Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37362e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          daSvATCzU9tWWTAz2GEaMYlRmLPe+3CeKl1MmnLUTTg=
Subject key identifier:   5B:3C:11:EC:6C:53:07:28:9C:76:FA:2F:DD:92:81:60:23:02:C9:C5
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       03A7FE25637397520F3A91E1424E64F336DECF0B
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     263209
IP address blocks:        191.97.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:fe:25:63:73:97:52:0f:3a:91:e1:42:4e:64:f3:36:de:cf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=5B3C11EC6C5307289C76FA2FDD9281602302C9C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:66:81:dd:3d:b4:5c:ec:8d:cf:f0:f3:43:
                    e5:d5:40:ae:a3:5d:a7:0f:98:c1:42:5b:05:70:7f:
                    60:82:bd:33:b2:ff:68:26:9b:96:bf:32:a2:8a:86:
                    b5:05:78:3e:f4:18:26:24:65:bd:c7:53:d8:ac:b4:
                    7d:a9:5c:94:97:54:80:48:c4:f6:fc:8f:ad:83:71:
                    d0:df:f0:25:94:e1:cd:c7:92:96:42:b7:4a:70:d4:
                    32:ef:a2:88:84:4e:af:b1:d0:a8:f1:65:c3:5e:05:
                    47:0c:56:e0:79:ce:51:71:95:17:93:0e:20:d3:c6:
                    d6:18:42:90:6f:bb:4e:d0:f8:10:aa:20:dd:c1:76:
                    dd:4e:60:9b:1e:8b:ea:4e:3e:42:ee:6e:df:8a:c0:
                    0f:31:fb:1e:86:81:a2:a7:38:ee:0e:2d:95:e8:18:
                    f7:bb:4d:52:d7:3f:49:1f:49:b6:bb:52:a1:18:16:
                    cd:a0:8a:28:82:9e:a7:22:6a:78:5a:20:95:c1:f2:
                    ef:08:ad:cf:43:da:48:c3:c1:ce:98:32:7d:31:c7:
                    c9:30:94:a5:ae:eb:b7:38:4d:ce:2c:e6:99:dc:be:
                    d7:a7:24:61:6e:c1:9f:40:04:53:7a:12:a3:b2:19:
                    b1:6c:0d:24:70:2a:91:80:ca:37:80:5d:f7:54:54:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:11:EC:6C:53:07:28:9C:76:FA:2F:DD:92:81:60:23:02:C9:C5
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:89:73:99:cd:42:9a:51:2b:8d:96:1d:a2:d5:ce:31:47:
         fa:66:18:c1:06:15:ba:b8:d9:a7:6a:44:4c:06:9d:a6:ee:0e:
         46:17:90:5b:4d:3e:e4:84:8a:b4:52:3c:95:6f:91:64:19:a1:
         6e:75:b8:30:4a:a9:81:9b:00:3c:40:9e:ca:b8:80:f0:55:43:
         f7:fd:db:7d:9b:10:b3:cd:8d:f5:9a:cc:e8:e5:b5:f5:e2:13:
         fe:b0:cc:d6:34:5c:6a:9f:ce:5c:51:b0:60:b7:54:50:66:c5:
         3d:b0:18:d4:74:06:86:4f:bc:38:57:6a:c1:85:2e:28:e9:ad:
         c9:64:59:4f:ef:24:15:5c:4e:67:74:4e:e4:03:01:16:00:79:
         df:c5:e1:6a:18:08:cb:bb:60:44:e7:4d:77:bf:29:e0:03:97:
         64:f4:02:02:01:af:99:d2:7f:e9:31:4a:71:b8:a6:b7:a5:fe:
         ab:e5:5e:44:de:06:7f:4a:ba:13:63:ca:c4:ad:f8:27:92:de:
         41:53:53:3f:04:e8:9e:63:46:44:4c:36:b4:58:41:d3:5a:51:
         77:65:e3:71:c1:93:1b:41:3a:e7:dc:a2:a2:f0:66:83:7d:c7:
         7b:3f:5e:ca:69:df:fc:d0:26:09:f0:75:6c:ee:97:a3:e5:92:
         16:6c:cb:dd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUA6f+JWNzl1IPOpHhQk5k8zbezwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NkUyQkEzRkU4OTkzM0YxQ0YzNkJCMDM3NzY0Rjgy
NEZFRDdGMDAeFw0yNDAzMDUxODAyMTFaFw0yNTAzMDQxODA3MTFaMDMxMTAvBgNV
BAMTKDVCM0MxMUVDNkM1MzA3Mjg5Qzc2RkEyRkREOTI4MTYwMjMwMkM5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVmaB3T20XOyNz/DzQ+XVQK6j
XacPmMFCWwVwf2CCvTOy/2gmm5a/MqKKhrUFeD70GCYkZb3HU9istH2pXJSXVIBI
xPb8j62DcdDf8CWU4c3HkpZCt0pw1DLvooiETq+x0KjxZcNeBUcMVuB5zlFxlReT
DiDTxtYYQpBvu07Q+BCqIN3Bdt1OYJsei+pOPkLubt+KwA8x+x6GgaKnOO4OLZXo
GPe7TVLXP0kfSba7UqEYFs2giiiCnqcianhaIJXB8u8Irc9D2kjDwc6YMn0xx8kw
lKWu67c4Tc4s5pncvtenJGFuwZ9ABFN6EqOyGbFsDSRwKpGAyjeAXfdUVBJzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWzwR7GxTByicdvov3ZKBYCMCycUwHwYDVR0j
BBgwFoAULZbiuj/omTPxzza7A3dk+CT+1/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDlDN0U4NjVDQjFEQjkzOUJBRDQzQTJERTRBMzJENUZD
MEZCRTcxQ0NFQjI0MkRDQjQ4OTY0QzkzN0FCNUM3LzAvMkQ5NkUyQkEzRkU4OTkz
M0YxQ0YzNkJCMDM3NzY0RjgyNEZFRDdGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDk2RTJCQTNGRTg5OTMzRjFD
RjM2QkIwMzc3NjRGODI0RkVEN0YwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ5QzdFODY1Q0IxREI5MzlCQUQ0M0EyREU0QTMyRDVGQzBGQkU3MUND
RUIyNDJEQ0I0ODk2NEM5MzdBQjVDNy8wLzMxMzkzMTJlMzkzNzJlMzczNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9hTDAN
BgkqhkiG9w0BAQsFAAOCAQEAAYqJc5nNQppRK42WHaLVzjFH+mYYwQYVurjZp2pE
TAadpu4ORheQW00+5ISKtFI8lW+RZBmhbnW4MEqpgZsAPECeyriA8FVD9/3bfZsQ
s82N9ZrM6OW19eIT/rDM1jRcap/OXFGwYLdUUGbFPbAY1HQGhk+8OFdqwYUuKOmt
yWRZT+8kFVxOZ3RO5AMBFgB538XhahgIy7tgROdNd78p4AOXZPQCAgGvmdJ/6TFK
cbimt6X+q+VeRN4Gf0q6E2PKxK34J5LeQVNTPwTonmNGREw2tFhB01pRd2XjccGT
G0E659yiovBmg33Hez9eymnf/NAmCfB1bO6Xo+WSFmzL3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org