec:ef:b5:7c:df:d6:8b:c3:60:c0:6f:f8:83:0a:21:7e:6f:b0:
         22:3c:6b:53:06:03:9b:86:f8:1f:ab:0b:57:c1:ff:37:c0:f9:
         4b:a6:48:20:bc:32:d9:18:21:d4:97:39:98:81:ef:77:6c:81:
         66:64:0b:3d:fa:65:21:b8:e6:f7:86:18:68:41:10:77:c9:ee:
         fb:b2:d9:a9:2d:36:74:68:89:7a:43:fd:96:b9:12:48:f4:33:
         e1:eb:fe:e9:86:77:3b:9f:8e:91:bf:b5:4b:b7:fd:04:35:d4:
         32:ad:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org