Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37332e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37332e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          F99/y4RLHeC/gFpIHo23IJHsKRTmwkbjybF9i4vcSVg=
Subject key identifier:   CF:37:50:67:B4:67:18:71:EB:C2:E3:9E:B0:DE:4F:67:2F:30:95:D1
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       706F49809608CC4599E4AC0D074DFFAF7F648700
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37332e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:27 +0000
ROA not before:           Tue 04 Feb 2025 18:23:27 +0000
ROA not after:            Tue 03 Feb 2026 18:28:27 +0000
asID:                     263209
IP address blocks:        191.97.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6f:49:80:96:08:cc:45:99:e4:ac:0d:07:4d:ff:af:7f:64:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:27 2025 GMT
            Not After : Feb  3 18:28:27 2026 GMT
        Subject: CN=CF375067B4671871EBC2E39EB0DE4F672F3095D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:17:d2:23:13:04:d6:93:6a:4f:61:52:8e:
                    81:85:24:fd:4d:59:51:39:8b:ce:1c:bf:17:f4:f4:
                    19:c7:01:86:53:49:79:e9:19:a5:68:81:c8:9a:e8:
                    dd:75:68:e1:09:33:8f:16:10:ce:70:32:fe:e7:fb:
                    59:61:49:3f:13:57:a4:e4:79:d3:02:2d:3f:68:8c:
                    8f:09:08:9f:30:f0:4a:c1:1f:f8:7a:1b:19:c9:7e:
                    f1:d1:4b:3d:6e:87:74:bd:fd:31:5c:58:bd:b4:e7:
                    56:03:5f:3c:c3:69:f3:30:1b:bb:71:9e:43:69:d7:
                    43:38:38:22:f9:04:b5:52:1d:04:3e:de:a9:19:cd:
                    11:67:62:1a:c1:01:05:a5:d9:9d:4d:5b:e7:80:46:
                    f0:99:5e:2a:b2:34:d7:37:9a:c7:bf:e6:2c:62:f2:
                    5c:c2:64:00:b1:f4:85:96:39:26:ec:cb:b6:50:63:
                    ed:46:c4:7a:a7:42:c6:09:f2:f1:e1:2f:61:80:68:
                    18:d5:b0:46:a0:df:90:fd:d2:17:75:11:3a:b9:f4:
                    fd:e5:a2:79:e0:8a:a8:f6:66:f1:80:4d:9f:1b:14:
                    f0:dc:5b:72:ee:ba:a6:b6:6e:dc:b1:f0:70:ea:54:
                    cb:1f:8c:59:e2:72:7b:af:2d:51:21:04:0b:a4:7b:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:50:67:B4:67:18:71:EB:C2:E3:9E:B0:DE:4F:67:2F:30:95:D1
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37332e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b9:7c:92:87:35:57:97:0a:d9:9c:24:03:8b:4c:56:af:93:
         98:1d:6c:f4:75:ec:9a:4a:0d:d5:cf:4a:72:f6:93:e9:28:f1:
         d7:85:11:ed:0b:d7:cf:b8:b6:9e:6c:39:79:b7:3f:41:f6:b4:
         e0:0b:5b:22:11:9b:9a:31:88:05:94:45:40:7c:f0:6f:20:77:
         ba:96:b3:a0:e8:eb:e0:36:51:ab:8f:36:bb:5c:5f:d8:23:78:
         02:85:28:52:5a:db:e5:d6:80:95:6d:28:2c:9c:d4:0a:c0:a0:
         d0:c0:9f:c8:52:c9:f8:ef:2d:b6:71:7e:49:a7:2f:df:4e:be:
         d8:a0:81:24:42:fe:f2:8d:d6:8f:bf:6f:00:1c:c2:cd:88:ef:
         32:07:ec:0e:03:2d:23:06:8a:a0:a9:03:b2:34:f6:86:5c:5e:
         1c:a9:8c:3b:17:43:45:fa:25:72:1c:9c:3d:23:5c:52:03:7f:
         37:ff:a8:cb:60:2e:72:63:03:4b:eb:5d:d1:97:ee:72:e4:70:
         d7:71:6c:4a:92:51:79:88:28:76:20:8e:07:c0:db:d0:95:b9:
         04:c2:b4:ce:d3:1f:31:83:8d:4f:67:00:1b:5c:97:b8:ad:f4:
         88:9a:26:5f:b3:3f:21:56:55:f2:75:4e:99:5d:20:44:71:25:
         0b:9a:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:25:56 2025 by rpki-client