Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230342e302f32332d3234203d3e203237383435.roa
File:                     3139302e39372e3230342e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          2Wf/PDQrDQJ/t4m+zb9fHVJjSO8JiEDbw6LNBMMYFJ0=
Subject key identifier:   48:79:10:EF:CD:AE:CA:E6:2C:D5:65:91:8F:DC:DF:2F:38:F9:2D:62
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       1C4B3111FD0BEED12770B2BB848F3A2B266428D9
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230342e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:37 +0000
ROA not before:           Tue 05 Mar 2024 17:41:37 +0000
ROA not after:            Tue 04 Mar 2025 17:46:37 +0000
asID:                     27845
IP address blocks:        190.97.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4b:31:11:fd:0b:ee:d1:27:70:b2:bb:84:8f:3a:2b:26:64:28:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:37 2024 GMT
            Not After : Mar  4 17:46:37 2025 GMT
        Subject: CN=487910EFCDAECAE62CD565918FDCDF2F38F92D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:13:62:ac:17:69:df:4f:b8:cc:98:bd:f0:
                    20:77:5d:9d:26:56:8a:a0:3f:cf:ba:a7:ee:2d:cf:
                    e2:9b:d9:23:25:8b:57:37:ed:10:cf:1a:15:05:70:
                    57:fb:66:b7:3f:c9:7b:8a:b5:b4:3b:97:28:04:53:
                    05:29:c6:05:a7:7a:ec:41:a8:37:b7:18:c7:60:b0:
                    0c:7a:20:48:5f:b3:27:53:ba:43:09:1d:fd:e1:c0:
                    f2:71:b9:63:7f:9c:43:57:d2:60:1b:a6:f4:c2:8c:
                    10:db:84:32:bd:52:de:c5:7c:49:f6:19:bb:a2:92:
                    73:5b:0f:52:e0:3f:7a:d1:c3:88:32:3e:c2:9d:91:
                    3c:4d:a3:a9:86:c7:3a:c2:21:2d:49:03:de:f1:7b:
                    de:5c:5a:c6:0f:dd:be:da:1a:e2:21:75:35:09:79:
                    ff:1d:31:2e:4d:b8:01:4d:90:ff:eb:13:f6:43:c0:
                    21:59:96:a8:99:76:c1:8d:03:df:de:69:62:5c:a0:
                    2d:20:d7:c0:61:ef:65:fd:7c:77:c7:71:6a:e3:ad:
                    3a:9e:4e:20:63:dd:32:12:f8:cc:95:b1:d7:fd:06:
                    5c:21:ef:b0:0a:30:59:ab:db:6b:c6:35:8e:f7:a6:
                    b5:cc:f9:31:ec:db:40:56:ec:d2:7d:0d:ec:93:cb:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:10:EF:CD:AE:CA:E6:2C:D5:65:91:8F:DC:DF:2F:38:F9:2D:62
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230342e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:27:44:49:60:49:ac:4e:cf:cb:55:2b:ad:e3:14:38:1c:26:
         dd:63:f8:b3:e3:cf:95:32:bb:4b:61:e5:26:24:35:e8:fd:c1:
         fe:09:e7:49:ec:08:5c:b6:2f:09:f2:aa:0c:71:54:ea:af:c8:
         f4:4a:03:3c:bd:18:eb:20:d5:ed:02:e0:a5:55:44:fe:0f:f8:
         93:67:4d:23:e3:92:87:ed:66:57:33:b0:74:66:bb:38:b3:c3:
         df:d5:a0:af:1e:05:b5:12:47:1f:c1:91:41:28:f4:db:3c:25:
         3e:51:70:7f:a2:fc:ff:ec:17:32:a5:a4:0a:f5:62:38:20:a5:
         99:22:12:1a:2f:d1:0a:00:33:27:55:d5:ec:32:a3:ca:a6:59:
         aa:b0:e6:8a:63:61:5e:f0:1f:c5:01:77:65:19:ed:3e:b8:a8:
         4b:61:13:79:f4:d0:d1:b5:b1:9b:d9:e4:33:76:14:6a:dc:10:
         ab:c4:65:d9:91:4a:a7:79:bc:01:f7:c9:3c:86:ae:ba:33:30:
         18:b3:8e:0b:45:a0:af:f0:e8:86:7a:df:03:41:76:b2:b2:ba:
         62:3a:f7:53:cb:27:47:d6:20:ea:d1:bb:e6:36:ee:d5:09:2b:
         1d:3b:92:63:7b:61:61:23:43:88:d1:c7:8f:4c:ca:4f:4d:8a:
         c3:19:61:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org