Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          An+2f2shr7cycbHH2vN08nIw9kN18TM6tXVrS32EPn0=
Subject key identifier:   ED:E9:52:AC:28:22:C5:89:4E:49:9B:05:AE:96:FA:15:E3:49:FD:3E
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       1656828798FFAC09375617D64695ABC86AA8BDAD
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:27 +0000
ROA not before:           Tue 04 Feb 2025 18:23:27 +0000
ROA not after:            Tue 03 Feb 2026 18:28:27 +0000
asID:                     263209
IP address blocks:        191.97.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:56:82:87:98:ff:ac:09:37:56:17:d6:46:95:ab:c8:6a:a8:bd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:27 2025 GMT
            Not After : Feb  3 18:28:27 2026 GMT
        Subject: CN=EDE952AC2822C5894E499B05AE96FA15E349FD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:2c:8e:79:9d:18:d7:de:67:d0:8e:92:0e:
                    22:77:82:25:e5:e1:38:55:0b:45:9e:63:b4:c7:c8:
                    87:73:93:7f:c8:17:f9:53:40:9d:b4:d9:c8:ce:1c:
                    dd:ca:10:c1:15:e6:21:60:78:3b:3b:a1:aa:62:01:
                    1a:df:09:75:2c:18:8f:32:c8:d5:27:72:d7:b7:b5:
                    57:96:ae:1c:8b:37:48:fe:8a:ef:42:47:2d:74:15:
                    6e:f9:04:bf:d1:42:62:f8:0a:a8:f0:b6:65:43:f2:
                    2f:bf:b7:ae:7d:2b:9f:87:0c:de:98:63:f5:23:65:
                    b8:6c:d1:54:f6:55:6f:73:fd:57:db:5f:e8:8e:98:
                    d4:76:05:3c:f7:f3:be:ff:95:4c:e8:53:ab:ab:a3:
                    d7:b1:72:4e:42:22:9e:d9:1d:66:e7:bc:5a:a0:71:
                    dc:b7:34:41:ac:0a:ff:e8:58:16:c9:a0:fb:86:ec:
                    7f:e8:bd:ca:c1:15:f1:6d:2d:35:0c:ce:84:ba:68:
                    16:f9:37:1a:0b:3d:5b:4f:de:aa:d6:94:8b:2d:e0:
                    d3:bd:78:d0:15:3c:e6:36:e6:da:f5:c3:aa:bb:60:
                    d6:7c:05:3a:98:2a:33:87:cd:5f:7b:d4:b8:5b:81:
                    e9:72:83:f3:c3:3f:80:d0:fb:47:c7:bd:b5:54:4f:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:52:AC:28:22:C5:89:4E:49:9B:05:AE:96:FA:15:E3:49:FD:3E
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:0a:74:4d:b1:3a:97:bf:b3:81:71:39:a8:15:23:bf:8d:
         ee:89:54:28:41:c7:68:fe:9f:8e:36:31:a1:e1:0d:6b:a1:ba:
         b2:ee:cb:4f:92:94:a4:b1:de:38:ab:ee:50:e7:0c:92:e0:39:
         1c:ed:00:1e:c2:a4:48:c5:ae:0e:5c:a2:df:6f:40:94:f2:24:
         30:2a:69:64:99:7f:7f:a8:ad:a1:78:e8:4a:9c:9f:8c:59:cf:
         92:3c:4b:b1:43:bf:3f:14:8f:cc:86:80:be:2e:7f:b3:30:18:
         8f:12:f1:e1:54:c2:19:c5:c5:0d:b1:1e:e2:b1:fd:0c:de:a8:
         3b:65:b9:f4:b8:6f:96:d8:1d:77:04:92:4d:db:14:32:85:0c:
         cf:3f:b3:fd:02:16:28:b2:9a:2b:38:36:37:4e:cb:95:44:41:
         70:e0:31:12:ea:d4:11:43:d8:b4:d5:92:a8:5a:36:89:76:50:
         13:a0:de:98:ab:d6:6f:c7:40:33:df:5f:8f:d8:12:bb:3e:8b:
         f0:76:e6:f3:d4:1b:64:72:f8:7c:f9:4b:a1:3a:04:28:05:17:
         79:51:5c:b2:c9:7c:81:42:f7:dc:fb:c4:8a:29:52:5e:da:0e:
         4c:ec:50:db:21:79:fd:20:55:92:2a:f6:9f:ff:48:d3:f3:42:
         21:50:3e:e8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFlaCh5j/rAk3VhfWRpWryGqova0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NkUyQkEzRkU4OTkzM0YxQ0YzNkJCMDM3NzY0Rjgy
NEZFRDdGMDAeFw0yNTAyMDQxODIzMjdaFw0yNjAyMDMxODI4MjdaMDMxMTAvBgNV
BAMTKEVERTk1MkFDMjgyMkM1ODk0RTQ5OUIwNUFFOTZGQTE1RTM0OUZEM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuyyOeZ0Y195n0I6SDiJ3giXl
4ThVC0WeY7THyIdzk3/IF/lTQJ202cjOHN3KEMEV5iFgeDs7oapiARrfCXUsGI8y
yNUncte3tVeWrhyLN0j+iu9CRy10FW75BL/RQmL4CqjwtmVD8i+/t659K5+HDN6Y
Y/UjZbhs0VT2VW9z/VfbX+iOmNR2BTz3877/lUzoU6uro9exck5CIp7ZHWbnvFqg
cdy3NEGsCv/oWBbJoPuG7H/ovcrBFfFtLTUMzoS6aBb5NxoLPVtP3qrWlIst4NO9
eNAVPOY25tr1w6q7YNZ8BTqYKjOHzV971Lhbgelyg/PDP4DQ+0fHvbVUT9uxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7elSrCgixYlOSZsFrpb6FeNJ/T4wHwYDVR0j
BBgwFoAULZbiuj/omTPxzza7A3dk+CT+1/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDlDN0U4NjVDQjFEQjkzOUJBRDQzQTJERTRBMzJENUZD
MEZCRTcxQ0NFQjI0MkRDQjQ4OTY0QzkzN0FCNUM3LzAvMkQ5NkUyQkEzRkU4OTkz
M0YxQ0YzNkJCMDM3NzY0RjgyNEZFRDdGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDk2RTJCQTNGRTg5OTMzRjFD
RjM2QkIwMzc3NjRGODI0RkVEN0YwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ5QzdFODY1Q0IxREI5MzlCQUQ0M0EyREU0QTMyRDVGQzBGQkU3MUND
RUIyNDJEQ0I0ODk2NEM5MzdBQjVDNy8wLzMxMzkzMTJlMzkzNzJlMzczMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb9hSDAN
BgkqhkiG9w0BAQsFAAOCAQEAUp4KdE2xOpe/s4FxOagVI7+N7olUKEHHaP6fjjYx
oeENa6G6su7LT5KUpLHeOKvuUOcMkuA5HO0AHsKkSMWuDlyi329AlPIkMCppZJl/
f6itoXjoSpyfjFnPkjxLsUO/PxSPzIaAvi5/szAYjxLx4VTCGcXFDbEe4rH9DN6o
O2W59LhvltgddwSSTdsUMoUMzz+z/QIWKLKaKzg2N07LlURBcOAxEurUEUPYtNWS
qFo2iXZQE6DemKvWb8dAM99fj9gSuz6L8Hbm89QbZHL4fPlLoToEKAUXeVFcssl8
gUL33PvEiilSXtoOTOxQ2yF5/SBVkir2n/9I0/NCIVA+6A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:55:24 2025 by rpki-client