Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230382e302f32302d3230203d3e203237383435.roa
File:                     3139302e39372e3230382e302f32302d3230203d3e203237383435.roa (raw, json)
Hash identifier:          LNHggofG44G6tQCQqIVQMPtxHzzseJb4nnqqVlkY65k=
Subject key identifier:   11:92:23:73:EF:6F:57:08:E4:C3:12:C2:E4:5E:83:4A:F9:C5:E5:90
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       5AF6E1A492D788E1A7DBF6B2E122347D307713BB
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230382e302f32302d3230203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:48 +0000
ROA not before:           Tue 04 Feb 2025 18:46:48 +0000
ROA not after:            Tue 03 Feb 2026 18:51:48 +0000
asID:                     27845
IP address blocks:        190.97.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f6:e1:a4:92:d7:88:e1:a7:db:f6:b2:e1:22:34:7d:30:77:13:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:48 2025 GMT
            Not After : Feb  3 18:51:48 2026 GMT
        Subject: CN=11922373EF6F5708E4C312C2E45E834AF9C5E590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:80:48:48:b7:75:de:52:ab:81:83:5d:8a:
                    91:7d:05:6e:bc:ee:e5:00:be:a3:69:81:aa:60:8b:
                    02:7d:0c:40:90:42:28:09:36:14:e2:3b:cb:0f:65:
                    0e:32:6e:7e:e3:e5:a8:5c:08:70:45:66:5a:33:26:
                    75:ed:6b:e4:62:fe:ac:a9:14:30:ec:be:ef:3f:7e:
                    5e:16:a8:3b:8d:23:fe:0c:70:8b:7f:20:6d:30:37:
                    11:ad:1e:d0:a2:eb:10:a8:a0:45:b8:69:83:30:58:
                    16:9e:a2:88:ef:a0:ea:06:6b:54:53:13:65:8f:2f:
                    be:07:d4:71:e8:e5:d8:9e:8b:bf:2f:c3:6b:5f:9c:
                    ec:48:d3:7c:12:9d:cc:ee:48:55:17:73:2a:61:c5:
                    f2:b1:03:b3:e4:07:b5:d1:68:09:67:5b:c6:db:72:
                    31:8c:b5:2f:38:94:b7:bf:2d:01:97:73:99:63:12:
                    08:b0:c9:b4:73:0c:51:7a:09:21:5a:1e:57:10:a3:
                    db:8e:89:52:dd:49:96:91:44:1e:7f:c0:1c:2b:a8:
                    39:4d:cb:fb:d1:69:ab:4f:dd:3e:22:c8:3e:56:dd:
                    be:bd:02:67:de:29:2a:4f:21:67:8f:42:b5:0b:aa:
                    00:5d:27:2c:ae:19:05:19:01:6e:96:6d:86:f5:1c:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:92:23:73:EF:6F:57:08:E4:C3:12:C2:E4:5E:83:4A:F9:C5:E5:90
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230382e302f32302d3230203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:d7:aa:06:23:53:75:45:b2:a9:f7:4b:16:9b:e4:3b:2b:4a:
         0d:c3:b0:66:45:28:f4:89:68:d2:2d:ec:54:eb:9c:ac:52:d0:
         af:b6:45:09:da:2d:65:75:25:93:bf:d8:2e:d3:d9:a2:c7:57:
         42:1d:5a:53:fc:38:7d:37:4a:04:50:04:f1:74:42:ec:df:81:
         9c:9d:f7:c2:df:0d:fb:fa:d1:01:98:ed:37:9a:ac:1f:64:d8:
         52:ca:16:b5:25:9c:63:83:0f:8a:4e:fe:3a:c5:7b:7f:14:09:
         21:b8:98:81:6b:e7:5c:16:24:fa:d1:f8:1a:0d:71:76:79:85:
         ea:70:05:18:57:aa:23:09:2a:b5:cf:bb:49:3a:45:58:66:e2:
         dc:99:46:a0:90:8f:ef:45:2b:74:47:9d:86:68:cf:82:12:b0:
         83:ea:31:2c:89:fb:68:a8:61:f1:6d:ec:80:df:4a:71:dc:f1:
         f7:a4:b2:4f:32:8c:c9:da:f3:de:30:08:0d:a7:03:7d:89:c2:
         c7:e4:64:7e:97:50:f5:76:e3:01:c3:f3:bb:8f:85:43:fa:90:
         f2:05:b6:7e:21:48:70:d8:be:89:09:43:00:0c:90:74:49:f4:
         59:fa:54:06:05:00:2c:1c:d1:d9:26:6b:21:02:13:1a:cf:0b:
         50:b0:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:02 2025 by rpki-client