Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137362e302f32302d3230203d3e203237383435.roa
File:                     3139302e362e3137362e302f32302d3230203d3e203237383435.roa (raw, json)
Hash identifier:          bbAJswxDHgS00bKHS1g5bOztWzJG0Yj4CmRffWBkdIs=
Subject key identifier:   FC:F5:D7:95:5E:8D:3D:0A:C7:5A:A1:E3:A1:86:FD:6C:5A:75:E9:85
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       67175315F691C79212214135C6CB9F0C83C4E491
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137362e302f32302d3230203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:37 +0000
ROA not before:           Tue 05 Mar 2024 17:41:37 +0000
ROA not after:            Tue 04 Mar 2025 17:46:37 +0000
asID:                     27845
IP address blocks:        190.6.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:17:53:15:f6:91:c7:92:12:21:41:35:c6:cb:9f:0c:83:c4:e4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:37 2024 GMT
            Not After : Mar  4 17:46:37 2025 GMT
        Subject: CN=FCF5D7955E8D3D0AC75AA1E3A186FD6C5A75E985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:2d:91:5c:44:7f:18:84:77:b8:28:37:b6:
                    cc:dc:ec:9b:81:c6:66:ac:e7:89:66:4c:46:c7:b7:
                    58:01:50:bf:dc:22:8d:e8:db:de:8c:0f:79:47:de:
                    4d:3d:5c:aa:da:64:bd:10:79:75:3f:2a:f8:c6:bd:
                    fd:72:74:43:e5:3c:af:d6:87:c9:c2:6f:98:0c:96:
                    0d:24:fb:92:be:85:98:ac:b9:ac:c3:c3:24:f5:dd:
                    8a:b3:48:1c:b3:20:93:6e:d4:9b:a8:e2:c4:b5:eb:
                    e3:47:d5:26:f5:c0:2a:c3:b8:47:ac:5b:b4:fb:ce:
                    cd:ca:39:b7:89:78:90:66:0a:a0:21:a1:5f:96:4f:
                    c2:08:7c:a3:ab:f8:96:cd:48:89:76:dc:48:95:d2:
                    18:b5:fd:34:30:d9:49:8d:d0:fb:c2:f5:0f:01:36:
                    e1:3f:9f:1c:bf:8c:42:ab:91:ec:34:8f:18:ec:7a:
                    18:65:35:06:67:9b:d7:b6:fb:d3:15:64:9c:03:7f:
                    39:3b:6d:e8:3f:ca:d7:c4:6c:bd:99:a9:c5:6c:96:
                    41:32:13:47:b9:c2:ee:c6:6c:d8:16:d4:60:29:72:
                    bc:0e:c4:5c:59:3c:d4:70:1b:fe:dd:2b:6a:7a:14:
                    40:10:e9:bf:aa:2a:f3:4b:86:65:1c:f7:c6:50:3f:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:D7:95:5E:8D:3D:0A:C7:5A:A1:E3:A1:86:FD:6C:5A:75:E9:85
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137362e302f32302d3230203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d8:21:52:d1:c7:43:94:e6:aa:58:32:f8:3a:bd:46:e5:2b:0a:
         49:02:90:2a:59:a2:ac:eb:60:c4:2c:f0:b2:97:bb:0f:0f:62:
         1b:cb:e8:a6:13:40:de:8f:3e:54:b5:e8:d1:d3:ad:1b:c0:8d:
         a5:26:13:14:26:f1:7d:e9:bf:66:82:24:25:ec:79:05:0c:7d:
         a2:08:6a:84:81:fe:3a:83:3c:83:17:f2:a3:75:f5:c6:14:a6:
         36:73:47:66:7a:83:2b:e1:3f:2a:01:9c:33:70:75:b0:a4:f7:
         1c:84:5f:8f:66:40:2b:e7:4e:e9:99:7b:39:0d:4f:bb:8f:cb:
         a9:ee:c6:28:5e:80:05:b3:89:4c:7f:ca:76:32:2b:d8:ed:2d:
         65:6a:b3:38:d5:fc:b4:c8:be:bf:61:f9:50:00:35:b9:2e:b1:
         df:e0:26:cb:44:55:e9:12:b2:e6:b7:3d:bb:83:ef:39:69:8f:
         6f:0f:9d:de:7e:82:84:56:20:6c:b3:b8:62:6f:96:5f:c2:64:
         c8:40:bc:93:e7:bd:48:a2:ce:ca:24:30:c5:a9:f0:9c:0e:8e:
         3a:d4:ba:6c:37:a6:dd:8d:15:1d:8f:36:d6:69:f3:b5:2d:1b:
         08:f2:09:ea:d8:eb:84:02:9f:b9:9c:b4:58:aa:ea:ac:71:df:
         58:c3:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:43 2024 by rpki-client on console-fra.rpki-client.org