Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37362e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          jcyd112aMwnX4VPkxV+cS/nLKwlfRo+g4FgD9M36FcQ=
Subject key identifier:   CC:95:21:FB:8A:12:65:3C:30:6C:D4:93:29:B1:19:57:2F:46:2B:EC
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       16ED713BCBE9DDAC775DBE1F95D9645E3DCA493F
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 04 Feb 2025 18:28:28 +0000
ROA not before:           Tue 04 Feb 2025 18:23:28 +0000
ROA not after:            Tue 03 Feb 2026 18:28:28 +0000
asID:                     263209
IP address blocks:        191.97.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ed:71:3b:cb:e9:dd:ac:77:5d:be:1f:95:d9:64:5e:3d:ca:49:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Feb  4 18:23:28 2025 GMT
            Not After : Feb  3 18:28:28 2026 GMT
        Subject: CN=CC9521FB8A12653C306CD49329B119572F462BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:d5:af:1a:23:15:60:c3:32:d9:18:af:95:
                    59:de:a8:98:57:8d:9b:24:a2:3f:89:64:9e:59:15:
                    45:e6:6d:e5:1f:d9:fd:11:bf:dd:e5:53:16:bd:3a:
                    52:ae:bb:28:7d:3b:43:b8:af:98:ad:8e:3d:45:38:
                    4d:c1:15:42:e7:59:df:0a:14:4c:cc:73:96:c0:5a:
                    1d:8f:4c:88:15:1f:27:7b:0d:cb:80:8d:90:02:5c:
                    c0:7c:19:70:9b:c0:8b:85:23:1a:a1:c5:d4:c3:60:
                    05:14:77:d9:a6:8c:06:53:7e:91:61:5f:f1:46:81:
                    57:db:40:12:84:27:07:3e:69:4c:b4:7d:d9:a7:56:
                    4d:55:7a:72:77:d5:f7:a5:49:32:c2:13:3f:12:56:
                    a3:3c:09:2d:da:df:8e:9d:3e:aa:de:40:40:5f:26:
                    11:b5:6a:b0:4f:58:54:0e:ed:5f:89:96:c2:ad:57:
                    dd:db:83:60:55:f6:00:f2:c2:59:d4:20:95:03:40:
                    b8:e7:fe:0e:c8:89:aa:f0:0e:9c:4a:c6:89:fe:7b:
                    74:92:fc:c4:0d:fe:c6:9a:d1:6d:fd:f4:a7:c8:ff:
                    6e:bc:7d:b6:09:9d:eb:23:3c:10:36:bf:eb:a6:7d:
                    db:82:06:3c:0c:9a:60:ad:28:1b:87:b6:02:14:3f:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:95:21:FB:8A:12:65:3C:30:6C:D4:93:29:B1:19:57:2F:46:2B:EC
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:0f:ae:b7:34:2c:94:2f:f7:f6:41:bc:61:91:21:e2:c0:
         66:47:5c:45:e4:8a:fa:2d:b2:b5:18:93:a3:1d:95:0f:8a:f2:
         4b:3d:77:f9:5d:8d:6b:f1:03:bb:0d:9e:f5:54:c8:88:a9:e6:
         1b:90:d7:7b:6a:25:75:2b:fc:b4:73:41:99:8a:b2:56:6f:3f:
         2d:5f:4a:5c:8e:4b:67:75:b9:3a:df:99:98:98:3a:9a:3a:f8:
         81:ec:b4:4e:8b:4c:40:62:f4:fb:f8:5e:36:dd:c0:73:f4:cc:
         e6:d1:dc:a1:7c:68:e0:cc:b9:32:48:4e:5c:6c:c8:b9:35:55:
         79:02:16:fb:3b:c3:89:c8:46:80:28:36:8c:45:10:74:04:ee:
         d7:3e:60:69:c5:34:12:e4:eb:6f:40:a7:9d:ab:13:6e:f2:71:
         83:0b:fb:08:68:9f:79:87:93:75:98:5d:e0:d8:8d:69:99:77:
         26:69:c8:da:02:5b:ad:a6:65:59:45:12:06:e7:d1:39:a6:7e:
         55:3f:64:e3:9c:fb:51:ad:2e:46:01:1a:e9:18:37:08:c9:94:
         9a:f6:f4:12:b4:ed:0e:2d:0f:c3:18:48:f1:3f:e2:ce:5f:d0:
         75:df:be:90:f7:81:f2:f1:82:75:fe:66:25:e1:e5:67:07:33:
         63:ff:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:09 2025 by rpki-client