Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37342e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37342e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          gSvz2XV3a977eXO7rZLfDJuDKxlwEtrJkE0S+oJ74ZM=
Subject key identifier:   0D:D8:FE:BE:2C:91:B2:08:33:3C:20:1E:72:E3:D5:F0:D9:60:19:4D
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       4A852938C5E58BFD2656F87A0BCDF047E936D7DD
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37342e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:31 +0000
ROA not before:           Tue 04 Feb 2025 18:23:31 +0000
ROA not after:            Tue 03 Feb 2026 18:28:31 +0000
asID:                     263209
IP address blocks:        191.97.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:85:29:38:c5:e5:8b:fd:26:56:f8:7a:0b:cd:f0:47:e9:36:d7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:31 2025 GMT
            Not After : Feb  3 18:28:31 2026 GMT
        Subject: CN=0DD8FEBE2C91B208333C201E72E3D5F0D960194D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:69:60:68:65:f3:7f:5a:b6:09:b8:20:49:
                    3f:80:da:76:f2:89:f1:f2:c6:f2:6a:25:17:83:26:
                    5e:c9:45:dd:22:d7:d6:31:95:f6:d1:41:34:f8:34:
                    00:42:36:fb:f4:fa:02:40:7d:bb:54:de:0d:0f:5f:
                    54:58:ed:a4:aa:62:20:11:14:1f:58:4d:4c:9d:bd:
                    cd:a7:12:08:a0:9e:19:33:17:d1:7b:f8:b1:d1:fd:
                    9d:fc:3e:e6:b0:21:b0:a3:57:9f:76:2c:44:36:69:
                    ff:3f:8c:18:d6:85:db:c1:f6:92:63:4f:22:70:20:
                    67:51:b4:1c:de:0e:cf:a1:9e:aa:e5:d2:56:ad:aa:
                    00:66:16:e7:68:27:d8:e0:30:6f:22:ec:37:dc:f0:
                    de:21:43:8c:59:bd:29:6f:bc:6a:e9:95:08:b9:1d:
                    4f:49:69:a0:9c:d1:8c:57:7e:1c:a9:e5:80:f6:87:
                    09:21:b1:3a:c6:9b:ee:cd:5f:7d:30:53:b8:40:e4:
                    76:43:aa:60:17:f6:66:fb:9b:37:6c:ce:dc:33:8c:
                    4e:28:69:39:f3:d4:2b:14:63:4a:5a:8d:71:9a:57:
                    8c:11:1a:bf:f2:da:12:93:8e:ca:4f:1b:f5:5d:3c:
                    db:dd:6b:da:31:06:6f:bd:70:b5:e6:87:84:7f:cc:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:FE:BE:2C:91:B2:08:33:3C:20:1E:72:E3:D5:F0:D9:60:19:4D
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37342e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:c2:48:6b:ce:f6:c0:7c:38:0f:d5:1a:32:bf:50:4b:54:99:
         e1:62:a0:c5:32:18:67:04:6a:0a:9c:0c:20:38:60:d4:a8:ed:
         45:70:cf:77:c6:9a:7e:13:24:98:63:3f:cd:9f:d9:77:e9:ec:
         7f:27:a7:ef:58:9f:56:00:11:46:62:a5:f0:c9:7a:3a:24:d8:
         83:60:65:27:86:cf:11:c9:e5:4b:ee:b3:ae:e8:66:f4:b6:b9:
         35:04:33:ab:27:5e:32:7a:1d:e6:cf:e5:40:09:d6:be:f0:95:
         1b:dd:2c:7d:1a:f4:5b:8d:05:12:f9:35:3d:9b:11:99:0d:45:
         69:81:e3:06:0d:cc:52:ee:b1:0f:bc:ad:29:fc:8e:e4:b4:b3:
         12:75:f5:50:a8:7d:cf:5a:8d:c3:f4:36:71:6c:41:7e:e7:aa:
         2a:e9:e0:5c:4b:de:92:e5:54:b7:d0:9e:45:5a:a4:c4:33:48:
         85:f3:3a:d4:0e:61:8b:3d:7d:8a:61:3c:cb:b5:53:4e:2c:c4:
         c8:ac:2b:84:67:a6:ca:2d:be:06:5e:9e:6e:e2:d0:ec:60:92:
         6d:91:93:0d:b7:4b:67:f1:fa:7a:2f:65:c0:a2:ee:85:11:f1:
         77:8f:3c:f7:1d:51:bb:64:e5:59:1d:47:fc:be:26:98:41:34:
         b4:71:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:47:29 2025 by rpki-client