Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa
File:                     3139302e39372e36342e302f32322d3232203d3e203237383435.roa (raw, json)
Hash identifier:          hfEQJgNjQ7CA7pvj+Vhm5Qllxs0jPixIDpUoIk2VzHQ=
Subject key identifier:   D1:AE:CA:4E:BC:D7:C7:25:EA:11:95:69:70:86:73:A5:F3:8A:EE:13
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       2C1E1731AC6FA93A005EDEAB1B6A51CA706365FD
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:34 +0000
ROA not before:           Tue 05 Mar 2024 17:41:34 +0000
ROA not after:            Tue 04 Mar 2025 17:46:34 +0000
asID:                     27845
IP address blocks:        190.97.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1e:17:31:ac:6f:a9:3a:00:5e:de:ab:1b:6a:51:ca:70:63:65:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:34 2024 GMT
            Not After : Mar  4 17:46:34 2025 GMT
        Subject: CN=D1AECA4EBCD7C725EA119569708673A5F38AEE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:0d:dc:1f:25:31:c6:33:f8:87:eb:35:a5:
                    c5:dc:04:70:22:74:4a:b3:28:c6:2f:cc:4b:df:62:
                    77:5a:4e:97:17:c5:f3:a5:d7:9e:ed:e0:ed:cb:58:
                    1f:ac:af:f5:4f:85:b0:07:70:11:84:fb:65:08:3a:
                    29:5c:5b:f3:f5:04:36:47:48:9a:e0:b3:17:e7:d6:
                    05:66:49:c8:ed:3a:1e:4b:01:5d:11:6e:f6:d6:02:
                    70:e3:a2:70:aa:1a:f1:11:d7:74:d1:8d:08:76:02:
                    84:bf:ec:87:b9:01:68:13:0e:21:e2:65:b9:f9:af:
                    f2:66:a2:56:8c:4a:e3:ea:34:8e:d7:4c:44:13:44:
                    6f:e6:5f:c6:d6:98:e1:a2:3d:1b:4c:3f:01:43:7e:
                    85:91:fb:85:a9:1e:03:fa:98:c8:f1:cc:af:20:9c:
                    3c:9d:c3:ad:b5:2d:36:06:5a:92:a5:01:f9:56:2b:
                    a1:92:c4:47:fe:35:16:6f:a6:c1:bd:ea:26:4d:e6:
                    d2:db:78:d3:0e:15:2a:da:27:f3:b9:6d:d9:cb:1f:
                    fd:70:ba:93:e6:a0:35:02:80:48:46:20:94:e8:bf:
                    ab:20:38:92:a7:6b:21:64:79:8c:73:a6:db:14:2a:
                    f5:cf:25:5c:2c:36:99:ea:91:ba:63:b9:77:43:62:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AE:CA:4E:BC:D7:C7:25:EA:11:95:69:70:86:73:A5:F3:8A:EE:13
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:88:c7:ff:9e:72:79:4e:74:92:4d:72:88:c8:dd:46:27:
         8a:22:76:7f:fc:28:66:8c:37:87:5c:a7:e0:c3:0d:2e:52:9f:
         c5:3b:8d:dd:09:e0:53:dc:34:b0:a6:90:cb:56:7c:d5:31:11:
         f1:34:15:d7:3f:3f:3a:ba:7c:7d:d4:cf:68:3a:8a:11:52:f0:
         40:33:0f:ca:6a:be:c6:ab:2a:2f:1c:30:d7:a4:a4:fa:ae:77:
         34:2f:77:40:13:3e:25:60:bd:46:71:ed:ed:1e:50:50:78:1b:
         46:db:1c:47:6b:01:1b:97:ae:79:06:96:d9:66:4f:58:9c:b1:
         dd:23:b0:74:37:97:31:e8:69:98:fc:08:1f:09:d0:fb:a3:e2:
         7c:11:f1:fe:55:21:0f:af:dc:5f:74:91:56:a2:08:0c:1c:25:
         0c:ff:b5:01:9c:1d:6d:ff:32:b0:7e:36:24:c4:f4:fc:02:a6:
         f2:12:cc:90:93:ce:aa:7c:bf:76:71:a0:df:a2:20:7c:a2:08:
         e9:00:7f:34:04:2a:f5:86:e2:6a:30:8a:70:6b:51:2e:82:a3:
         3a:69:15:8f:3b:b2:90:23:d1:88:e2:68:71:6e:b1:85:aa:8b:
         73:b9:d0:63:1e:8f:bd:01:7a:88:bb:13:c8:80:95:f2:e7:53:
         29:56:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:05:53 2024 by rpki-client on console-fra.rpki-client.org