Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32322d3232203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier:          R9qzv8qYrMSA6kiiSwaqkSkzVUXqCcVnyLJioEzILlI=
Subject key identifier:   78:50:AA:6D:C7:B1:BE:A6:EB:DD:BF:E8:91:0A:88:3D:86:61:18:8A
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       6886AB690012E4B338E4E452557BA63FDCB1C51C
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32322d3232203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:13 +0000
ROA not before:           Tue 05 Mar 2024 18:02:13 +0000
ROA not after:            Tue 04 Mar 2025 18:07:13 +0000
asID:                     263209
IP address blocks:        191.97.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:86:ab:69:00:12:e4:b3:38:e4:e4:52:55:7b:a6:3f:dc:b1:c5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:13 2024 GMT
            Not After : Mar  4 18:07:13 2025 GMT
        Subject: CN=7850AA6DC7B1BEA6EBDDBFE8910A883D8661188A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:9e:6a:46:df:44:df:d6:05:c0:21:b5:ad:
                    ca:da:fe:67:c3:30:84:9d:ec:17:63:5b:9b:0b:ef:
                    d0:c7:fe:94:b4:2d:de:16:58:36:a8:cb:3c:76:68:
                    53:d5:c2:4e:73:34:86:ab:e8:99:1d:d2:77:5d:4e:
                    bb:da:db:db:b6:94:bd:03:2c:65:f4:7d:1f:42:1e:
                    bc:51:3b:3c:72:3f:1c:5f:26:c5:b8:76:8d:5b:ba:
                    8e:fd:4c:0d:8e:ed:5a:e5:74:dd:5e:e6:0f:bc:b2:
                    99:24:6a:55:39:56:b7:95:4f:4f:8f:1e:8e:26:3b:
                    a7:8a:da:9d:e0:8d:99:8a:61:86:1d:38:6e:46:30:
                    b5:b6:1e:cb:3f:8a:31:1c:87:9b:b1:78:26:07:1a:
                    c6:0a:58:ee:05:ad:dd:18:0d:39:cc:25:ef:db:dc:
                    d5:4f:42:bb:3c:75:34:4c:7e:6f:ed:ad:1f:8c:85:
                    f3:eb:1b:a2:0f:f4:4e:49:bb:63:c0:34:6b:54:e9:
                    23:96:31:77:5d:cf:21:29:be:c7:3e:c9:ce:20:df:
                    4a:26:7e:49:af:21:e2:c6:a3:e9:ed:b7:75:19:27:
                    0a:0a:4f:95:be:1e:f8:f9:2d:93:96:c1:b1:cd:90:
                    dd:74:4a:f6:ac:40:86:b8:85:00:92:35:98:31:c8:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:50:AA:6D:C7:B1:BE:A6:EB:DD:BF:E8:91:0A:88:3D:86:61:18:8A
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32322d3232203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:2b:77:0a:ab:e2:2b:b3:cc:fe:f3:c8:e7:4e:bc:73:38:
         32:d6:bf:a3:e4:db:1e:2c:06:f4:23:e0:31:38:f6:eb:fb:fb:
         ae:bc:ff:05:5c:6c:65:b0:c3:eb:1a:bf:81:ab:a7:59:70:cd:
         33:82:07:e7:90:da:90:28:9b:43:33:af:84:91:1a:6c:09:03:
         0d:20:97:b6:cd:53:73:4b:bf:1f:2f:c0:70:a3:19:4a:79:be:
         0c:3b:a8:59:f3:3d:ab:72:8a:49:61:1f:4a:ac:c6:cb:a5:0d:
         f5:42:8d:9d:f6:3b:13:89:cc:1e:bd:44:d1:3e:76:68:f0:af:
         c8:6c:90:ee:3a:af:12:86:c2:78:1d:cc:64:9f:93:73:e5:aa:
         5f:93:18:70:ea:5a:a2:c7:db:89:63:c3:8d:cd:77:8c:b2:02:
         6d:46:ee:e0:fd:21:9b:6d:c6:21:02:71:5d:5d:aa:6d:28:81:
         b9:ae:c3:fd:64:80:11:63:d6:b3:2e:3a:63:65:98:49:1d:50:
         0c:48:8c:f9:15:36:1c:37:d6:21:fe:4a:51:b2:74:d8:b9:f4:
         74:22:2b:01:aa:a9:32:37:3d:2b:5c:e8:8a:30:f4:b7:08:fc:
         63:19:99:80:5b:cb:6b:29:a0:0f:bc:42:ad:60:ef:58:32:95:
         54:65:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 01:10:32 2024 by rpki-client on console-fra.rpki-client.org