Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137302e302f32332d3234203d3e203237383435.roa
File:                     3139302e362e3137302e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          BdSlt/GfK1n9K8QN3QtuPxw73dyXzsbPdvBuko7bCMc=
Subject key identifier:   49:46:A2:5A:EF:82:81:2E:1D:CD:0F:91:B9:86:12:39:B3:74:E9:3B
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       11E58122D6AC0B7F596938C6E203F4D142F4165E
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137302e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:34 +0000
ROA not before:           Tue 05 Mar 2024 17:41:34 +0000
ROA not after:            Tue 04 Mar 2025 17:46:34 +0000
asID:                     27845
IP address blocks:        190.6.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e5:81:22:d6:ac:0b:7f:59:69:38:c6:e2:03:f4:d1:42:f4:16:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:34 2024 GMT
            Not After : Mar  4 17:46:34 2025 GMT
        Subject: CN=4946A25AEF82812E1DCD0F91B9861239B374E93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:1c:90:82:89:2a:44:20:14:d9:a7:02:a3:
                    d2:f6:63:aa:01:26:fd:a1:62:93:ba:64:09:d1:8e:
                    f4:66:47:66:34:d6:70:48:09:29:7f:fa:23:cc:a7:
                    d2:b2:49:ee:c9:cb:b6:00:04:26:ae:b1:52:04:41:
                    fc:83:94:ad:2d:66:2b:34:17:36:17:d9:4d:02:da:
                    28:2c:f9:59:72:61:ec:ba:20:4a:d5:14:6d:2f:4b:
                    ed:6a:e6:c4:70:19:e0:43:a9:b7:05:e2:e7:1d:48:
                    7f:6f:05:bb:c7:dd:60:52:c7:74:b5:9d:d5:3d:45:
                    c4:9d:31:9a:c5:d5:fd:07:4f:41:d5:8d:7d:9f:a8:
                    fa:63:d3:50:10:27:4c:a8:09:1e:75:a0:75:48:f0:
                    e1:a3:16:a9:ab:e6:08:15:e2:11:ba:f1:fe:22:76:
                    75:14:79:55:e0:b7:fc:4b:46:31:69:36:8a:7f:86:
                    6f:de:53:fb:39:60:87:89:e6:ff:5c:97:73:d4:66:
                    96:e4:c3:e6:e5:a1:44:7a:2b:27:b7:cd:47:ba:3d:
                    0b:3d:f1:f1:aa:7d:ee:30:be:35:82:1b:85:fc:85:
                    ab:41:db:bb:1d:aa:98:89:a2:cd:05:cc:32:29:9a:
                    64:37:15:1b:85:a7:4e:10:a6:d8:fe:8d:8e:d7:79:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:46:A2:5A:EF:82:81:2E:1D:CD:0F:91:B9:86:12:39:B3:74:E9:3B
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137302e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:aa:ef:3f:3c:98:95:d8:e4:81:e0:aa:a0:a3:0a:e8:26:8b:
         fa:04:a6:1c:01:62:74:93:06:5a:02:4a:57:26:37:ad:ee:14:
         b1:53:c8:b8:e6:14:f7:8b:ba:53:94:1d:0b:85:a2:65:fb:b5:
         91:34:d4:54:06:45:9a:4a:df:98:24:9d:7f:57:51:00:f8:ef:
         53:3a:e5:3e:d0:8b:7d:ec:3b:52:7c:b5:4c:ef:ff:5c:ec:e6:
         d0:71:00:6f:eb:d1:8b:cd:a0:f8:e2:3f:cf:46:2e:04:c3:62:
         46:14:59:31:a2:42:c8:37:9f:8c:29:03:4c:bb:d0:d8:08:14:
         7b:3c:a5:73:60:03:12:81:84:39:b4:32:a9:f8:5c:d5:c2:14:
         f5:29:c3:35:39:da:be:e0:17:16:43:20:e6:03:4d:9c:ed:d3:
         5b:ed:c6:5f:ff:1e:f0:5c:4e:c3:67:73:3c:aa:fb:7d:04:46:
         bc:a7:51:37:ac:a0:62:56:01:de:f4:a2:d5:da:2f:d6:ea:cc:
         71:18:12:e9:2f:74:96:b2:24:8f:30:4c:d3:03:c2:fd:05:da:
         bd:db:d1:38:1b:d0:a8:54:74:c0:f8:a2:f8:77:fd:ec:9a:05:
         9a:b8:77:a5:7d:27:cc:37:d9:a7:ad:81:1e:b5:f7:0c:78:78:
         df:47:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:05:53 2024 by rpki-client on console-fra.rpki-client.org