Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137322e302f32322d3234203d3e203237383435.roa
File:                     3139302e362e3137322e302f32322d3234203d3e203237383435.roa (raw, json)
Hash identifier:          94F/0/8J6eekGzWsTgy/ecDLRRBz5tTy6NzW8BvtHew=
Subject key identifier:   CA:C7:D4:95:71:F8:91:D9:E5:B4:66:BE:E2:0C:9F:9C:0C:43:25:A1
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       7AABF6599AFB7C12D9D4D7EBE1AAD8FFC7483C32
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137322e302f32322d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:37 +0000
ROA not before:           Tue 05 Mar 2024 17:41:37 +0000
ROA not after:            Tue 04 Mar 2025 17:46:37 +0000
asID:                     27845
IP address blocks:        190.6.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ab:f6:59:9a:fb:7c:12:d9:d4:d7:eb:e1:aa:d8:ff:c7:48:3c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:37 2024 GMT
            Not After : Mar  4 17:46:37 2025 GMT
        Subject: CN=CAC7D49571F891D9E5B466BEE20C9F9C0C4325A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:e3:72:11:98:c4:8a:b0:d9:47:eb:8d:8f:
                    fd:51:a1:2d:16:89:fe:13:0d:8d:11:da:4a:74:f4:
                    99:c3:e1:79:48:be:6d:b3:53:e9:b8:d1:fa:27:47:
                    78:c4:f3:84:9d:25:f1:09:26:b4:22:1c:bc:99:fe:
                    cf:0c:31:1f:14:4a:43:57:3b:a6:99:74:82:13:af:
                    e3:50:9e:ab:de:e2:13:3d:08:d2:c8:b8:d1:cc:4b:
                    fe:5e:8f:34:c4:5a:22:22:ea:7f:f1:d0:2b:dd:ca:
                    44:23:94:3d:0b:03:fc:c0:58:8c:54:81:9e:be:d2:
                    df:2e:3c:30:c3:24:90:6a:dd:83:47:cf:81:bf:ba:
                    fe:40:59:c8:17:18:0a:18:80:16:72:a4:2a:f6:2f:
                    f5:bf:dc:3c:05:20:2f:a2:d0:82:4a:b7:b6:f6:55:
                    ea:20:95:bf:75:fb:78:ac:ad:95:7f:42:bb:7c:b5:
                    f6:65:39:4a:5f:bf:e5:db:09:26:94:e2:34:5c:26:
                    19:2a:56:26:69:52:eb:9b:d8:3d:57:21:b2:fa:83:
                    e5:d7:66:d9:18:56:d4:f6:63:46:0f:8e:a1:cf:38:
                    5f:72:a2:ff:79:ab:41:42:c1:eb:22:9c:c0:48:b6:
                    19:0a:5a:73:37:bf:75:20:ef:9f:c0:60:fe:a9:64:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C7:D4:95:71:F8:91:D9:E5:B4:66:BE:E2:0C:9F:9C:0C:43:25:A1
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137322e302f32322d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:da:89:28:87:1b:35:fb:45:f9:bb:58:b0:91:3e:3c:97:f9:
         d1:86:a3:ba:59:72:d6:a7:95:e5:bf:63:33:b4:0d:2b:97:9c:
         c4:01:b9:ee:81:d3:94:b3:22:6e:27:ed:8e:b3:a3:e5:ef:c2:
