Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32322d3232203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier:          BHxvr4lrS2O7bYbvXDsPXA/DXKlD9R9/iKum3VJjGrw=
Subject key identifier:   F2:F7:04:DC:F8:AA:A5:9A:F9:43:D8:E6:C6:22:FD:5A:15:22:83:04
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       57EE14A90F7D416C2F0B26E3DCBF7C020C99E09F
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32322d3232203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:30 +0000
ROA not before:           Tue 04 Feb 2025 18:23:30 +0000
ROA not after:            Tue 03 Feb 2026 18:28:30 +0000
asID:                     263209
IP address blocks:        191.97.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ee:14:a9:0f:7d:41:6c:2f:0b:26:e3:dc:bf:7c:02:0c:99:e0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:30 2025 GMT
            Not After : Feb  3 18:28:30 2026 GMT
        Subject: CN=F2F704DCF8AAA59AF943D8E6C622FD5A15228304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:1f:38:92:b6:0a:16:af:ca:d8:52:7f:ed:
                    d4:29:98:cc:b3:f4:e0:96:32:2b:3d:49:25:c9:0a:
                    a5:c9:78:15:50:d3:0c:19:62:68:df:f5:a0:04:e4:
                    83:9e:55:70:e4:93:ff:17:16:c4:56:e8:68:d2:ec:
                    ab:82:c9:81:a8:c4:49:ae:73:2d:ed:54:d4:d2:a1:
                    36:7c:c7:69:c9:9d:08:d2:9c:26:6e:47:20:54:f6:
                    02:7f:15:91:7b:c4:7c:ef:e8:2c:46:7c:9f:09:78:
                    a3:59:04:90:94:f1:8c:eb:59:fb:c9:7d:31:26:94:
                    26:2a:72:26:79:b1:7d:8b:d4:a9:f9:84:f2:cf:55:
                    81:54:64:f6:ff:1e:ce:d0:b7:69:7b:00:f6:2b:d8:
                    02:f7:35:c0:55:ba:25:55:4c:62:12:87:fb:9b:e8:
                    04:54:9c:d9:de:4c:2f:17:2e:79:0f:8b:25:ab:5c:
                    c3:bb:87:80:8a:83:f6:ac:6d:79:cc:ad:de:ae:5d:
                    dc:37:9a:c8:aa:3e:34:9f:43:b5:79:b1:c1:af:b7:
                    6d:7e:c8:e2:56:ff:c8:03:4f:e4:bd:97:9d:07:63:
                    ca:91:f9:e2:0c:16:7d:5e:69:83:75:d2:a6:cd:d5:
                    68:42:2e:17:07:27:e8:4a:ce:8e:98:41:01:c6:f2:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F7:04:DC:F8:AA:A5:9A:F9:43:D8:E6:C6:22:FD:5A:15:22:83:04
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32322d3232203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:a5:65:15:9b:c9:8a:a4:77:7b:12:05:10:b7:57:2c:7d:fd:
         3c:3f:ad:7d:f7:3f:44:2e:44:e8:f8:9b:e9:73:d8:5c:40:cc:
         55:0d:91:8d:90:bd:9d:e2:f2:01:61:88:eb:22:8f:71:93:8b:
         db:4a:c9:e1:fd:d7:e9:fc:41:d2:86:20:7f:39:01:09:05:4e:
         f2:80:db:ed:8a:db:31:41:06:0c:fb:86:66:17:35:91:66:ba:
         97:14:e8:88:78:10:8c:d2:02:f1:8b:1f:1e:89:f7:00:4e:aa:
         b2:18:cc:af:4c:dd:d5:12:f8:1f:6e:e7:75:be:da:47:5b:92:
         bb:fc:66:12:fa:a8:cd:92:ce:ce:ae:fe:82:36:26:72:d2:9d:
         dd:7b:44:de:38:02:7b:bc:77:ec:66:7c:26:49:cc:be:fc:04:
         77:a8:a2:15:0b:ab:a9:ee:51:ee:13:c3:b7:ad:04:6f:d6:0d:
         06:ab:75:5f:7c:e1:38:0a:b5:66:5c:f3:12:a9:2f:78:f6:e8:
         cd:80:03:69:43:3e:15:e5:cd:b4:ba:22:5e:d8:78:6a:e6:01:
         c7:2b:f7:34:e0:8b:ed:ab:7e:8a:07:c9:f5:44:2d:01:e0:d7:
         ed:19:df:7c:57:af:cc:f7:e4:56:ea:80:9d:77:7e:6f:00:17:
         4b:af:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:41 2025 by rpki-client