Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          G4YEuMoJa2Xu747MR5rS0/neXC4gEmby0wzcsS0uNZA=
Subject key identifier:   34:9C:DE:8D:B6:DC:C5:C6:34:55:C7:2A:BF:6B:D4:D1:6F:82:B3:22
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       13A882CC2630DDC54FC0EB2B9AE0C5C311B5ECC2
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:15 +0000
ROA not before:           Tue 05 Mar 2024 18:02:15 +0000
ROA not after:            Tue 04 Mar 2025 18:07:15 +0000
asID:                     263209
IP address blocks:        191.97.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a8:82:cc:26:30:dd:c5:4f:c0:eb:2b:9a:e0:c5:c3:11:b5:ec:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:15 2024 GMT
            Not After : Mar  4 18:07:15 2025 GMT
        Subject: CN=349CDE8DB6DCC5C63455C72ABF6BD4D16F82B322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:16:d1:dd:ba:22:cd:12:55:84:08:4b:19:
                    79:99:cc:a9:51:d6:7f:43:fa:71:f9:2f:1f:c8:81:
                    f1:bb:b5:7d:de:9e:ba:34:c0:03:4d:c0:16:dc:eb:
                    1a:8e:c7:98:b7:29:af:e5:e5:4c:37:4b:da:27:97:
                    5a:c7:1c:12:c9:a4:9a:09:62:f2:a6:58:3d:f9:2f:
                    7e:43:2f:df:0e:41:f6:42:ba:cd:16:d3:a5:ef:d8:
                    ef:2c:b0:da:ff:39:ac:74:05:cf:2a:d9:e9:ea:d9:
                    36:e0:d1:e8:c1:5f:72:f4:30:0c:9c:3d:4d:62:0b:
                    ee:65:bd:10:44:a5:f3:48:67:0e:40:8b:1a:75:e0:
                    8e:6d:5b:ef:7f:f9:60:4e:ce:62:cc:a1:c4:47:b3:
                    22:7c:d6:bd:77:1a:f7:8d:aa:ff:e5:26:de:c0:94:
                    ed:8d:4a:a2:fd:ef:aa:61:16:b0:e2:ec:b4:21:f5:
                    fe:fc:89:9b:54:28:2c:74:cc:66:5d:d8:b3:3a:6a:
                    81:cf:e6:ab:eb:7a:e9:cc:0e:99:a6:e5:ff:84:15:
                    fc:93:93:fd:40:94:25:54:12:b5:8d:08:b2:8b:68:
                    c0:5e:1c:c8:a5:c6:3d:6d:3e:d6:60:74:8c:db:28:
                    6d:97:cf:a7:cd:db:08:fa:e7:1a:62:4e:99:12:a6:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9C:DE:8D:B6:DC:C5:C6:34:55:C7:2A:BF:6B:D4:D1:6F:82:B3:22
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ea:c9:aa:05:ca:da:0b:a2:ab:51:1c:6b:97:22:43:53:4d:
         00:2c:b6:45:ba:49:a1:f6:64:ee:60:cf:81:f9:eb:40:48:25:
         54:e7:7f:d9:ed:11:b2:4c:49:a1:4f:84:ad:dc:0d:19:05:e6:
         ea:40:44:fb:07:47:10:f8:3f:e8:c9:17:43:a9:01:01:51:ae:
         63:e7:19:76:79:7d:db:46:47:1e:d0:8b:0e:34:0f:31:02:72:
         27:31:c7:54:12:48:99:60:f5:ea:4e:31:5e:8e:bc:7e:f4:ff:
         30:50:e0:e8:a0:4c:44:90:2d:50:91:4a:cd:a8:80:a4:7e:bf:
         29:f5:66:af:3a:46:20:2f:eb:a8:09:c8:63:53:1f:71:17:59:
         69:e9:70:b3:52:37:d9:bc:df:86:59:85:a3:39:82:02:f6:fe:
         dd:48:af:da:c1:14:85:f6:d8:c6:26:93:5b:05:3c:04:fa:8c:
         0b:e6:ff:70:64:4e:18:e4:5e:86:2f:fe:69:c8:9b:13:62:11:
         11:72:d9:94:14:ee:77:67:ae:f8:87:ce:c6:ef:22:c8:80:76:
         59:e8:09:42:59:00:93:65:18:aa:16:bf:b4:dd:ef:3c:e0:1a:
         2f:21:b9:5c:ab:15:b0:ed:90:06:94:43:24:c2:71:ec:c1:4c:
         6a:9a:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org