Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37362e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          CV8jlQ1jGwdqjIqNk9gBaiQF/qgqYKehGLn2gAXtJXM=
Subject key identifier:   5F:B5:03:8D:67:6E:EB:1D:CE:55:05:07:4A:AC:EC:AF:73:E5:D7:5F
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       16ED68745DA431FFFBCB80373CFF014FD736D583
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:13 +0000
ROA not before:           Tue 05 Mar 2024 18:02:13 +0000
ROA not after:            Tue 04 Mar 2025 18:07:13 +0000
asID:                     263209
IP address blocks:        191.97.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ed:68:74:5d:a4:31:ff:fb:cb:80:37:3c:ff:01:4f:d7:36:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:13 2024 GMT
            Not After : Mar  4 18:07:13 2025 GMT
        Subject: CN=5FB5038D676EEB1DCE5505074AACECAF73E5D75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:75:bc:18:ba:d7:35:03:27:61:3e:7e:04:fb:
                    02:6e:fa:e3:53:d3:32:75:2e:7e:58:e9:40:e7:dd:
                    5d:c5:8b:ae:77:80:dd:6a:6d:80:1b:2d:38:06:bc:
                    b9:54:47:de:81:ae:6c:66:95:3e:fa:65:24:9a:df:
                    05:d5:88:b9:c9:43:1c:c8:3e:b4:9f:31:f5:34:8c:
                    54:39:61:95:e3:17:01:28:fa:f6:16:29:49:de:56:
                    3f:ad:02:be:8b:96:1d:6e:c8:62:a7:cc:10:73:96:
                    37:9f:c1:47:e8:de:ea:e9:82:99:ee:85:91:c8:5b:
                    0d:db:5b:0a:d9:ef:fd:c0:ce:ca:24:78:1f:87:d4:
                    40:b1:ed:ce:08:a5:44:82:a0:ff:28:11:6a:0e:47:
                    fd:8e:9f:1e:34:37:95:37:2b:f7:4e:b3:73:7b:eb:
                    f8:3c:42:d1:a1:c6:d7:c1:28:6d:0a:93:76:24:0f:
                    a2:9c:11:fd:a3:3f:10:b7:4b:e1:73:a3:89:e2:30:
                    b7:50:dc:8c:f9:ec:fa:e7:41:b1:74:e3:b9:d9:92:
                    77:cc:90:b7:1b:ae:44:20:02:5f:79:7e:1d:fc:0b:
                    51:62:53:ee:fc:b2:c6:7a:54:5c:97:5e:21:70:e0:
                    7f:a1:30:b7:30:49:cb:d6:8d:ec:e4:8b:ac:b1:b4:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:03:8D:67:6E:EB:1D:CE:55:05:07:4A:AC:EC:AF:73:E5:D7:5F
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:74:86:34:cf:e9:a2:91:a9:2f:49:8d:47:70:de:57:53:
         71:3d:28:36:ae:33:ca:a5:ef:27:a9:f3:32:50:08:66:19:1c:
         d8:5a:e1:e0:b4:7f:02:92:3a:84:2b:83:16:d3:8f:b2:a0:55:
         a7:51:b6:07:34:62:75:3f:d2:b2:24:69:c5:80:8f:5f:ca:0c:
         7a:e0:0b:53:69:de:cf:1d:66:fc:e4:2e:1e:b3:eb:7f:44:a9:
         2f:2b:a3:9a:0d:34:40:db:81:dc:bf:3b:e7:6c:a9:42:d4:3e:
         ab:43:ef:05:4b:2a:cb:ad:de:e9:4c:6d:5c:80:d4:2c:0b:c6:
         1f:11:10:2b:03:d7:ae:02:83:95:b0:5d:45:29:ec:a2:3a:52:
         3f:d6:c2:e7:fa:19:41:16:50:c4:2b:a0:71:87:ae:ba:e5:e4:
         59:39:21:67:5f:6e:87:80:b8:57:95:55:7e:c8:fb:6c:dd:36:
         e6:d5:91:83:bb:12:35:a1:cf:66:52:71:cd:27:08:b9:34:3b:
         7b:13:8e:56:a4:ed:d4:c1:00:06:5c:1e:10:50:76:34:b8:9a:
         50:53:61:c1:b7:99:76:d9:a1:3e:49:f5:bb:2b:4c:ce:b4:fb:
         8e:3f:23:b7:2d:92:bc:cd:ab:30:e6:82:34:82:22:e2:fe:fc:
         e8:ac:ca:57
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFu1odF2kMf/7y4A3PP8BT9c21YMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NkUyQkEzRkU4OTkzM0YxQ0YzNkJCMDM3NzY0Rjgy
NEZFRDdGMDAeFw0yNDAzMDUxODAyMTNaFw0yNTAzMDQxODA3MTNaMDMxMTAvBgNV
BAMTKDVGQjUwMzhENjc2RUVCMURDRTU1MDUwNzRBQUNFQ0FGNzNFNUQ3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3dbwYutc1AydhPn4E+wJu+uNT
0zJ1Ln5Y6UDn3V3Fi653gN1qbYAbLTgGvLlUR96BrmxmlT76ZSSa3wXViLnJQxzI
PrSfMfU0jFQ5YZXjFwEo+vYWKUneVj+tAr6Llh1uyGKnzBBzljefwUfo3urpgpnu
hZHIWw3bWwrZ7/3AzsokeB+H1ECx7c4IpUSCoP8oEWoOR/2Onx40N5U3K/dOs3N7
6/g8QtGhxtfBKG0Kk3YkD6KcEf2jPxC3S+Fzo4niMLdQ3Iz57PrnQbF047nZknfM
kLcbrkQgAl95fh38C1FiU+78ssZ6VFyXXiFw4H+hMLcwScvWjezki6yxtJ8fAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUX7UDjWdu6x3OVQUHSqzsr3Pl118wHwYDVR0j
BBgwFoAULZbiuj/omTPxzza7A3dk+CT+1/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDlDN0U4NjVDQjFEQjkzOUJBRDQzQTJERTRBMzJENUZD
MEZCRTcxQ0NFQjI0MkRDQjQ4OTY0QzkzN0FCNUM3LzAvMkQ5NkUyQkEzRkU4OTkz
M0YxQ0YzNkJCMDM3NzY0RjgyNEZFRDdGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDk2RTJCQTNGRTg5OTMzRjFD
RjM2QkIwMzc3NjRGODI0RkVEN0YwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ5QzdFODY1Q0IxREI5MzlCQUQ0M0EyREU0QTMyRDVGQzBGQkU3MUND
RUIyNDJEQ0I0ODk2NEM5MzdBQjVDNy8wLzMxMzkzMTJlMzkzNzJlMzczNjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb9hTDAN
BgkqhkiG9w0BAQsFAAOCAQEAI7t0hjTP6aKRqS9JjUdw3ldTcT0oNq4zyqXvJ6nz
MlAIZhkc2Frh4LR/ApI6hCuDFtOPsqBVp1G2BzRidT/SsiRpxYCPX8oMeuALU2ne
zx1m/OQuHrPrf0SpLyujmg00QNuB3L8752ypQtQ+q0PvBUsqy63e6UxtXIDULAvG
HxEQKwPXrgKDlbBdRSnsojpSP9bC5/oZQRZQxCugcYeuuuXkWTkhZ19uh4C4V5VV
fsj7bN025tWRg7sSNaHPZlJxzScIuTQ7exOOVqTt1MEABlweEFB2NLiaUFNhwbeZ
dtmhPkn1uytMzrT7jj8jty2SvM2rMOaCNIIi4v786KzKVw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org