Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e36382e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          9lL/fgRboF5TTHhDThQYB+o66G8xPoZqU8YUQAG4354=
Subject key identifier:   33:91:07:6F:DB:89:9D:C8:70:FB:69:64:67:F6:A5:75:72:6D:C6:F5
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       3DC2F2F1A96AC567F1C0F144DE9B3B5716E10431
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:10 +0000
ROA not before:           Tue 05 Mar 2024 18:02:10 +0000
ROA not after:            Tue 04 Mar 2025 18:07:10 +0000
asID:                     263209
IP address blocks:        191.97.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c2:f2:f1:a9:6a:c5:67:f1:c0:f1:44:de:9b:3b:57:16:e1:04:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:10 2024 GMT
            Not After : Mar  4 18:07:10 2025 GMT
        Subject: CN=3391076FDB899DC870FB696467F6A575726DC6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:a7:20:b4:0d:53:3a:76:70:8b:e8:89:b7:
                    b7:72:5f:76:91:70:ed:10:02:ae:c3:8f:1e:75:12:
                    94:f6:97:94:83:65:91:bb:81:61:08:1d:cd:f9:8e:
                    53:c7:5b:32:b0:5e:f1:c0:ca:e5:49:e0:8e:4d:ae:
                    96:6e:81:8d:ab:39:09:dd:3a:53:80:fd:23:20:45:
                    69:75:43:a6:7e:a0:30:c7:9e:98:29:de:c7:d6:59:
                    0c:06:4b:51:f8:93:02:c1:53:3b:60:ca:d8:8d:14:
                    c8:ad:cd:c3:e7:09:6a:1e:54:41:e8:3f:9b:1c:68:
                    9f:80:c9:c2:31:82:b6:98:19:b1:de:7f:72:46:63:
                    d2:b9:14:8e:6b:ad:75:02:f2:9c:16:b6:84:14:32:
                    8e:76:3e:81:a5:da:51:9e:a6:bf:3f:d6:6a:4f:47:
                    46:33:a5:11:e3:ab:b2:19:3f:f7:fb:c7:55:3c:a4:
                    7f:58:11:ef:b4:13:a6:7a:4d:65:be:63:b4:ab:8a:
                    d3:ab:66:7b:ca:6b:23:6f:2e:72:19:c1:64:ad:7e:
                    5e:b1:3a:21:58:d2:24:01:df:31:15:17:51:19:35:
                    a0:b2:5b:71:69:2c:a4:6b:52:1c:54:be:ed:ab:79:
                    0c:f4:b3:03:fd:8d:8c:93:3d:ca:9d:58:e2:71:b7:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:91:07:6F:DB:89:9D:C8:70:FB:69:64:67:F6:A5:75:72:6D:C6:F5
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:11:e8:c3:58:e0:c5:82:c5:59:a9:1d:51:48:33:42:dd:
         8d:cb:a1:72:0f:91:04:d4:d6:71:cd:6d:7b:db:f9:fd:45:da:
         66:fb:b6:0f:d2:40:87:2e:0b:08:5d:a5:e4:1d:98:0f:04:06:
         1f:3c:ce:6f:a0:3b:a4:5c:b5:77:14:fe:20:73:b4:2d:fc:82:
         d5:9c:9b:67:3b:a6:d6:9c:2f:16:8f:e1:fc:09:15:bc:da:8e:
         eb:f8:4d:21:17:d8:8e:d2:e7:c7:07:06:93:f9:d1:93:5d:3a:
         2e:a8:7b:83:91:a3:7e:8f:1f:da:94:3c:09:64:da:2a:58:b3:
         48:88:5e:52:32:db:90:cc:35:74:36:f0:e2:4f:09:49:68:22:
         3b:3f:e9:a9:2a:23:3b:5c:7e:5b:4a:cd:7c:8b:2e:3b:b3:d3:
         ce:29:2b:8c:9e:59:30:71:91:08:cd:73:b2:3a:9b:af:6a:82:
         7f:03:a9:fc:05:50:c4:21:6c:52:18:bf:f4:18:88:12:22:a2:
         9b:80:49:8d:f3:71:cc:b8:2b:45:90:05:92:35:8c:d9:16:9e:
         2a:36:3f:92:0e:0d:48:fd:5f:0a:7a:08:9c:3e:d4:e2:92:13:
         ef:fa:e9:18:2e:70:9c:b5:67:47:b4:e6:b4:37:88:4b:08:f3:
         fc:53:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org