Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230362e302f32332d3233203d3e203237383435.roa
File:                     3139302e39372e3230362e302f32332d3233203d3e203237383435.roa (raw, json)
Hash identifier:          TZZ2BAOxoMgVODAbBsA7aLMVDuy7+/kRxVTgXyuslIs=
Subject key identifier:   4A:5B:88:C8:B1:9F:24:A1:2E:9C:25:3E:6D:95:F6:B9:39:A6:18:DF
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       5ABA003BDCD175FC0A5220CC5B4FF6C741C3985C
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230362e302f32332d3233203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:37 +0000
ROA not before:           Tue 05 Mar 2024 17:41:37 +0000
ROA not after:            Tue 04 Mar 2025 17:46:37 +0000
asID:                     27845
IP address blocks:        190.97.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ba:00:3b:dc:d1:75:fc:0a:52:20:cc:5b:4f:f6:c7:41:c3:98:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:37 2024 GMT
            Not After : Mar  4 17:46:37 2025 GMT
        Subject: CN=4A5B88C8B19F24A12E9C253E6D95F6B939A618DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:9e:cd:4a:30:8b:66:dc:98:61:e3:76:54:
                    3b:f4:db:e8:ab:cd:55:50:f6:f7:ed:ff:a4:f1:b4:
                    be:ca:5b:ad:a3:91:d8:e2:94:26:d0:63:aa:e5:66:
                    07:da:8a:b8:ab:1d:18:b0:d9:89:ac:ce:eb:c1:e2:
                    25:ee:95:c2:43:23:0b:c3:4b:81:4d:4e:76:6b:7e:
                    d4:6c:fd:e8:12:f3:ce:b6:45:7e:67:4f:6e:00:47:
                    ab:0e:d6:b6:9a:a2:63:78:84:00:bc:33:1d:8d:23:
                    71:a9:bd:2c:61:42:28:72:71:46:99:74:83:6f:89:
                    da:75:4d:b2:58:cd:f4:77:ba:b0:3d:b8:89:65:69:
                    b4:21:53:0e:60:19:42:df:27:98:f1:58:a2:2e:c2:
                    b3:d1:df:16:92:b9:92:9c:e6:41:dd:dd:05:5a:46:
                    ec:99:ba:98:79:92:76:ad:d0:39:8d:16:fa:c2:ba:
                    12:5b:8d:40:61:74:eb:c6:fd:e2:39:fb:a3:34:18:
                    22:7b:f0:0a:c0:5e:24:d0:f0:c0:ea:59:0e:af:e8:
                    ad:3d:da:0f:20:88:00:25:1a:5a:07:f2:33:76:af:
                    f9:23:59:80:5c:67:b5:b4:2b:a4:51:1d:c4:c1:ff:
                    8b:5a:5b:9c:f7:06:b8:9d:f9:25:10:e8:87:8f:95:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:88:C8:B1:9F:24:A1:2E:9C:25:3E:6D:95:F6:B9:39:A6:18:DF
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230362e302f32332d3233203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:93:44:da:03:f0:20:72:cc:22:a0:dc:9c:5d:88:cc:64:
         e4:08:06:68:bc:0e:3c:12:69:88:39:80:8e:89:06:a8:e3:81:
         83:93:dc:0f:2e:d5:7c:c5:96:8a:fa:35:51:05:34:b2:c1:a1:
         5f:0f:7c:b2:c1:cb:7d:37:ee:de:1f:4c:4e:7a:81:8f:f8:d5:
         fc:99:0d:4a:d7:ba:70:e0:f8:76:4c:0c:97:9d:3a:af:97:df:
         99:c8:23:25:1b:7a:8e:42:9c:b5:85:e7:fc:7f:df:d2:69:ab:
         9e:92:a1:11:a6:31:f8:ec:8c:67:d2:9b:fd:21:36:2d:b2:18:
         f8:4c:33:21:d1:b2:49:33:b0:36:40:15:d0:bd:06:71:6b:48:
         87:20:57:1b:14:96:f8:9e:7a:96:d8:00:e8:4d:a8:f1:be:71:
         c3:4d:60:7c:e3:e7:53:6b:4e:40:df:d1:e5:c9:c8:86:ad:d8:
         12:1d:9b:45:e0:c3:13:a9:aa:1b:5a:eb:ee:c2:75:a4:57:d4:
         58:25:83:96:38:b8:4c:e2:aa:c0:2e:7c:0c:53:9c:bd:e5:06:
         15:15:0b:6a:c5:2e:e0:3f:22:cc:cc:72:f1:a7:33:9d:73:8f:
         b4:77:c8:7b:85:54:37:03:f7:83:9b:d1:6d:13:35:ad:aa:74:
         54:d5:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:46 2024 by rpki-client on console-ams.rpki-client.org