Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32312d3231203d3e20323633323039.roa (raw, json)
Hash identifier:          gnMq26wnHjaM+8BUXMygy2rFL6NyQUQNV462jcc0y/4=
Subject key identifier:   F4:9F:77:4A:29:56:3B:41:23:DA:0C:60:11:2D:DB:4A:A9:8F:77:5D
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       3B6DFC5D91C9C44AFD2F4CB62DB1AB49661A0B97
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:30 +0000
ROA not before:           Tue 04 Feb 2025 18:23:30 +0000
ROA not after:            Tue 03 Feb 2026 18:28:30 +0000
asID:                     263209
IP address blocks:        191.97.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6d:fc:5d:91:c9:c4:4a:fd:2f:4c:b6:2d:b1:ab:49:66:1a:0b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:30 2025 GMT
            Not After : Feb  3 18:28:30 2026 GMT
        Subject: CN=F49F774A29563B4123DA0C60112DDB4AA98F775D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:bd:21:b2:93:e7:6b:40:94:7b:0b:58:65:
                    ed:9e:9d:96:d0:e4:93:cb:ff:3c:d1:08:54:1d:bf:
                    90:30:98:1f:10:66:46:fe:49:e3:97:10:0a:1e:b0:
                    4d:2c:fa:21:6d:b7:15:0e:f9:16:76:6a:d7:93:24:
                    48:e4:04:02:23:2c:32:77:63:74:a6:76:91:4a:4f:
                    a6:55:c8:36:fd:5f:13:d3:79:69:a2:20:a9:a7:83:
                    a7:de:78:54:8e:80:95:61:c5:5a:80:49:4f:87:12:
                    a9:a1:bc:48:a3:1b:c7:4a:5c:c8:28:15:a8:99:82:
                    cc:96:88:94:e0:01:8e:34:b4:90:67:8a:a2:07:29:
                    b0:26:7a:d1:14:63:34:64:a7:95:1e:6e:79:8b:91:
                    85:5c:86:c4:fe:9c:8f:07:c7:60:a2:94:8e:68:70:
                    3e:67:f6:7f:a2:16:e0:3b:56:70:da:bf:87:ac:66:
                    c6:23:4a:5f:22:59:7f:84:64:c4:69:62:31:f8:72:
                    ff:1e:80:53:98:30:dd:ed:b8:7c:13:0b:81:2c:70:
                    79:ba:4c:ad:84:39:49:40:d3:0c:c6:0f:1b:02:d8:
                    8b:b1:71:c6:d1:99:d5:56:65:f3:82:09:c3:30:2d:
                    15:96:ac:9c:a2:8b:8b:e8:7d:12:22:f0:e8:91:ce:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9F:77:4A:29:56:3B:41:23:DA:0C:60:11:2D:DB:4A:A9:8F:77:5D
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:14:84:d2:aa:39:cb:cb:8b:9b:2f:d0:7e:03:4a:9b:c6:
         32:3d:63:b8:33:8a:84:68:7f:df:95:b4:73:df:a7:5f:11:6f:
         8e:3d:65:5a:93:07:bc:93:9a:ab:7c:80:e7:be:23:d3:7a:25:
         f6:ee:b4:3d:72:94:32:50:1c:23:ce:02:d0:68:fd:76:77:30:
         54:bd:d9:dd:01:fb:be:e4:11:9a:f7:68:4c:8e:6e:00:49:b4:
         34:df:72:cc:87:29:9f:d3:35:45:8a:84:d5:03:b4:a9:bf:85:
         b9:83:f7:40:15:70:de:e3:b4:35:54:9f:7b:6f:ca:60:a9:fb:
         76:c8:91:85:1b:2f:d6:ee:02:96:4e:2f:17:87:4a:0f:52:ca:
         16:1e:08:27:76:0b:38:14:a5:2a:72:07:11:db:a5:4a:c1:ec:
         bd:59:6a:84:53:2d:ee:f2:ac:cf:3c:8e:4e:6c:eb:0a:ef:53:
         75:a7:bb:31:0e:9c:62:23:eb:9b:6f:fe:79:ff:f0:a3:26:84:
         32:d2:a0:9c:f5:3b:5c:2e:8d:07:7d:ca:86:94:ed:b6:ca:3e:
         c3:97:1d:f3:a3:40:c3:a5:a6:34:07:5a:f2:13:6d:75:7f:6f:
         cf:a5:5e:39:a9:d0:e3:c8:08:dd:36:c1:fc:a4:da:95:65:70:
         4a:5b:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:05 2025 by rpki-client