Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa
File:                     3139302e39372e3139362e302f32322d3232203d3e203237383435.roa (raw, json)
Hash identifier:          dyiavshC7WhBMevqFHI9HXL/LXn3bKiEC6XX5IE8z2s=
Subject key identifier:   0D:AC:D2:AE:7C:35:F3:87:90:4F:82:CF:6A:40:47:35:2F:89:3F:30
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       09077D783415C60C3CF4E6545E19E600D795A503
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:35 +0000
ROA not before:           Tue 05 Mar 2024 17:41:35 +0000
ROA not after:            Tue 04 Mar 2025 17:46:35 +0000
asID:                     27845
IP address blocks:        190.97.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:07:7d:78:34:15:c6:0c:3c:f4:e6:54:5e:19:e6:00:d7:95:a5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:35 2024 GMT
            Not After : Mar  4 17:46:35 2025 GMT
        Subject: CN=0DACD2AE7C35F387904F82CF6A4047352F893F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:8b:af:33:c9:94:00:f2:21:d3:22:a4:29:
                    0e:0e:c3:94:d1:21:dc:07:af:43:2e:73:5a:10:fc:
                    8c:05:66:f6:ac:bc:7b:fc:28:df:56:4d:be:26:6b:
                    27:47:9b:da:c3:c3:33:73:f9:67:f4:4e:a1:4d:3e:
                    d6:d0:97:0c:8c:37:52:78:32:a5:e3:e6:c5:e3:20:
                    88:ae:08:31:03:31:dc:a0:9f:33:eb:91:c8:a8:80:
                    75:28:62:68:64:e2:ae:80:ed:75:39:fd:96:c3:94:
                    f0:fe:70:ef:c0:3b:12:b6:8d:a6:9b:7f:25:8e:9e:
                    ee:8f:83:1a:fe:10:6e:0f:50:f2:40:87:a3:d8:7a:
                    f6:a0:19:21:84:15:20:f9:f6:de:ea:f7:e5:5b:f2:
                    b3:6c:16:2a:0b:e2:97:06:5a:54:66:6b:97:e7:10:
                    ab:4e:3c:70:6d:66:c7:d6:2d:36:cc:cb:84:41:24:
                    5e:4c:bc:16:21:ae:a0:ab:05:a6:ad:66:b0:0e:29:
                    da:09:37:86:2b:3b:4b:b1:90:cb:af:a2:16:08:0a:
                    69:02:f0:0b:7a:cc:5e:5f:91:6d:46:fc:62:42:db:
                    dd:02:65:40:26:c1:3f:71:13:59:bb:a9:eb:29:08:
                    60:38:47:17:5e:07:dd:4b:63:21:45:b1:0d:16:44:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AC:D2:AE:7C:35:F3:87:90:4F:82:CF:6A:40:47:35:2F:89:3F:30
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:c9:75:87:8f:97:11:6e:f3:cc:0b:d3:d9:db:27:9d:04:b2:
         71:cb:6b:66:0f:d4:2d:e1:2d:0e:66:18:eb:d5:fc:49:25:3e:
         93:87:8a:c4:6b:4d:b0:60:19:19:ef:3f:0c:57:a4:21:5e:f9:
         49:14:c2:40:0a:e6:69:ee:93:39:66:25:ab:c6:09:0a:ae:98:
         4f:8d:9b:23:92:37:58:80:1f:dd:a0:32:25:9d:98:1e:aa:c2:
         a3:57:c0:c8:10:ad:d2:e7:da:6f:2d:2b:2e:e0:f8:e4:9f:86:
         73:aa:4a:c6:b9:0a:d1:c6:fc:bb:4c:ef:07:f9:9f:b3:2d:92:
         a3:8b:43:c2:5a:b1:e5:18:a4:a5:df:b0:5f:15:fe:a8:f9:af:
         02:77:a4:a9:8f:b6:f4:06:0f:97:4a:f8:ca:cf:b8:f7:08:c2:
         e7:ad:e6:d6:b2:a5:98:50:29:a8:34:b9:40:e4:80:f5:92:31:
         4d:1c:a9:c0:36:43:9b:c9:c4:d0:8f:1d:75:85:0b:57:91:01:
         f6:47:93:6e:cd:ca:67:e0:90:0a:94:06:02:39:78:80:ca:54:
         e7:b9:d6:3c:5a:2a:6c:bd:00:b4:bd:7a:25:ec:b1:c2:53:ce:
         8b:f8:9d:87:1e:a8:9c:a8:8c:a5:b1:92:7f:9b:4c:e9:7f:3d:
         79:7a:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:05:53 2024 by rpki-client on console-fra.rpki-client.org