Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e36382e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          HccH5Kad/UTeV7Rw/JoHG2XU5typVttB7mwPN+E4LDc=
Subject key identifier:   29:5C:0A:59:3D:77:25:85:50:7E:25:0F:B2:6F:E2:3C:1B:41:78:DC
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       7E18EF751C31D460372531A9C844F8E41B2E5305
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:10 +0000
ROA not before:           Tue 05 Mar 2024 18:02:10 +0000
ROA not after:            Tue 04 Mar 2025 18:07:10 +0000
asID:                     263209
IP address blocks:        191.97.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:18:ef:75:1c:31:d4:60:37:25:31:a9:c8:44:f8:e4:1b:2e:53:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:10 2024 GMT
            Not After : Mar  4 18:07:10 2025 GMT
        Subject: CN=295C0A593D772585507E250FB26FE23C1B4178DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:1c:d0:95:90:d6:9e:26:8c:ad:9b:45:44:
                    4f:f5:fa:32:c5:5f:73:d8:09:22:c1:35:f4:e7:c6:
                    cb:60:90:c0:0c:13:04:ab:01:87:e0:29:97:a9:af:
                    82:b6:69:f2:8f:35:87:15:14:ba:5f:49:f5:1c:bb:
                    64:cd:a4:fa:08:1a:be:53:fc:10:3a:73:26:61:6f:
                    3a:49:e4:a0:74:df:17:3f:d0:41:2b:2e:a7:e6:02:
                    26:d7:91:18:29:7f:fb:94:16:fe:91:49:26:7e:12:
                    a1:bd:bf:0a:47:0b:da:75:29:69:4b:28:ac:8d:7b:
                    d3:d0:f2:5d:fc:ea:d9:26:55:54:4e:d0:72:85:dd:
                    c9:dd:59:a6:ae:3a:67:5f:73:03:b7:29:55:38:16:
                    33:ba:37:bd:89:c8:b8:63:a2:1f:d4:76:02:48:0b:
                    96:d4:f2:55:d5:e5:e7:84:ad:6a:4b:cc:88:1a:29:
                    35:23:f3:ff:b0:4d:3e:f2:b9:36:ad:d9:d6:2d:15:
                    58:36:81:08:8b:6a:ae:ef:ab:c2:8d:fa:40:be:00:
                    e9:41:44:0b:c9:ff:76:6d:c0:e5:db:ed:d8:4a:38:
                    46:51:81:ad:c1:7a:18:97:6d:ab:ad:c9:b5:b6:40:
                    2c:a5:ff:3b:f2:94:30:56:26:4c:eb:58:4a:d1:f9:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:0A:59:3D:77:25:85:50:7E:25:0F:B2:6F:E2:3C:1B:41:78:DC
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:65:64:20:65:ab:cd:f9:70:2e:d6:44:c1:77:f6:92:55:
         2e:b6:22:1f:29:ad:67:bf:ef:23:1a:21:01:f1:e3:82:44:78:
         db:af:ce:0c:f0:48:d6:31:34:8c:85:58:ae:3d:44:f8:f8:1f:
         48:5a:f9:66:46:33:7d:4e:c3:03:fd:a2:58:dd:1a:14:de:f4:
         7b:00:68:f0:5d:80:bd:48:db:ae:58:e3:ae:11:b8:45:61:4f:
         56:cd:61:b9:12:4b:a4:a5:50:5f:37:ab:79:f7:65:61:20:1f:
         b3:03:89:82:e3:20:08:34:3c:82:84:20:22:01:e7:58:2a:2c:
         a6:84:3e:70:5c:c7:0b:b5:17:07:79:9e:f3:92:06:40:83:50:
         5e:0f:ee:ab:67:a3:6f:e7:db:74:2f:04:5b:3a:c0:e4:8b:82:
         b9:a4:6d:d9:72:b7:60:e6:65:7f:de:67:b5:c6:5c:e3:22:d8:
         c8:50:05:0a:1b:69:ba:37:4f:c4:5b:9b:f2:76:a2:09:e6:81:
         43:ee:3d:d6:c9:86:b4:d8:54:01:cb:c7:17:51:6a:2f:25:09:
         ea:02:32:28:cf:42:5a:b5:15:33:f6:e6:91:24:f3:58:a3:70:
         f7:a1:16:65:d1:9d:c6:8d:e0:a7:e0:4a:5a:08:aa:90:54:a8:
         62:50:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org