         a2:a2:94:b7:a1:f9:c9:3b:b3:15:ed:7b:25:df:98:f8:98:a3:
         a6:32:81:e2:7c:0d:76:1b:2b:23:84:fe:2f:ac:d3:83:ac:5c:
         d3:5f:75:e8:ac:ca:db:16:e1:b7:ec:58:b4:8b:53:79:59:25:
         b2:3a:49:2b:2c:5e:6f:31:17:ab:d6:d7:c4:02:c9:fc:49:5c:
         96:6d:c6:1b:e4:6a:32:4d:36:1d:0a:12:f2:2f:69:01:bd:bf:
         3e:6c:aa:e3:b7:1d:68:13:d4:48:24:e7:72:51:c1:8f:3d:88:
         c4:41:27:ba:bb:71:2b:92:35:7b:36:92:86:38:db:e3:ea:aa:
         89:3e:9a:6b:da:c4:56:76:d9:db:e6:6f:fb:61:5d:30:af:64:
         e7:c9:ec:09:55:bd:70:ec:58:bb:a7:58:89:f6:93:06:f3:2f:
         73:cb:b1:8c:04:2d:9a:e0:83:8c:e8:f6:11:9f:61:81:0f:b0:
         0b:a5:43:22:a8:97:1e:8a:32:cf:ea:aa:ca:a9:55:dc:c8:e4:
         af:62:e4:d3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeqv2WZr7fBLZ1Nfr4arY/8dIPDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVEQjBEMTdCMTU3QkY2QUQwOEJBQzI1OTg4NDg5QUZE
NTVCODVCQzAeFw0yNDAzMDUxNzQxMzdaFw0yNTAzMDQxNzQ2MzdaMDMxMTAvBgNV
BAMTKENBQzdENDk1NzFGODkxRDlFNUI0NjZCRUUyMEM5RjlDMEM0MzI1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b+NyEZjEirDZR+uNj/1RoS0W
if4TDY0R2kp09JnD4XlIvm2zU+m40fonR3jE84SdJfEJJrQiHLyZ/s8MMR8USkNX
O6aZdIITr+NQnqve4hM9CNLIuNHMS/5ejzTEWiIi6n/x0CvdykQjlD0LA/zAWIxU
gZ6+0t8uPDDDJJBq3YNHz4G/uv5AWcgXGAoYgBZypCr2L/W/3DwFIC+i0IJKt7b2
Veoglb91+3isrZV/Qrt8tfZlOUpfv+XbCSaU4jRcJhkqViZpUuub2D1XIbL6g+XX
ZtkYVtT2Y0YPjqHPOF9yov95q0FCwesinMBIthkKWnM3v3Ug75/AYP6pZJpBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUysfUlXH4kdnltGa+4gyfnAxDJaEwHwYDVR0j
BBgwFoAUVdsNF7FXv2rQi6wlmISJr9VbhbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTlDQjgxN0M5RTdDNTQzNTJENjRENTU0OEU2QjVBMTE5
MTkyREY3RUMyRDhEODFFMzc5QzQ5MjRCNzhBMUZDLzAvNTVEQjBEMTdCMTU3QkY2
QUQwOEJBQzI1OTg4NDg5QUZENTVCODVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NURCMEQxN0IxNTdCRjZBRDA4
QkFDMjU5ODg0ODlBRkQ1NUI4NUJDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U5Q0I4MTdDOUU3QzU0MzUyRDY0RDU1NDhFNkI1QTExOTE5MkRGN0VD
MkQ4RDgxRTM3OUM0OTI0Qjc4QTFGQy8wLzMxMzkzMDJlMzYyZTMxMzczMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczODM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+BqwwDQYJ
KoZIhvcNAQELBQADggEBAMvaiSiHGzX7Rfm7WLCRPjyX+dGGo7pZctanleW/YzO0
DSuXnMQBue6B05SzIm4n7Y6zo+XvwqKilLeh+ck7sxXteyXfmPiYo6YygeJ8DXYb
KyOE/i+s04OsXNNfdeisytsW4bfsWLSLU3lZJbI6SSssXm8xF6vW18QCyfxJXJZt
xhvkajJNNh0KEvIvaQG9vz5squO3HWgT1Egk53JRwY89iMRBJ7q7cSuSNXs2koY4
2+Pqqok+mmvaxFZ22dvmb/thXTCvZOfJ7AlVvXDsWLunWIn2kwbzL3PLsYwELZrg
g4zo9hGfYYEPsAulQyKolx6KMs/qqsqpVdzI5K9i5NM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:20 2024 by rpki-client on console-ams.rpki-client.org