Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136342e302f32332d3233203d3e203237383435.roa
File:                     3139302e362e3136342e302f32332d3233203d3e203237383435.roa (raw, json)
Hash identifier:          rfWpu3btOzuQHVQL8orXkqm9CNaA5xvjY3BzkNPao2I=
Subject key identifier:   90:6D:B9:3E:09:27:C2:90:D9:F3:F5:75:1F:19:F4:BA:8D:7E:1A:D4
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       07930FCACF2301EA4A50EF83175D6E4E1530760E
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136342e302f32332d3233203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     27845
IP address blocks:        190.6.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:93:0f:ca:cf:23:01:ea:4a:50:ef:83:17:5d:6e:4e:15:30:76:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=906DB93E0927C290D9F3F5751F19F4BA8D7E1AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:08:e7:89:41:8e:32:8a:0a:ab:ca:dc:9c:80:
                    f4:b6:21:53:3b:0b:8d:49:fe:ea:8b:f2:bb:91:a8:
                    18:f4:c2:0d:75:e8:45:e0:f7:57:3b:96:92:28:f7:
                    b2:f9:e2:67:f3:bd:40:25:9a:f9:9d:49:d6:9d:e1:
                    b9:0e:7f:05:7a:12:49:10:69:1a:52:d4:27:a4:89:
                    22:ce:43:42:06:90:02:51:c9:bd:29:d9:0d:8e:35:
                    d4:b5:a5:5f:c9:a1:fc:25:fc:9a:bf:46:b8:4e:1d:
                    ff:d3:19:8a:ca:cf:1c:18:56:b0:3b:5e:98:05:60:
                    a1:4e:a1:cc:89:a4:8e:d6:97:6e:fb:0d:8e:5a:73:
                    8f:f2:ae:d4:a4:b1:94:a8:87:6d:85:25:1f:0f:cb:
                    32:c7:e0:5b:0f:77:b5:69:48:37:66:d9:9d:8c:e8:
                    d0:d0:3b:26:29:5c:91:48:02:9a:f6:19:b7:25:32:
                    3b:c9:df:23:bb:0c:94:38:82:31:08:17:d6:e9:54:
                    35:1f:d8:67:ae:dd:7a:01:6f:f8:1e:83:75:1f:2c:
                    11:13:44:92:e2:15:11:b0:85:96:f3:9f:ed:b0:d8:
                    7a:73:af:93:4e:76:35:25:16:af:8d:e1:73:b1:35:
                    22:52:42:d9:77:59:f8:29:25:d2:e5:63:fc:83:99:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:B9:3E:09:27:C2:90:D9:F3:F5:75:1F:19:F4:BA:8D:7E:1A:D4
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136342e302f32332d3233203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:40:cf:40:74:4b:a9:21:a4:d1:88:8d:ff:09:67:4a:23:
         17:fd:1e:38:4b:2b:0b:98:ac:b8:6d:14:59:f0:58:8e:3e:75:
         c8:55:54:f9:58:5d:22:3b:4f:4e:5b:1a:59:ef:4f:4c:5e:fe:
         2a:db:76:cb:2c:6f:89:d0:b3:b0:d3:bc:d2:14:cf:5e:fb:5a:
         77:33:37:c6:33:b8:cf:50:ed:5d:b3:60:d3:10:2a:fb:62:3b:
         46:a1:7a:80:ce:3c:c8:6e:30:41:32:15:74:7c:06:62:27:a6:
         e4:71:4f:42:f7:6b:61:f6:56:e9:a3:68:6e:25:58:2e:0a:0a:
         9e:ab:ac:dc:c5:01:81:ad:3c:7c:37:74:b4:89:74:df:69:de:
         65:81:bd:8e:24:70:33:ed:b1:26:f7:f9:4e:e1:da:5b:55:27:
         55:9f:61:92:77:d3:fa:f5:c6:10:7d:06:c4:fc:71:ea:22:e7:
         84:44:bb:8a:49:75:4e:5f:28:e0:41:48:56:f5:58:c5:c1:80:
         6f:68:72:61:f4:83:db:89:02:c1:ec:d6:f0:72:8d:cf:28:d8:
         95:42:52:5d:41:ca:3b:ff:02:e9:26:c6:07:e6:36:90:42:2b:
         5d:74:e9:8e:73:8c:a5:6c:cf:46:df:9f:a8:25:ce:7d:e8:fe:
         02:e8:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org