Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37302e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          aVh2+y+fipYABqkZu0hLrsQ/T91IcxlT8iXqw6KB5Fo=
Subject key identifier:   0C:5F:53:91:D5:93:71:4D:E4:71:6F:33:F5:8A:75:BF:F2:5D:A5:C7
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       46E7B25E1DEF85AB8F640ABA328EBF4A096898F9
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:14 +0000
ROA not before:           Tue 05 Mar 2024 18:02:14 +0000
ROA not after:            Tue 04 Mar 2025 18:07:14 +0000
asID:                     263209
IP address blocks:        191.97.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e7:b2:5e:1d:ef:85:ab:8f:64:0a:ba:32:8e:bf:4a:09:68:98:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:14 2024 GMT
            Not After : Mar  4 18:07:14 2025 GMT
        Subject: CN=0C5F5391D593714DE4716F33F58A75BFF25DA5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:69:bb:94:c7:6b:ff:81:73:9e:d4:2f:08:
                    0a:d9:db:4d:8b:dd:d2:b3:fc:c0:4f:c1:89:f5:70:
                    1c:d4:b3:bf:65:25:a5:6d:f5:2b:62:bd:57:be:7c:
                    92:5a:1f:65:50:91:cc:64:ed:46:e5:bf:c1:7d:14:
                    81:04:91:da:56:e9:b8:5c:df:a7:70:57:5a:2a:a2:
                    a5:98:4d:11:fc:8d:be:44:01:9e:3f:db:94:fd:15:
                    98:35:06:54:05:51:32:b1:73:09:15:aa:d1:e4:60:
                    84:4d:03:96:81:97:b7:f6:d4:c3:91:fc:38:64:ac:
                    7d:40:e4:30:c6:5f:9f:6f:37:ff:28:f0:a5:18:46:
                    60:cc:0c:11:ab:dd:32:5d:67:ac:ea:b7:4b:b4:6f:
                    59:1f:44:38:77:0e:0e:88:6c:4f:f2:b9:61:53:8d:
                    6a:1f:7b:ab:44:3d:ef:ec:d1:42:09:a4:9d:b5:5f:
                    29:f0:91:c5:a9:1e:87:97:3e:3d:e9:6d:40:34:d7:
                    c1:41:07:87:cf:db:d6:e5:8c:f6:2f:b1:33:fd:3e:
                    d9:d9:cc:33:37:46:a6:2d:55:72:f7:f8:f4:0f:41:
                    34:dc:fe:58:6f:61:58:ea:a2:0e:96:22:fa:aa:3e:
                    fd:55:d2:b2:7c:07:f5:f3:14:ae:4e:2d:1c:0c:02:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5F:53:91:D5:93:71:4D:E4:71:6F:33:F5:8A:75:BF:F2:5D:A5:C7
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:96:ad:92:be:23:f6:e9:a3:f3:e4:7a:c0:cc:0d:41:69:
         e4:33:07:ca:3c:f0:08:ee:f6:97:7a:be:71:76:76:f3:cc:04:
         1a:62:7b:7e:54:b2:e1:1b:91:25:ec:f9:62:c7:49:7a:5e:ee:
         66:cd:89:cd:8c:bb:1c:06:44:23:e6:db:3c:05:37:25:f6:f3:
         73:7d:52:d8:96:9f:91:e0:61:bf:bf:f0:fc:67:19:3c:d0:39:
         7f:a2:f5:5c:cc:98:15:4d:22:45:ed:eb:7b:08:04:e5:42:93:
         44:c6:85:a9:ee:d7:5f:07:d9:22:6c:7f:c7:87:98:38:bd:c2:
         f4:fc:19:53:24:8c:79:92:28:8a:84:bd:e8:1b:06:8b:84:a5:
         d6:76:2d:10:b5:a6:3e:1e:0d:49:d3:42:ce:7a:4d:7f:0c:b9:
         5c:aa:30:15:59:8b:aa:b7:25:38:99:04:c8:15:f2:a9:1b:37:
         fe:9e:1b:74:7f:d6:7a:35:0a:bf:f0:a8:d3:c4:0f:8d:5e:50:
         4d:3a:64:ac:3d:a4:93:67:7f:01:1c:d0:f4:52:fe:31:8f:77:
         8d:6d:fd:e7:c1:c3:d7:5b:54:74:03:23:86:60:b3:36:22:08:
         e7:9f:88:ad:76:c5:67:da:50:84:5f:33:a4:aa:f3:1e:6f:55:
         68:1d:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org