Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32312d3231203d3e20323633323039.roa (raw, json)
Hash identifier:          ToLstmC3WkXZ9HhoinGFWkn8s3nrQ8qZZfacLzNKSsc=
Subject key identifier:   2D:2C:F3:09:CC:57:EE:2F:6E:A6:46:00:6F:33:6F:48:A8:7D:B8:3D
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       68282605E24D42D57B49227DA69BE5B8AEEC2AAF
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     263209
IP address blocks:        191.97.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:28:26:05:e2:4d:42:d5:7b:49:22:7d:a6:9b:e5:b8:ae:ec:2a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=2D2CF309CC57EE2F6EA646006F336F48A87DB83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:a3:ea:6b:34:bc:d2:95:d7:66:2f:1f:dc:
                    78:99:6f:fe:2d:44:21:e3:a0:08:3d:eb:f2:61:e8:
                    2f:c1:8e:23:47:03:c6:92:53:60:a3:34:99:00:9e:
                    1f:d1:f0:e5:70:35:01:1d:ae:a3:39:69:3e:cc:6b:
                    a1:d2:45:67:5d:c8:6f:0f:10:dd:45:b4:a3:5e:44:
                    58:52:5c:93:e9:85:2b:6e:6b:44:d6:9a:2d:ca:18:
                    c0:27:9d:40:4b:a0:8d:1a:06:bf:32:95:c0:6f:c6:
                    e4:56:79:36:9f:95:71:b9:06:54:b5:e0:ee:17:35:
                    e0:2b:34:b4:3f:4e:a6:b2:fa:41:8e:f9:bf:62:60:
                    d5:c4:4a:f4:7c:2a:57:76:45:f7:d8:20:14:84:24:
                    e9:c8:80:da:7c:48:90:03:a9:25:6a:68:e4:e6:c5:
                    94:1f:83:10:8d:fd:07:33:e3:78:a6:b0:8f:aa:18:
                    e3:e5:7b:70:c1:2a:f8:c9:2d:51:a7:66:ef:1b:83:
                    99:6a:f3:37:76:45:8e:e2:e2:27:e3:e6:7d:b2:de:
                    36:5a:0d:b5:b5:ec:74:d3:de:04:9b:7c:c9:2d:22:
                    d9:71:2b:e3:11:32:37:8e:77:65:72:8e:41:57:bb:
                    61:d5:db:79:f6:ad:47:98:70:72:34:42:ec:8b:62:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:F3:09:CC:57:EE:2F:6E:A6:46:00:6F:33:6F:48:A8:7D:B8:3D
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:be:ec:f9:db:8d:47:04:7f:e4:11:fd:20:58:87:a6:17:
         f2:b0:54:ff:3b:4f:1b:09:62:7b:94:ed:33:81:bc:15:a0:24:
         d8:61:5c:db:79:2b:c3:ef:63:91:ed:2b:d7:07:40:80:91:77:
         f1:fb:d1:5d:b4:e8:9f:96:00:7f:2a:73:18:c4:5e:e4:d7:aa:
         6c:bd:72:b2:7d:1e:f3:1c:a8:d6:5a:71:da:5e:8a:35:85:de:
         ee:67:73:36:be:ff:ad:39:16:2d:35:a4:f7:a6:6d:31:56:75:
         52:78:d8:53:c5:9f:42:d0:0b:bc:5e:60:d2:19:c2:bf:33:a5:
         21:f7:54:d3:3c:8d:89:c5:12:08:5d:4a:74:ac:c7:26:12:5a:
         91:74:a8:ba:c1:63:c0:0a:e8:83:54:44:b8:01:89:c7:f4:57:
         fc:73:0e:16:4b:c6:f6:f9:98:8e:b5:63:82:92:51:d5:51:5a:
         c3:69:48:fe:58:a1:a7:de:ec:24:d0:b9:1a:17:bb:69:d7:90:
         9f:c9:86:a3:91:e5:c7:ba:24:38:73:fe:90:40:d6:d3:38:52:
         c8:c0:63:67:6e:e1:83:ab:43:6d:27:21:40:e4:71:48:b1:c6:
         f9:c0:8d:30:33:de:86:e5:d1:0e:16:4e:cc:d2:15:27:55:00:
         14:70:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org