Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36392e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e36392e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          X345hArYG6zZSQMl3ivJutdiz40mIy9KIyG47AntmcU=
Subject key identifier:   04:C9:3F:BC:BA:0F:06:9E:8E:BB:17:9E:5A:18:D9:0E:2C:4F:26:B8
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       7033FD74F9D42C3A9FF6A42163387A206342ECF5
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36392e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     263209
IP address blocks:        191.97.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:33:fd:74:f9:d4:2c:3a:9f:f6:a4:21:63:38:7a:20:63:42:ec:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=04C93FBCBA0F069E8EBB179E5A18D90E2C4F26B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f0:79:a5:4b:96:75:63:2d:f7:66:89:14:e2:
                    46:f1:7b:cd:af:22:82:98:dd:e5:7c:ff:d6:b9:ed:
                    7c:94:a4:eb:a0:5c:15:34:44:e7:44:d9:b5:99:71:
                    48:e1:88:48:27:44:34:3b:fb:b3:ca:96:55:6d:86:
                    ca:d6:f8:2b:cf:fa:38:1e:f9:73:f3:2b:4c:9c:7a:
                    31:7b:e8:c8:6b:41:a8:f1:6e:67:4b:90:ef:fb:59:
                    02:a3:c0:66:dd:cd:04:cc:37:1d:42:39:8c:ab:a5:
                    a4:14:43:91:f1:dc:1a:01:f5:38:05:54:f6:b9:98:
                    a9:c9:b5:a5:fa:36:cf:e8:d1:1b:b0:be:db:93:fb:
                    16:fa:b0:b8:65:1f:c7:18:96:67:ae:fe:fa:c4:08:
                    55:40:df:3a:19:60:1f:40:f5:db:b4:78:76:63:f8:
                    21:9a:fc:90:a5:b7:be:82:cb:d7:e2:be:30:52:a4:
                    ee:55:5d:36:c1:be:36:90:b6:40:a9:e1:70:43:58:
                    ab:16:25:c6:49:e0:55:dc:12:9d:21:e3:c5:fa:02:
                    3a:e3:c1:b4:20:b4:eb:15:43:50:ba:70:b7:6a:28:
                    63:6c:fb:76:a7:eb:0d:ef:8a:4e:f0:96:b3:af:6d:
                    e7:0f:dd:a1:93:b3:d2:9b:b1:10:62:7a:e9:bb:b0:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:3F:BC:BA:0F:06:9E:8E:BB:17:9E:5A:18:D9:0E:2C:4F:26:B8
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36392e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:61:6f:6b:41:76:27:a0:82:1a:45:d5:f6:c8:c3:7e:ca:
         0f:70:4b:60:0b:30:2e:49:3f:a1:33:ba:1d:49:dd:45:d2:16:
         50:c0:68:01:3e:3c:bf:78:2e:90:fe:5f:3c:d3:68:7d:ba:1a:
         cd:68:64:1f:d6:0e:61:c4:41:e3:ec:cf:0f:7c:07:c1:0f:29:
         67:23:a8:69:50:78:d6:18:aa:d7:63:20:e2:8a:d1:b1:f2:a7:
         75:6e:80:a4:0d:73:2d:ca:b1:36:ec:c0:8c:5f:ea:f5:02:15:
         d3:44:8f:51:3f:8c:39:03:3c:a9:23:7d:24:8e:23:bf:0b:9f:
         61:84:64:60:28:81:cb:54:98:dc:f1:ab:2f:8a:f4:e2:75:d2:
         4f:27:39:32:25:94:25:01:83:26:c0:13:ac:d7:88:c8:fa:36:
         fc:f6:fe:b8:f2:f1:55:3f:4d:bf:e5:f1:51:53:79:65:3d:78:
         f9:f6:fd:e7:21:ad:b3:90:9c:84:b2:97:cc:ef:80:cf:e3:89:
         72:2e:d8:85:c3:e8:c3:d3:0a:66:43:47:d6:b8:aa:77:1d:54:
         f6:79:ae:d6:eb:9f:b7:20:4f:de:64:b9:6f:0d:28:a4:3f:f4:
         63:d0:62:2e:26:72:ff:6f:24:6d:04:c3:54:06:79:17:74:09:
         51:b4:fb:22
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcDP9dPnULDqf9qQhYzh6IGNC7PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NkUyQkEzRkU4OTkzM0YxQ0YzNkJCMDM3NzY0Rjgy
NEZFRDdGMDAeFw0yNDAzMDUxODAyMTFaFw0yNTAzMDQxODA3MTFaMDMxMTAvBgNV
BAMTKDA0QzkzRkJDQkEwRjA2OUU4RUJCMTc5RTVBMThEOTBFMkM0RjI2QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp8HmlS5Z1Yy33ZokU4kbxe82v
IoKY3eV8/9a57XyUpOugXBU0ROdE2bWZcUjhiEgnRDQ7+7PKllVthsrW+CvP+jge
+XPzK0ycejF76MhrQajxbmdLkO/7WQKjwGbdzQTMNx1COYyrpaQUQ5Hx3BoB9TgF
VPa5mKnJtaX6Ns/o0RuwvtuT+xb6sLhlH8cYlmeu/vrECFVA3zoZYB9A9du0eHZj
+CGa/JClt76Cy9fivjBSpO5VXTbBvjaQtkCp4XBDWKsWJcZJ4FXcEp0h48X6Ajrj
wbQgtOsVQ1C6cLdqKGNs+3an6w3vik7wlrOvbecP3aGTs9KbsRBieum7sJPlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBMk/vLoPBp6OuxeeWhjZDixPJrgwHwYDVR0j
BBgwFoAULZbiuj/omTPxzza7A3dk+CT+1/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDlDN0U4NjVDQjFEQjkzOUJBRDQzQTJERTRBMzJENUZD
MEZCRTcxQ0NFQjI0MkRDQjQ4OTY0QzkzN0FCNUM3LzAvMkQ5NkUyQkEzRkU4OTkz
M0YxQ0YzNkJCMDM3NzY0RjgyNEZFRDdGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDk2RTJCQTNGRTg5OTMzRjFD
RjM2QkIwMzc3NjRGODI0RkVEN0YwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ5QzdFODY1Q0IxREI5MzlCQUQ0M0EyREU0QTMyRDVGQzBGQkU3MUND
RUIyNDJEQ0I0ODk2NEM5MzdBQjVDNy8wLzMxMzkzMTJlMzkzNzJlMzYzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9hRTAN
BgkqhkiG9w0BAQsFAAOCAQEAPPthb2tBdiegghpF1fbIw37KD3BLYAswLkk/oTO6
HUndRdIWUMBoAT48v3gukP5fPNNofboazWhkH9YOYcRB4+zPD3wHwQ8pZyOoaVB4
1hiq12Mg4orRsfKndW6ApA1zLcqxNuzAjF/q9QIV00SPUT+MOQM8qSN9JI4jvwuf
YYRkYCiBy1SY3PGrL4r04nXSTyc5MiWUJQGDJsATrNeIyPo2/Pb+uPLxVT9Nv+Xx
UVN5ZT14+fb95yGts5CchLKXzO+Az+OJci7YhcPow9MKZkNH1riqdx1U9nmu1uuf
tyBP3mS5bw0opD/0Y9BiLiZy/28kbQTDVAZ5F3QJUbT7Ig==
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org