Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3139302e35352e302e302f31362d3234203d3e203237373437.roa
File:                     3139302e35352e302e302f31362d3234203d3e203237373437.roa (raw, json)
Hash identifier:          dlFjVUssddRnb6Nv4KMzf3O4vMpup1/29MTmDF5F/Q4=
Subject key identifier:   C4:B9:9F:A7:4C:AF:CF:02:E2:7D:3E:9A:40:3D:FE:9D:E5:C7:6B:75
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       7DF146209715455935C3B6825C7D3E75BB3F64DD
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3139302e35352e302e302f31362d3234203d3e203237373437.roa
Signing time:             Tue 04 Feb 2025 18:34:50 +0000
ROA not before:           Tue 04 Feb 2025 18:29:50 +0000
ROA not after:            Tue 03 Feb 2026 18:34:50 +0000
asID:                     27747
IP address blocks:        190.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f1:46:20:97:15:45:59:35:c3:b6:82:5c:7d:3e:75:bb:3f:64:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Feb  4 18:29:50 2025 GMT
            Not After : Feb  3 18:34:50 2026 GMT
        Subject: CN=C4B99FA74CAFCF02E27D3E9A403DFE9DE5C76B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:43:b6:d1:9e:60:89:9c:d9:47:f3:26:ae:de:
                    c1:14:4d:8c:c7:1b:50:cc:50:34:4a:bd:e3:55:5f:
                    db:e3:b8:f2:9e:ab:c9:07:17:52:6a:42:38:dc:f1:
                    8d:7b:61:df:c5:ef:2d:94:0b:c1:8e:3e:c0:3c:2a:
                    e0:cd:56:c1:48:6e:7f:b8:58:1a:5d:b8:6f:2d:de:
                    54:d7:6d:67:0f:0e:ac:13:fb:67:6a:ae:cf:86:91:
                    4c:29:c4:db:ec:bd:af:b6:e4:66:7a:7f:7a:22:c1:
                    37:8c:f8:86:80:df:7c:80:4a:05:f7:ce:7b:c2:77:
                    ad:61:af:4b:87:90:0e:e7:32:95:6f:a2:82:7b:3c:
                    2e:a3:4b:20:b0:68:25:a7:5f:27:21:97:48:ef:9e:
                    0f:0c:ec:d5:58:a3:77:f4:43:3f:81:6a:11:12:ed:
                    d7:e2:b4:1b:c9:8e:9b:3a:95:35:24:68:b8:ad:35:
                    d1:d1:46:46:e3:6b:32:f0:d1:19:9e:79:5e:63:a9:
                    ba:35:92:62:4d:3d:95:f7:01:d3:91:7a:d7:01:99:
                    ba:1a:9c:34:e1:a2:4d:e4:33:91:00:d0:e9:3a:18:
                    fb:5d:43:5e:6f:49:5f:dc:bb:42:53:25:80:99:d0:
                    ba:0c:a1:cc:66:7e:f9:e8:0a:4b:b2:5b:b7:95:6c:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B9:9F:A7:4C:AF:CF:02:E2:7D:3E:9A:40:3D:FE:9D:E5:C7:6B:75
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3139302e35352e302e302f31362d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.55.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:31:2c:32:23:7f:3b:b1:d3:f7:7d:c1:2a:9a:3e:6d:87:43:
         d1:44:74:62:2a:28:a1:88:d8:d8:2e:3c:0d:b2:b9:21:ee:4b:
