Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36382e302f32332d3233203d3e203237383435.roa
File:                     3139302e39372e36382e302f32332d3233203d3e203237383435.roa (raw, json)
Hash identifier:          i6nDr9ATB4r83cgTAj14sHrTi8gFI0wpRqBvT+6dL0U=
Subject key identifier:   1F:C3:63:BA:2F:D9:F0:3F:93:06:2C:1C:FF:AA:C1:28:BB:FD:80:DC
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       3239DEA8749753B07E492EEA9B53BF0ED558F44A
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36382e302f32332d3233203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:31 +0000
ROA not before:           Tue 05 Mar 2024 17:41:31 +0000
ROA not after:            Tue 04 Mar 2025 17:46:31 +0000
asID:                     27845
IP address blocks:        190.97.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:39:de:a8:74:97:53:b0:7e:49:2e:ea:9b:53:bf:0e:d5:58:f4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:31 2024 GMT
            Not After : Mar  4 17:46:31 2025 GMT
        Subject: CN=1FC363BA2FD9F03F93062C1CFFAAC128BBFD80DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:e7:1c:3f:93:2f:ba:8a:2c:c7:dd:2c:88:
                    22:28:14:33:0d:a7:75:1c:fb:c4:56:59:65:15:b8:
                    13:25:2e:73:2b:a9:71:cc:ba:f2:f7:6f:91:57:e1:
                    4d:5c:9d:61:6f:8a:47:1c:a3:97:39:b5:c5:df:35:
                    1e:b0:ca:4f:64:23:0c:f2:8c:f4:9d:0a:b3:21:6f:
                    d7:4b:76:a2:c6:bb:69:16:86:1f:e3:d0:6d:11:0f:
                    d1:58:ac:47:78:0b:a0:78:fa:d7:58:ea:97:d8:2b:
                    f7:f3:7b:5e:e1:0a:49:c7:9b:32:d0:f3:1a:03:42:
                    37:9e:54:80:7e:08:3b:b8:fd:8a:bd:c0:a5:31:60:
                    61:e0:22:cb:a7:e7:47:64:a3:5a:c4:29:71:52:ad:
                    67:b0:ff:2a:a5:90:2b:c7:82:98:4a:11:c5:5a:ac:
                    12:40:3a:fd:3b:03:1f:75:3a:bb:ef:4b:be:25:0b:
                    eb:56:b7:b0:e5:48:92:38:ae:ec:18:1c:b9:38:8c:
                    16:e5:d5:17:72:99:bb:1d:e8:46:89:b6:30:02:a8:
                    5d:19:ef:36:b3:ea:60:e7:28:e1:06:4c:bd:f2:69:
                    eb:64:cc:94:c3:a2:61:41:e0:92:bd:59:35:34:10:
                    2c:65:99:f5:50:03:88:17:23:1d:8e:7a:4d:20:31:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C3:63:BA:2F:D9:F0:3F:93:06:2C:1C:FF:AA:C1:28:BB:FD:80:DC
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36382e302f32332d3233203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:8b:33:3c:2b:36:d2:9b:8b:18:95:1e:09:eb:c1:02:a3:
         c9:f1:ec:68:05:a5:9b:b9:a9:cc:60:0d:88:44:71:d3:3a:8a:
         2f:dd:9c:35:0c:da:ef:70:1e:a3:c2:06:90:7c:96:32:28:a9:
         a5:ec:dc:bb:37:bb:61:68:b9:72:dc:16:46:a4:fa:5c:5a:db:
         31:e7:e6:d5:df:05:e9:a4:6f:7e:07:aa:a6:db:5b:bd:6d:c4:
         81:49:64:f9:6d:a5:ce:34:11:78:54:e2:9d:2d:90:51:a1:5a:
         57:45:1f:5e:c2:e9:3b:a6:cd:7f:31:24:5c:66:82:4e:24:2c:
         f5:57:2a:a6:51:2c:fb:0e:6c:37:88:42:38:b0:7a:3a:ac:13:
         4f:46:a8:f4:1b:77:e6:2e:f1:0f:51:06:98:c9:b1:6a:ed:c0:
         75:d2:f4:c3:85:de:33:f8:00:56:8a:7a:7a:00:81:12:b0:4b:
         94:ed:47:64:01:22:b2:34:a8:47:62:17:e9:b1:ea:19:aa:77:
         59:c7:ea:bf:a8:52:5a:da:74:d0:bf:ea:20:e8:40:bb:1a:59:
         6a:81:26:13:d1:ae:82:39:46:2b:e0:16:60:90:c7:64:ba:89:
         ae:c9:7f:4b:49:b5:86:d2:da:cd:4a:dd:86:2e:8e:2d:99:c6:
         c8:b3:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:46 2024 by rpki-client on console-ams.rpki-client.org