Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa
File:                     3139302e39372e3139362e302f32322d3232203d3e203237383435.roa (raw, json)
Hash identifier:          MP43/UneiuNMHS+CJ+7vL67uJWVNcMMopb6p3J0ydZI=
Subject key identifier:   5D:F3:A0:25:FB:97:3D:10:C8:A4:C7:B4:96:52:80:20:FA:1F:B5:09
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       1AFB2EA7F9087A226333545DB37AF20C5A2CE480
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:48 +0000
ROA not before:           Tue 04 Feb 2025 18:46:48 +0000
ROA not after:            Tue 03 Feb 2026 18:51:48 +0000
asID:                     27845
IP address blocks:        190.97.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fb:2e:a7:f9:08:7a:22:63:33:54:5d:b3:7a:f2:0c:5a:2c:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:48 2025 GMT
            Not After : Feb  3 18:51:48 2026 GMT
        Subject: CN=5DF3A025FB973D10C8A4C7B496528020FA1FB509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:66:42:19:af:5f:0b:15:79:c1:4f:8a:ac:6d:
                    c2:6f:ec:5d:58:44:3e:98:4b:a9:b8:ed:94:53:bd:
                    05:4c:63:6c:a3:dd:98:81:64:11:69:1b:c9:50:a0:
                    36:5a:1f:aa:fe:a7:60:75:52:04:fd:ca:00:4d:53:
                    29:99:1b:bf:ea:45:28:89:87:bc:e3:58:7f:14:3c:
                    ca:0c:33:f9:74:49:16:3c:42:91:04:e4:c9:b1:0d:
                    67:71:53:46:82:92:bf:de:61:40:7c:e9:f4:21:3c:
                    c3:32:54:b3:e9:5e:9f:f1:52:94:2e:da:a0:c9:fa:
                    06:14:f0:e9:be:d5:1a:31:45:63:aa:36:9c:0e:74:
                    0a:13:d2:1c:73:63:a0:62:92:bf:89:b5:db:ca:d0:
                    43:5b:5a:6d:4c:0e:e8:9f:79:95:6b:ad:9b:02:02:
                    be:6f:4f:e7:c9:c4:4c:ee:f2:e7:0f:70:13:71:21:
                    8d:51:68:16:6b:a3:e5:c0:ad:85:4f:c0:ad:32:4d:
                    26:79:b9:90:83:19:2e:a2:1e:1c:8a:02:3e:10:77:
                    37:7e:93:be:6a:40:7d:5c:b9:89:f8:c7:3b:d4:42:
                    d9:9b:66:c9:e7:b2:19:fa:70:ce:3a:dd:6d:23:65:
                    30:c1:75:82:0d:b4:5d:c2:77:26:83:35:d6:8e:80:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F3:A0:25:FB:97:3D:10:C8:A4:C7:B4:96:52:80:20:FA:1F:B5:09
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:5e:fe:57:cf:48:b6:7a:08:28:89:b5:d4:e9:64:70:73:
         45:00:15:f9:e2:43:a4:e8:c7:fb:39:4f:94:8b:54:d0:27:fd:
         18:3d:96:09:bc:3e:10:d9:05:57:3e:5e:2f:a2:33:f8:04:bc:
         cb:d3:63:5a:96:9d:73:07:4f:f2:be:ae:b5:f5:3d:59:ed:22:
         34:21:03:a4:f4:54:dc:d6:c4:96:cc:ed:04:aa:f8:1a:5e:48:
         e3:d3:3d:f4:0d:b8:9c:1b:23:22:33:af:c6:0b:44:5a:41:1f:
         b6:3b:1d:0b:09:49:ba:a2:ae:0c:34:e4:5a:d0:5d:a9:3e:bc:
         e9:49:1c:ec:ba:c8:52:ab:9b:d0:0e:b0:6c:43:fa:fa:31:a7:
         0f:bf:5e:a4:9b:b3:3a:99:30:08:65:ff:3c:5e:75:84:62:de:
         33:82:60:56:e4:2d:07:77:0c:e3:f8:54:6e:e1:56:92:e0:3e:
         d0:97:84:63:f7:91:2b:96:76:34:b4:ee:3a:09:a7:18:be:6a:
         26:04:67:c5:f1:8f:59:d6:f2:25:cb:7d:a5:b5:a2:7d:3f:cd:
         85:d0:1e:d1:77:e1:33:53:25:5d:7d:d1:16:32:89:96:42:89:
         f8:6f:d4:72:da:03:ae:ce:6c:60:dd:08:2f:17:ce:28:4a:b5:
         d2:84:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:41 2025 by rpki-client