         f6:47:40:2b:a2:3b:30:d6:94:4c:08:c8:2c:23:a3:5b:b9:17:
         c4:a7:8e:85:f5:f9:79:bd:df:9e:45:51:95:98:fb:74:bb:ad:
         dc:33:56:67:10:39:6c:16:49:d5:a8:dd:be:e1:af:b4:cf:29:
         ec:7e:b3:a0:55:15:88:02:f0:07:0b:62:5e:84:d5:0a:0c:2c:
         5d:c7:2f:94:23:b9:5e:63:28:99:a0:5b:4d:18:af:d4:52:13:
         4f:40:48:47:09:65:6a:55:81:8d:7d:c7:3c:50:e4:df:4c:49:
         57:ce:86:32:6c:f6:36:9f:c9:23:39:60:08:ae:0a:56:3b:9e:
         1f:9e:c6:8b:2b:57:78:83:f0:01:67:6e:fe:c8:4f:63:b0:2b:
         b2:9f:12:08:3f:c8:8c:db:26:3c:ac:de:00:ce:8e:f2:8d:db:
         f8:0f:0e:e5:dd:23:b3:44:bb:bc:77:30:34:fd:0c:7b:66:b7:
         48:af:04:f5:76:cb:75:0a:b1:c8:b2:56:66:7f:39:b9:a3:34:
         9e:80:c3:ff:72:f1:e0:01:d9:9e:92:a7:00:8b:c1:56:8c:4a:
         02:66:cb:c2
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUffFGIJcVRVk1w7aCXH0+dbs/ZN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMwOTk2QjJDQTUxNjlDRUEyQ0U1Qjk5RUFFMjREQkVD
REEzN0M4OTAeFw0yNTAyMDQxODI5NTBaFw0yNjAyMDMxODM0NTBaMDMxMTAvBgNV
BAMTKEM0Qjk5RkE3NENBRkNGMDJFMjdEM0U5QTQwM0RGRTlERTVDNzZCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQ7bRnmCJnNlH8yau3sEUTYzH
G1DMUDRKveNVX9vjuPKeq8kHF1JqQjjc8Y17Yd/F7y2UC8GOPsA8KuDNVsFIbn+4
WBpduG8t3lTXbWcPDqwT+2dqrs+GkUwpxNvsva+25GZ6f3oiwTeM+IaA33yASgX3
znvCd61hr0uHkA7nMpVvooJ7PC6jSyCwaCWnXychl0jvng8M7NVYo3f0Qz+BahES
7dfitBvJjps6lTUkaLitNdHRRkbjazLw0RmeeV5jqbo1kmJNPZX3AdORetcBmboa
nDThok3kM5EA0Ok6GPtdQ15vSV/cu0JTJYCZ0LoMocxmfvnoCkuyW7eVbIk5AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUxLmfp0yvzwLifT6aQD3+neXHa3UwHwYDVR0j
BBgwFoAULAmWsspRac6izluZ6uJNvs2jfIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNURFMTAxOTNFQTY5ODI1QTgwRDY2RkY2Q0RBNkEwNzUx
NUU4NjI5MzUwNkRBQTlCNTU5Q0Y3NDJFOEFEODQ3LzAvMkMwOTk2QjJDQTUxNjlD
RUEyQ0U1Qjk5RUFFMjREQkVDREEzN0M4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzA5OTZCMkNBNTE2OUNFQTJD
RTVCOTlFQUUyNERCRUNEQTM3Qzg5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVERTEwMTkzRUE2OTgyNUE4MEQ2NkZGNkNEQTZBMDc1MTVFODYyOTM1
MDZEQUE5QjU1OUNGNzQyRThBRDg0Ny8wLzMxMzkzMDJlMzUzNTJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMjM3MzczNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAvjcwDQYJKoZI
hvcNAQELBQADggEBAHUxLDIjfzux0/d9wSqaPm2HQ9FEdGIqKKGI2NguPA2yuSHu
S/ZHQCuiOzDWlEwIyCwjo1u5F8SnjoX1+Xm9355FUZWY+3S7rdwzVmcQOWwWSdWo
3b7hr7TPKex+s6BVFYgC8AcLYl6E1QoMLF3HL5QjuV5jKJmgW00Yr9RSE09ASEcJ
ZWpVgY19xzxQ5N9MSVfOhjJs9jafySM5YAiuClY7nh+exosrV3iD8AFnbv7IT2Ow
K7KfEgg/yIzbJjys3gDOjvKN2/gPDuXdI7NEu7x3MDT9DHtmt0ivBPV2y3UKsciy
VmZ/ObmjNJ6Aw/9y8eAB2Z6SpwCLwVaMSgJmy8I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:11:08 2025 by rpki-client