Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136302e302f32322d3234203d3e203237383435.roa
File:                     3139302e362e3136302e302f32322d3234203d3e203237383435.roa (raw, json)
Hash identifier:          rD7kpAjQ9CmrRBdA8R0uFpm9Vbl4g4EDdsVeTEv2gYM=
Subject key identifier:   E2:98:88:81:69:20:95:1E:4E:BF:D0:C6:E9:BA:DD:88:1B:DA:F1:7E
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       1C6B016CD762F7DA274B47FF6F69CA5239D02031
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136302e302f32322d3234203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:46 +0000
ROA not before:           Tue 04 Feb 2025 18:46:46 +0000
ROA not after:            Tue 03 Feb 2026 18:51:46 +0000
asID:                     27845
IP address blocks:        190.6.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6b:01:6c:d7:62:f7:da:27:4b:47:ff:6f:69:ca:52:39:d0:20:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:46 2025 GMT
            Not After : Feb  3 18:51:46 2026 GMT
        Subject: CN=E29888816920951E4EBFD0C6E9BADD881BDAF17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:63:e3:2b:f3:68:ad:3f:03:e5:c8:03:fc:
                    34:5a:53:57:87:b4:03:41:aa:37:c0:8b:5e:9e:07:
                    70:cc:74:2d:2c:36:1f:ff:97:63:59:5d:0b:5b:ae:
                    24:a9:02:7a:f2:f7:f1:17:43:16:92:73:e8:e7:03:
                    eb:b0:1e:49:6a:45:71:ce:1a:79:f0:68:a3:f1:38:
                    3a:d7:a9:da:89:19:08:8e:40:92:b3:46:aa:3e:db:
                    27:e2:7d:cd:51:97:2a:91:4e:14:98:e8:ed:92:b6:
                    6b:94:54:f0:f5:f5:4b:d5:50:27:40:41:de:b0:74:
                    19:71:b8:62:7a:14:77:d9:5b:e7:29:eb:6e:33:0e:
                    81:ee:46:2e:f2:3c:48:fa:98:cc:77:56:43:80:c9:
                    87:dc:3d:b9:55:af:d0:f6:09:31:72:35:31:3f:03:
                    43:77:e9:63:96:02:83:0f:12:c2:2b:0a:b5:b0:c7:
                    46:9e:0c:17:9a:08:c7:0c:9c:d1:be:b4:65:27:0b:
                    04:77:90:33:2f:cd:35:c1:d8:b1:9c:5f:71:2b:ad:
                    30:75:de:45:b0:5d:99:8f:dc:69:ee:2f:02:41:4e:
                    3f:98:e3:68:00:a9:71:22:b3:84:b2:48:d8:5a:f6:
                    8b:7a:ce:26:39:30:b6:70:ee:2b:7a:d8:85:c1:89:
                    eb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:88:81:69:20:95:1E:4E:BF:D0:C6:E9:BA:DD:88:1B:DA:F1:7E
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136302e302f32322d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:a5:7d:b4:08:3d:4f:bf:be:ff:1c:c3:ac:44:bb:a4:cd:
         d0:c6:c9:43:35:57:5e:d0:51:cb:07:98:c8:98:9e:6b:c1:48:
         92:87:6c:bc:d0:85:d8:fc:9c:f4:01:57:05:97:5d:5b:35:08:
         63:a7:f0:48:fa:03:56:0d:45:07:27:cd:ab:bc:88:bd:9a:99:
         4b:9a:3f:96:7b:de:95:72:28:74:9f:6d:59:c6:00:77:e6:8d:
         8b:5b:a2:84:7a:74:25:af:cf:f3:be:91:8b:a7:2a:be:b8:41:
         7c:9f:7d:2a:50:aa:2a:cc:42:12:4d:40:5c:78:47:25:36:87:
         a9:35:84:b2:35:b0:10:a6:60:c4:23:48:a0:ae:53:02:ce:05:
         11:36:8e:bf:4e:ec:98:fc:52:af:a7:d4:78:2c:95:5b:1d:b9:
         b8:a7:0e:3e:f1:4e:7c:55:e4:02:22:26:05:b0:b7:c0:1b:8f:
         49:94:d7:db:84:7c:93:f1:cc:18:17:65:b0:30:89:07:06:8c:
         77:e2:f5:dc:7a:dd:fd:8d:f2:cb:8d:59:22:04:f5:fb:90:a9:
         5e:2b:b6:c8:11:57:35:2d:ed:d6:02:be:06:c1:ee:1c:ec:74:
         0c:94:ff:f4:5c:89:9c:49:c6:0c:7b:48:a3:4d:40:c6:da:cd:
         7a:63:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:30 2025 by rpki-client