Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          fmtAxtxZEkIPiwuPhTwakkXlcyqbN2xi2qXLQSeosJk=
Subject key identifier:   F7:FE:06:C7:D8:21:E1:5D:3E:9C:82:40:23:E0:76:D1:5C:D0:B6:93
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       23F1B890D9BBC6928ED22C5456881AEF93FDC17A
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:26 +0000
ROA not before:           Tue 04 Feb 2025 18:23:26 +0000
ROA not after:            Tue 03 Feb 2026 18:28:26 +0000
asID:                     263209
IP address blocks:        191.97.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f1:b8:90:d9:bb:c6:92:8e:d2:2c:54:56:88:1a:ef:93:fd:c1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:26 2025 GMT
            Not After : Feb  3 18:28:26 2026 GMT
        Subject: CN=F7FE06C7D821E15D3E9C824023E076D15CD0B693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:21:06:9f:e8:0d:e5:69:73:0d:88:af:8f:
                    98:68:d7:74:5c:43:25:4e:9d:93:ea:db:ff:a0:c4:
                    ef:2f:e7:07:bc:e5:89:5a:2b:ba:ec:d6:85:44:85:
                    2f:2a:a2:65:82:a3:35:35:97:d2:64:2c:fe:71:de:
                    d5:ff:bf:f1:4c:8b:3f:50:b8:27:4f:83:23:61:ed:
                    e3:d7:85:cf:6f:ae:57:57:ad:63:61:3d:65:16:9c:
                    3a:c8:8d:45:ce:58:ab:71:9b:87:e4:91:b2:5e:38:
                    f1:a6:63:8b:4f:91:e5:fb:11:96:6d:00:df:5d:e6:
                    09:f9:d4:01:6d:1d:d7:a4:68:74:0c:76:3b:92:85:
                    22:81:92:1b:c1:bc:96:24:b7:13:c1:59:f6:89:f3:
                    3d:84:49:f0:3e:cc:f6:54:db:6a:39:d6:4c:b0:70:
                    d3:ca:9b:58:cb:eb:be:f4:5d:c8:7a:2d:f1:1b:08:
                    90:30:84:2e:23:3f:dd:d4:52:3c:9b:17:53:5c:fb:
                    25:24:f7:74:d6:e9:2f:39:bf:6f:45:74:52:d5:1f:
                    be:71:b8:aa:e3:70:80:a8:c1:82:96:66:fa:a3:2f:
                    03:a3:0c:de:44:4d:a3:50:8c:05:22:93:e3:bd:e6:
                    8d:c4:d2:a6:83:b6:7a:67:eb:d7:b0:fa:88:e7:29:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FE:06:C7:D8:21:E1:5D:3E:9C:82:40:23:E0:76:D1:5C:D0:B6:93
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:e3:6a:98:e7:b5:1c:4a:51:0f:8e:85:88:f4:ac:43:db:24:
         52:36:40:bd:66:34:c7:04:57:43:a9:d1:82:25:74:94:8d:4b:
         f9:0d:79:57:f1:0d:1c:a4:4a:04:cf:c1:80:12:d1:24:d2:d8:
         24:a2:54:68:2d:d8:fa:6b:67:24:59:99:d4:55:5b:65:09:fd:
         cc:12:24:ef:dd:ae:28:2b:07:c7:66:cd:00:ac:24:b1:fd:f7:
         0e:8b:39:ed:60:80:b1:5e:82:24:81:31:f0:a3:d7:ab:7c:5e:
         1c:92:18:e0:77:20:b4:01:32:e4:9e:23:3b:bd:1b:24:10:8d:
         54:5b:2b:8a:3d:94:b9:eb:5f:82:22:ff:3c:c2:e5:8c:06:69:
         21:64:e9:5a:da:df:9f:76:dc:ec:b6:14:d9:16:8f:5d:cf:f9:
         29:be:a5:d5:c0:18:49:dc:1e:53:00:e3:73:fe:54:8b:76:e3:
         9d:e5:55:ad:ac:39:92:0c:95:7e:0b:1c:7a:71:d5:cf:77:88:
         d9:a6:ba:9e:96:45:d9:6e:17:5a:70:6e:8b:26:7b:b2:98:20:
         83:bc:31:d3:81:e5:5f:22:71:7d:26:25:73:2f:87:f6:36:90:
         b2:90:a3:74:2f:10:0f:80:37:ca:de:3b:c9:d1:0c:2f:3a:9c:
         f9:93:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:45:32 2025 by rpki-client