Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
File:                     3139312e39372e36382e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier:          Wj+9YuYKzt0oJbrfmDtWRF/tNGOi66YkT0Qd5IkIV+g=
Subject key identifier:   C5:B5:AC:3D:90:F3:DB:C3:EB:F6:D7:0A:94:20:0C:79:48:98:3B:C2
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       114899B24523FB31244A977A6700198135AA98DD
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:30 +0000
ROA not before:           Tue 04 Feb 2025 18:23:30 +0000
ROA not after:            Tue 03 Feb 2026 18:28:30 +0000
asID:                     263209
IP address blocks:        191.97.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:48:99:b2:45:23:fb:31:24:4a:97:7a:67:00:19:81:35:aa:98:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:30 2025 GMT
            Not After : Feb  3 18:28:30 2026 GMT
        Subject: CN=C5B5AC3D90F3DBC3EBF6D70A94200C7948983BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:76:8f:a3:f7:f4:c8:f2:e7:af:b5:73:2e:
                    1c:31:d5:3f:a3:85:b8:5e:1a:60:b8:9f:a1:ad:5c:
                    e8:06:d3:3b:72:18:6c:d3:1f:9b:ef:5c:88:ae:c9:
                    e1:6e:75:db:59:8c:12:85:ea:20:92:bc:57:ab:47:
                    86:2e:79:e6:a4:02:7f:0f:2c:13:26:a8:2c:46:93:
                    b7:25:cf:5f:95:47:35:9a:16:e4:a2:c0:0e:4a:51:
                    69:2a:9c:d3:f5:2c:bb:3a:96:5e:6d:af:43:42:2e:
                    19:15:1c:fa:a7:b0:b4:5a:46:db:7d:51:72:ea:25:
                    c4:e8:4a:48:7c:69:ed:01:fc:3e:0a:4c:47:5f:61:
                    1b:f2:79:b6:e1:6d:8e:df:f9:fa:56:d8:49:13:47:
                    37:50:ad:6b:52:92:2e:31:f7:d4:24:80:03:6f:3b:
                    be:ee:d6:71:93:e2:e9:60:ee:06:24:73:74:65:60:
                    4b:02:db:2f:95:cb:02:a4:c9:c3:ad:30:89:b2:90:
                    40:14:83:32:78:a5:0e:6d:62:e4:15:56:db:30:2e:
                    56:c9:13:17:82:bc:ba:c2:cb:c0:d1:eb:bc:af:ab:
                    88:4f:17:92:47:3a:18:bf:15:f7:a8:18:39:0a:f6:
                    8d:97:1c:c8:f5:15:22:a1:d0:14:d8:a6:a5:e6:d1:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:AC:3D:90:F3:DB:C3:EB:F6:D7:0A:94:20:0C:79:48:98:3B:C2
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:48:ea:e8:e5:9d:39:2e:b9:bc:fe:31:95:99:2a:d7:9a:c3:
         85:40:13:ef:ec:30:b5:79:6d:af:68:84:9d:f0:5a:e5:53:47:
         50:6c:5f:16:32:49:b1:38:39:94:8f:d2:74:49:a2:89:f3:8d:
         d2:32:ea:ef:80:9c:bd:36:c8:5b:ee:49:4c:75:f2:1a:ef:a7:
         38:ec:b2:55:87:35:ca:be:f0:c8:5f:ab:c5:32:8c:23:f6:a6:
         31:5a:4e:25:cb:82:44:ca:92:b7:e4:dc:45:5d:bb:e2:4a:9b:
         a5:e8:7e:70:93:f1:a8:3f:bd:79:29:1e:a7:e0:ab:4f:b2:cd:
         fe:70:61:de:55:d0:c7:fa:c4:d6:7c:2d:47:b8:d8:30:84:49:
         31:f1:68:1f:43:05:b6:25:8a:e8:2c:eb:1b:82:2e:e5:ba:de:
         27:c3:ba:12:f3:3c:e8:46:00:b8:79:4a:24:43:ca:c8:9c:17:
         da:3e:69:76:34:c5:a8:3e:0c:fc:ff:8d:52:b8:49:b7:5e:5e:
         63:d0:9f:4e:f3:71:ad:08:51:16:c7:71:ed:87:fd:63:2d:2c:
         98:7e:20:45:da:bf:78:a2:d7:67:e9:28:23:4f:39:4b:41:b4:
         be:b2:a1:fb:10:8a:54:94:79:6d:c8:1e:31:b7:f3:e6:74:27:
         3a:62:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:53:38 2025 by rpki-client