Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230302e302f32322d3234203d3e203237383435.roa
File:                     3139302e39372e3230302e302f32322d3234203d3e203237383435.roa (raw, json)
Hash identifier:          hkQ8vxROWA0nAETWBAKvyKw9U/nIUOOtWcvKiXuTRzE=
Subject key identifier:   10:BF:65:D3:AB:4A:81:BA:BA:AF:69:05:B4:E4:63:59:1D:8E:91:06
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       4F878596FBD5ACC079B0FFEEF79BC561EDDC83C2
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230302e302f32322d3234203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:51 +0000
ROA not before:           Tue 04 Feb 2025 18:46:51 +0000
ROA not after:            Tue 03 Feb 2026 18:51:51 +0000
asID:                     27845
IP address blocks:        190.97.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:87:85:96:fb:d5:ac:c0:79:b0:ff:ee:f7:9b:c5:61:ed:dc:83:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:51 2025 GMT
            Not After : Feb  3 18:51:51 2026 GMT
        Subject: CN=10BF65D3AB4A81BABAAF6905B4E463591D8E9106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:00:43:a7:0a:54:a4:a9:89:a0:55:7d:bb:
                    a9:88:d6:cf:c2:a6:ed:75:07:02:0c:e0:d4:07:8f:
                    71:0e:b4:36:89:6a:10:68:61:0b:34:5f:a6:3e:a4:
                    d1:e2:7f:b6:5b:c3:8d:42:c9:62:35:f1:55:65:70:
                    0c:62:ae:9e:ec:2c:61:f1:41:ad:9b:00:5e:04:9d:
                    97:43:8b:a2:44:34:64:d5:d1:56:12:68:c5:1c:42:
                    26:30:1a:83:ea:1a:65:16:35:53:38:e9:73:3f:a6:
                    31:8b:48:0f:92:cd:78:77:01:b7:f2:5d:d3:d4:13:
                    db:c9:8f:6a:b1:ad:e4:2d:89:e7:50:e7:d6:16:cc:
                    42:fa:5a:49:d3:bf:ac:a8:81:32:ac:af:1e:40:60:
                    40:15:52:b9:4d:f7:05:1a:f5:9b:32:f1:b6:09:55:
                    67:c5:c1:3f:fe:f0:ad:94:59:60:66:41:67:8e:45:
                    a6:81:1f:26:36:9e:b8:0f:2b:d3:1b:93:b6:b9:5b:
                    e7:7a:46:1f:65:9c:d6:c9:9f:25:65:fa:94:2e:e9:
                    95:39:78:23:22:bd:47:e3:7b:8b:dc:f5:d8:e2:e6:
                    11:6c:ff:ca:ed:d5:f6:57:3a:17:82:ad:73:ee:31:
                    6c:8c:44:b8:93:47:78:7a:20:c3:11:08:73:09:19:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BF:65:D3:AB:4A:81:BA:BA:AF:69:05:B4:E4:63:59:1D:8E:91:06
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230302e302f32322d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:40:e6:53:94:22:ec:7b:b5:89:22:a9:f3:88:aa:39:d7:78:
         e7:b4:ee:b5:d5:16:24:a5:ba:5e:04:56:d9:15:f5:8e:ad:36:
         99:07:ca:d5:88:8e:b0:71:f1:de:78:5b:35:93:2e:02:5d:38:
         e3:fa:c7:a7:80:7a:ae:97:af:d2:85:9d:c2:8c:a7:bd:29:8a:
         42:f8:2a:f3:20:e1:a8:9a:7d:7f:f1:01:14:16:e7:d3:c9:7f:
         69:52:c7:ed:18:da:6e:1c:ac:06:dc:e9:95:b4:9b:d5:5a:8c:
         98:3b:c8:98:15:0e:8e:bf:95:57:00:d9:16:76:15:14:6f:d0:
         e3:c9:76:ce:4a:ed:c2:1f:12:8d:d9:83:6a:4d:22:10:78:ed:
         ce:2c:d7:cb:44:4d:f4:1b:e0:92:72:c4:d6:4b:f8:6e:14:1c:
         e5:b2:03:3f:22:1e:a7:0b:18:a1:9b:55:d2:05:66:be:1a:9e:
         93:31:14:0b:6a:76:6a:e6:6c:90:62:f2:77:64:f0:1e:11:05:
         71:1b:3d:6b:93:b9:1b:ba:da:1d:99:83:1d:01:63:cf:fe:dd:
         1e:0a:a0:ea:fb:a3:75:6c:89:40:a7:d0:90:0f:61:45:3f:84:
         1c:f8:f4:57:3b:12:cd:6a:5f:3c:07:2c:fc:b2:2b:25:35:67:
         0f:50:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:33 2025 by rpki-client