Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
File:                     3139312e39372e36382e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier:          B/B+ln89mjOwyc0nAaGMDvhBqY7iG6LcqWQz7cRs5VQ=
Subject key identifier:   EE:2A:BC:1A:B7:D5:4A:91:73:EE:F4:75:DA:9D:3D:4F:5C:7C:C0:7C
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       3567CD707FFEF8419B2ED48FE759739E7CDCA570
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:09 +0000
ROA not before:           Tue 05 Mar 2024 18:02:09 +0000
ROA not after:            Tue 04 Mar 2025 18:07:09 +0000
asID:                     263209
IP address blocks:        191.97.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:67:cd:70:7f:fe:f8:41:9b:2e:d4:8f:e7:59:73:9e:7c:dc:a5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:09 2024 GMT
            Not After : Mar  4 18:07:09 2025 GMT
        Subject: CN=EE2ABC1AB7D54A9173EEF475DA9D3D4F5C7CC07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:a3:50:3e:1e:c2:4f:5d:b4:45:da:11:50:
                    6b:8f:2f:13:3c:c7:5c:63:43:bb:fa:6b:1f:a8:1e:
                    67:c9:c8:71:d0:eb:4e:bb:72:bb:ea:cc:11:88:73:
                    66:60:b1:82:d4:cc:70:e2:c8:b3:fb:b2:18:e8:15:
                    a6:9c:92:65:98:1c:70:55:51:ce:aa:92:1c:1e:4e:
                    b7:17:b7:e6:45:be:c1:dc:94:04:5b:8f:56:e8:8b:
                    71:57:67:85:64:99:48:63:01:15:cf:9d:ef:ff:71:
                    ac:90:c2:6c:48:94:04:82:2e:5b:ae:93:56:19:74:
                    f7:a7:0c:ce:46:8e:53:10:ef:34:99:01:fe:62:8b:
                    83:34:4d:2b:89:ca:09:b6:f8:a4:33:a1:a6:a0:9e:
                    6e:e6:ab:5d:94:77:05:1e:6f:fc:5f:be:33:e6:92:
                    4f:26:ed:36:43:3f:c9:59:6d:66:07:fb:b9:17:66:
                    90:40:95:3a:e2:9b:62:4f:6d:11:fc:54:98:63:22:
                    17:a8:f4:f1:79:b5:36:dc:1e:63:da:61:be:84:c3:
                    1f:4a:8d:23:f2:fd:a8:d2:3b:53:94:8f:dd:01:ea:
                    d8:c3:00:bd:2f:ab:8c:4a:ab:22:99:88:80:3c:8d:
                    b3:a7:c4:41:fd:a1:10:87:bf:cc:21:ec:5e:13:14:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2A:BC:1A:B7:D5:4A:91:73:EE:F4:75:DA:9D:3D:4F:5C:7C:C0:7C
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:5d:25:3c:ef:98:d2:df:fd:77:34:e6:50:25:9a:1f:c9:
         d3:16:c6:41:aa:02:e6:ba:1e:d0:cc:55:e0:5f:14:35:09:90:
         00:d3:ad:d9:58:a6:84:f1:11:c2:f6:e5:42:3a:9a:c1:24:20:
         02:d7:bb:9b:bc:e8:bb:36:ca:40:b0:77:38:17:49:18:e1:2a:
         f0:91:b7:51:db:cd:44:f6:82:79:72:39:f9:e4:ba:3e:40:57:
         04:a3:8f:4e:eb:9d:f1:7f:2b:ef:e7:77:22:82:4b:e4:0e:aa:
         f5:05:4d:71:4c:3a:83:7a:a3:7d:5f:0e:88:c7:3e:da:2e:cb:
         02:8d:d4:bf:0f:7d:74:cd:61:97:8d:11:f6:2d:91:27:68:68:
         1d:39:52:51:14:d4:fd:ef:07:1b:98:17:b0:e9:44:92:50:44:
         d2:ca:e3:7e:13:13:58:57:f3:58:11:14:56:2e:d2:35:c6:ad:
         6e:50:cc:11:0b:fc:0a:ab:5f:31:da:76:5e:e2:8b:0e:07:32:
         5a:59:c0:d8:98:b6:dd:fb:6c:a8:2c:0d:a4:43:98:15:3d:e0:
         79:c7:c1:7f:38:58:05:b5:b8:40:5c:ce:07:d5:61:ad:c4:35:
         73:4f:97:3d:f8:ff:c8:0a:e7:01:34:b0:c5:0b:82:7d:2c:1f:
         08:49:22:2f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNWfNcH/++EGbLtSP51lznnzcpXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NkUyQkEzRkU4OTkzM0YxQ0YzNkJCMDM3NzY0Rjgy
NEZFRDdGMDAeFw0yNDAzMDUxODAyMDlaFw0yNTAzMDQxODA3MDlaMDMxMTAvBgNV
BAMTKEVFMkFCQzFBQjdENTRBOTE3M0VFRjQ3NURBOUQzRDRGNUM3Q0MwN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZkqNQPh7CT120RdoRUGuPLxM8
x1xjQ7v6ax+oHmfJyHHQ6067crvqzBGIc2ZgsYLUzHDiyLP7shjoFaackmWYHHBV
Uc6qkhweTrcXt+ZFvsHclARbj1boi3FXZ4VkmUhjARXPne//cayQwmxIlASCLluu
k1YZdPenDM5GjlMQ7zSZAf5ii4M0TSuJygm2+KQzoaagnm7mq12UdwUeb/xfvjPm
kk8m7TZDP8lZbWYH+7kXZpBAlTrim2JPbRH8VJhjIheo9PF5tTbcHmPaYb6Ewx9K
jSPy/ajSO1OUj90B6tjDAL0vq4xKqyKZiIA8jbOnxEH9oRCHv8wh7F4TFJsbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7iq8GrfVSpFz7vR12p09T1x8wHwwHwYDVR0j
BBgwFoAULZbiuj/omTPxzza7A3dk+CT+1/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDlDN0U4NjVDQjFEQjkzOUJBRDQzQTJERTRBMzJENUZD
MEZCRTcxQ0NFQjI0MkRDQjQ4OTY0QzkzN0FCNUM3LzAvMkQ5NkUyQkEzRkU4OTkz
M0YxQ0YzNkJCMDM3NzY0RjgyNEZFRDdGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDk2RTJCQTNGRTg5OTMzRjFD
RjM2QkIwMzc3NjRGODI0RkVEN0YwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ5QzdFODY1Q0IxREI5MzlCQUQ0M0EyREU0QTMyRDVGQzBGQkU3MUND
RUIyNDJEQ0I0ODk2NEM5MzdBQjVDNy8wLzMxMzkzMTJlMzkzNzJlMzYzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr9hRDAN
BgkqhkiG9w0BAQsFAAOCAQEANgpdJTzvmNLf/Xc05lAlmh/J0xbGQaoC5roe0MxV
4F8UNQmQANOt2VimhPERwvblQjqawSQgAte7m7zouzbKQLB3OBdJGOEq8JG3UdvN
RPaCeXI5+eS6PkBXBKOPTuud8X8r7+d3IoJL5A6q9QVNcUw6g3qjfV8OiMc+2i7L
Ao3Uvw99dM1hl40R9i2RJ2hoHTlSURTU/e8HG5gXsOlEklBE0srjfhMTWFfzWBEU
Vi7SNcatblDMEQv8CqtfMdp2XuKLDgcyWlnA2Ji23ftsqCwNpEOYFT3gecfBfzhY
BbW4QFzOB9VhrcQ1c0+XPfj/yArnATSwxQuCfSwfCEkiLw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org