Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37392e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37392e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          dQ12X4A0cit9DwF7NcTF7enNpsp990byj7cyymWUWgk=
Subject key identifier:   16:67:7C:8E:74:66:F2:FE:3C:EC:7B:56:F6:2C:9E:DE:17:10:B9:5B
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       5CF840B98668F2E9D2EBEBE1028A57AC47BC257E
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37392e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 05 Mar 2024 18:07:12 +0000
ROA not before:           Tue 05 Mar 2024 18:02:12 +0000
ROA not after:            Tue 04 Mar 2025 18:07:12 +0000
asID:                     263209
IP address blocks:        191.97.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:40:b9:86:68:f2:e9:d2:eb:eb:e1:02:8a:57:ac:47:bc:25:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Mar  5 18:02:12 2024 GMT
            Not After : Mar  4 18:07:12 2025 GMT
        Subject: CN=16677C8E7466F2FE3CEC7B56F62C9EDE1710B95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:47:ae:94:a0:a1:9a:5f:9b:0d:cf:02:31:ff:
                    9b:e6:bb:75:2b:97:1c:d7:d1:cf:e5:83:c6:b2:22:
                    ee:b1:e7:d4:d3:cf:d6:9d:c2:7d:c9:cb:3a:a3:b7:
                    04:5e:c4:49:5d:08:73:e2:8a:76:87:21:92:a5:99:
                    bc:c7:ab:69:e1:99:71:d1:81:05:9d:27:89:30:ef:
                    fa:aa:22:eb:95:19:20:2f:25:ed:f0:19:a1:fb:83:
                    a1:ee:97:91:79:37:58:05:a0:ed:1b:1a:f8:17:31:
                    56:d0:78:d8:b1:7f:cd:58:0e:1e:94:0b:a3:67:4c:
                    98:2e:d5:3b:2c:51:48:fa:e7:a3:e5:dc:4e:1f:91:
                    0c:e2:28:1c:0f:d9:38:2f:1d:e8:76:14:95:d5:05:
                    7b:b6:ee:38:80:98:95:fd:bf:ab:b8:86:a8:66:0f:
                    b4:96:3f:04:52:31:00:16:c6:a4:64:e9:73:e0:e3:
                    72:35:ad:1c:8f:8c:0f:c1:9a:0a:87:bb:7f:9e:07:
                    85:38:d2:96:a4:df:ca:be:27:f8:02:62:50:5a:04:
                    9c:31:7a:bb:d2:b9:2c:3b:c7:fe:ff:9d:39:5b:aa:
                    bb:5f:4d:3f:cc:b3:22:94:b4:fe:26:65:3f:f6:9b:
                    99:9a:07:ca:bb:eb:ba:e9:81:3c:e1:4c:f3:0e:b9:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:7C:8E:74:66:F2:FE:3C:EC:7B:56:F6:2C:9E:DE:17:10:B9:5B
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37392e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:41:7b:d3:fd:30:89:6b:31:f5:2d:b9:35:c1:09:1c:0a:
         34:ef:01:7f:2c:0b:9d:25:f9:d6:fe:41:87:c5:5a:a6:b0:b6:
         f0:ec:5f:31:61:88:eb:44:a9:c0:92:d4:36:24:12:b0:3b:ae:
         ea:31:85:0a:23:6f:a1:c1:45:43:d3:08:2b:c7:c2:07:8b:ac:
         c9:72:39:84:d6:2b:13:3d:2f:a3:22:e0:ef:84:6f:db:a8:39:
         38:cc:b0:7a:d6:ad:c3:a5:d4:96:bd:05:0a:0e:6a:e4:b4:14:
         ba:e1:21:03:2a:0e:7e:1d:40:94:38:89:de:9e:bd:d3:40:3f:
         49:92:c3:17:fb:18:ed:22:e4:82:57:9d:aa:90:97:06:54:88:
         04:c0:2b:48:08:ff:44:4e:22:d5:55:7c:4f:c1:da:9f:1b:38:
         3d:fd:59:80:bf:6e:59:ee:42:ac:6b:74:cc:a3:68:d8:1e:9e:
         47:96:ef:9e:8c:84:1e:92:d3:57:65:e9:8a:1d:86:f5:fb:2a:
         51:35:ed:76:1c:b7:84:33:64:8d:e5:6c:7c:4a:ff:b2:34:62:
         c4:b1:42:bd:65:d2:72:f5:3f:b5:27:a6:4e:9b:76:e2:3e:b6:
         36:1c:78:6f:79:8d:16:17:4d:9e:a5:2d:29:bc:c6:7d:b0:89:
         04:dc:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 01:14:44 2024 by rpki-client on console-ams.rpki-client.org