Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37312e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37312e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          /Zub1c74HInvU5T44xAP2cHnRXZWrMf0/mKvbS0ICPs=
Subject key identifier:   8C:64:B3:11:8C:D1:B0:FF:20:DC:98:37:7B:49:D8:F1:A7:D9:A9:85
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       36C465AB033A874DA39FBE0B117F434497B415E7
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37312e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:28 +0000
ROA not before:           Tue 04 Feb 2025 18:23:28 +0000
ROA not after:            Tue 03 Feb 2026 18:28:28 +0000
asID:                     263209
IP address blocks:        191.97.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c4:65:ab:03:3a:87:4d:a3:9f:be:0b:11:7f:43:44:97:b4:15:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:28 2025 GMT
            Not After : Feb  3 18:28:28 2026 GMT
        Subject: CN=8C64B3118CD1B0FF20DC98377B49D8F1A7D9A985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:b7:f1:38:68:2d:e8:d7:37:9a:97:b1:32:
                    be:93:ff:83:63:4c:2a:60:d8:4f:be:c3:4b:97:49:
                    15:14:9f:be:60:bc:2f:a7:bf:10:a4:1f:0c:61:ba:
                    e9:27:b4:2d:52:e4:c6:82:85:80:bb:11:6c:14:16:
                    47:18:28:25:f6:bf:54:c7:28:19:71:59:60:32:da:
                    c2:a6:c7:75:b5:40:59:c3:76:95:22:f5:5f:97:c9:
                    99:4d:86:05:e5:44:57:af:37:9d:98:a6:14:40:b8:
                    1a:23:27:b2:8f:d5:d2:0c:4e:06:99:eb:01:fa:49:
                    50:43:3f:e7:cc:42:95:a6:32:03:b1:49:d9:fc:75:
                    29:ca:6f:cd:5f:18:e3:50:f6:07:9e:0f:90:8d:af:
                    c0:7f:3a:d1:dd:52:00:0f:53:09:a8:aa:90:f4:69:
                    01:0a:eb:d4:fc:5e:96:a9:fa:c4:97:42:68:f6:15:
                    83:8b:8a:58:dd:7f:ba:3c:b8:92:48:23:06:11:41:
                    3e:ca:ef:19:d9:99:04:57:5d:ea:4c:54:61:3d:2f:
                    99:72:da:38:85:61:dd:60:33:9f:3f:c6:a9:75:5f:
                    d5:4a:66:1b:d4:d9:78:38:65:ea:97:f8:47:fc:69:
                    75:ba:ed:94:5f:f5:a0:7f:3d:ad:71:92:7a:01:44:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:B3:11:8C:D1:B0:FF:20:DC:98:37:7B:49:D8:F1:A7:D9:A9:85
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37312e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:25:9d:d5:4d:da:12:a9:0f:2c:b2:3c:cc:10:3c:2a:2b:
         39:0a:43:11:25:b4:de:c6:27:5b:de:c9:5e:f1:f8:3d:4e:4d:
         d6:a1:1a:26:05:4f:5e:8d:c5:6c:9a:5d:c3:2d:6d:a0:ca:d8:
         dc:0b:94:bb:83:62:cb:1d:63:e7:5d:db:bf:a3:ae:8e:bd:16:
         2c:18:4f:58:ce:2f:33:11:fb:0b:44:01:d9:96:10:da:28:6d:
         50:04:a1:ee:f6:6c:06:86:ab:46:e8:27:e5:e8:da:da:eb:ce:
         47:48:89:b3:da:6d:15:f5:d7:c3:18:7f:a7:79:1e:74:82:72:
         93:6f:d1:63:2c:f0:79:21:0c:f5:85:24:44:ad:fd:54:4c:b5:
         2f:58:69:33:0a:af:49:78:6f:38:b4:f8:2b:bf:b6:d6:fd:6a:
         0a:d4:d9:d9:6e:78:c4:87:c4:73:d9:82:8b:69:da:63:13:eb:
         6a:b8:8d:95:34:68:76:0e:87:76:14:63:f4:db:f4:64:ad:6e:
         b7:a5:11:86:ec:8a:2e:14:f5:97:df:b5:f2:09:26:38:71:18:
         8d:5f:e6:f3:c6:9b:a2:e0:62:87:f7:cc:f7:b1:23:6a:ec:c1:
         76:f3:e2:2c:83:4a:3f:f4:65:15:a6:04:24:97:d7:e9:57:b0:
         a1:ad:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:04 2025 by rpki-client