Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136302e302f32322d3234203d3e203237383435.roa
File:                     3139302e362e3136302e302f32322d3234203d3e203237383435.roa (raw, json)
Hash identifier:          CxXL8kxiJNxU9i1DeGuOtiyguI4yx5pY5A9J7sIjhyM=
Subject key identifier:   C8:29:47:D5:3B:8D:33:A3:B5:18:9C:34:9B:2F:BC:01:FA:EE:1B:CC
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       2BC85C6F7C62558C8D173043EE8F9684B09AD5CD
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136302e302f32322d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     27845
IP address blocks:        190.6.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c8:5c:6f:7c:62:55:8c:8d:17:30:43:ee:8f:96:84:b0:9a:d5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=C82947D53B8D33A3B5189C349B2FBC01FAEE1BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:9f:b3:69:7b:48:e7:85:3d:9f:6d:75:4a:
                    04:7d:9c:30:60:a7:6b:89:d2:45:6a:88:e0:97:8b:
                    91:88:40:d4:7f:ce:05:41:2e:76:7e:ce:ee:f9:40:
                    fa:6f:d7:20:10:da:1b:29:05:23:d9:57:40:ab:5d:
                    5c:ec:73:c0:a4:6f:a0:59:13:c8:37:33:6c:81:e8:
                    08:37:b4:60:48:f7:bb:6a:da:d9:0c:6b:65:e2:e8:
                    d8:3c:9b:ec:1c:dc:89:75:34:51:df:8d:f3:1d:d5:
                    26:87:da:60:8c:b5:5e:6b:4d:12:50:5e:df:db:64:
                    b4:71:2f:d6:02:af:4f:28:4c:ef:c5:e6:de:f1:e7:
                    23:5b:da:10:11:cb:45:34:f0:5a:88:49:8c:0d:5e:
                    22:ec:fe:2c:bc:96:67:c6:dc:9b:f9:6f:d0:e6:fc:
                    27:9f:6f:11:f5:de:22:d9:1d:2e:c8:06:90:6b:6f:
                    09:9e:0d:40:e4:f2:fa:ba:cb:84:51:c2:8d:02:2c:
                    e4:bb:f6:b7:9e:c6:22:45:b3:fb:8c:4e:1a:15:67:
                    04:e4:3a:fa:b2:a0:ad:02:c6:ea:5a:d6:21:89:b9:
                    f6:9c:b5:f5:a1:71:21:06:86:e4:14:d8:d0:c4:01:
                    b0:43:18:98:d8:2c:bc:6d:00:bc:bb:f1:a2:47:3e:
                    5e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:29:47:D5:3B:8D:33:A3:B5:18:9C:34:9B:2F:BC:01:FA:EE:1B:CC
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136302e302f32322d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:08:05:9b:c6:37:2c:9f:e2:1b:45:71:b9:76:d6:53:76:66:
         e5:72:30:65:30:37:fb:d1:45:2f:2b:ba:c0:2b:91:9a:5c:77:
         08:75:aa:9e:30:a9:3d:70:b6:74:de:e9:dd:0d:f9:f3:d9:c5:
         03:26:06:6d:37:05:f4:5f:7e:b5:dd:4d:be:8f:a0:10:96:87:
         b1:b5:67:59:c3:44:19:8a:b3:f6:61:55:dd:89:fe:a3:c1:51:
         29:74:f3:fa:78:80:22:44:8a:5b:dd:8e:4f:af:a6:d2:01:dc:
         4d:fa:fc:eb:fa:6b:ed:8b:f1:c0:2e:72:c2:c0:e9:ca:89:06:
         ef:0d:22:d2:4d:1f:11:fe:20:5f:49:be:24:3b:56:e2:55:3a:
         fc:71:7e:d0:4c:93:8c:a0:30:89:63:55:d3:e3:75:50:91:ac:
         6c:a2:23:27:40:2c:3d:51:ce:bb:5e:b8:ec:66:b7:9f:29:90:
         4b:6b:bc:6c:cf:c2:e3:23:a8:77:b3:83:bf:a7:29:b6:a7:5c:
         a6:44:c2:cd:15:4c:03:4c:e6:e0:17:87:8a:06:40:c2:84:96:
         03:ff:7d:21:ed:0c:d7:99:d6:3a:4f:53:8b:65:a8:e3:88:1a:
         c4:fe:ec:e9:4b:d0:75:fe:5b:6d:8b:bc:2d:a6:38:dc:fb:d9:
         06:f6:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 20:51:09 2024 by rpki-client on console-fra.rpki-client.org