Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa
File:                     3139302e39372e37302e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          78ruBkduDx4VxHGBu39N228icnC3LGXSXMtx5I5I/E8=
Subject key identifier:   8C:68:8F:F1:41:BB:A5:30:CD:BB:25:93:B5:AE:83:BF:BD:2D:49:93
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       2685366F5C9261770736DD405D72FA4E79EA7941
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     27845
IP address blocks:        190.97.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:85:36:6f:5c:92:61:77:07:36:dd:40:5d:72:fa:4e:79:ea:79:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=8C688FF141BBA530CDBB2593B5AE83BFBD2D4993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:4f:0c:fa:ae:d7:00:b7:a2:9b:0d:a7:f6:
                    d4:f3:74:6a:8b:50:94:a7:1f:ab:1a:8a:e7:10:2a:
                    7c:83:9d:df:a8:09:c6:ed:68:b2:f3:4a:8e:95:cd:
                    43:f4:05:2d:5b:34:af:d3:28:ad:be:d0:42:d0:10:
                    65:6c:ac:86:c1:3d:44:70:40:3d:66:4f:12:29:14:
                    29:b1:8f:52:be:24:22:f6:73:4a:49:80:48:a2:2a:
                    1c:1c:32:5b:b8:e1:d2:b8:13:11:38:e8:3b:26:16:
                    99:2a:74:38:02:ab:4e:a3:e5:1f:d9:35:12:ba:93:
                    c7:1e:cb:15:14:b0:a1:02:27:07:d4:18:b7:c8:cd:
                    a3:63:86:a7:ca:07:c1:bd:ef:31:83:14:67:be:5c:
                    5f:72:ed:85:69:c6:df:58:17:47:c1:ef:a2:85:89:
                    3d:49:da:dc:42:1c:0d:42:cb:9c:8d:c5:8b:b8:d3:
                    77:d5:d0:9d:04:a5:aa:46:55:8a:e4:1f:6a:0e:b8:
                    fe:b0:f5:76:91:fe:bc:73:bd:0e:ca:1f:9b:38:32:
                    43:f5:8a:93:f6:0c:b3:e6:14:b9:a4:91:0b:b3:ab:
                    b0:62:24:d0:2d:83:ea:23:5c:9d:f7:06:e4:4d:1b:
                    85:26:70:dc:3d:02:d1:cc:c4:24:6f:7c:2c:9b:ae:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:68:8F:F1:41:BB:A5:30:CD:BB:25:93:B5:AE:83:BF:BD:2D:49:93
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:e3:1b:5f:bb:16:44:68:0c:0c:61:4c:0b:f5:3e:31:95:a0:
         d3:e5:04:6f:64:fc:59:7d:7e:98:98:cd:57:02:3d:9e:47:ef:
         4f:e9:4a:5d:e7:2b:9a:ef:4e:dd:b4:46:b6:e1:37:91:7b:fb:
         81:38:9d:43:88:ad:62:05:22:d1:84:72:ee:0d:16:5a:4f:72:
         ce:77:9e:20:f9:a7:6c:c9:92:21:82:b7:2c:9f:19:7f:4f:e5:
         b4:93:48:14:8a:03:b9:d4:c6:15:96:fd:02:80:3c:8e:4e:36:
         65:89:14:9f:96:2d:28:9d:ff:54:77:2b:af:03:b3:61:ad:58:
         0b:b7:df:85:07:14:0a:77:8a:f3:b3:44:00:24:26:9e:02:cc:
         65:96:ad:af:e7:89:92:17:75:1a:7a:74:08:e5:1d:f8:4e:14:
         da:21:d9:1a:72:37:60:61:11:a3:d3:ed:31:4d:57:b5:23:b0:
         00:ef:09:39:80:d0:f7:52:97:6c:b8:67:eb:bd:cc:69:46:e4:
         8b:1d:e9:09:79:0b:99:64:80:15:f5:f6:f3:96:52:e3:d8:cc:
         09:3d:aa:7a:d9:92:80:58:cb:29:74:cf:96:fe:ca:32:a0:7d:
         6b:c9:6d:b8:fc:70:44:21:3f:d8:cd:ea:89:e1:1b:7b:d0:ad:
         ba:56:b9:81
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJoU2b1ySYXcHNt1AXXL6TnnqeUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVEQjBEMTdCMTU3QkY2QUQwOEJBQzI1OTg4NDg5QUZE
NTVCODVCQzAeFw0yNDAzMDUxNzQxMzJaFw0yNTAzMDQxNzQ2MzJaMDMxMTAvBgNV
BAMTKDhDNjg4RkYxNDFCQkE1MzBDREJCMjU5M0I1QUU4M0JGQkQyRDQ5OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPE8M+q7XALeimw2n9tTzdGqL
UJSnH6saiucQKnyDnd+oCcbtaLLzSo6VzUP0BS1bNK/TKK2+0ELQEGVsrIbBPURw
QD1mTxIpFCmxj1K+JCL2c0pJgEiiKhwcMlu44dK4ExE46DsmFpkqdDgCq06j5R/Z
NRK6k8ceyxUUsKECJwfUGLfIzaNjhqfKB8G97zGDFGe+XF9y7YVpxt9YF0fB76KF
iT1J2txCHA1Cy5yNxYu403fV0J0EpapGVYrkH2oOuP6w9XaR/rxzvQ7KH5s4MkP1
ipP2DLPmFLmkkQuzq7BiJNAtg+ojXJ33BuRNG4UmcNw9AtHMxCRvfCybrif1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUjGiP8UG7pTDNuyWTta6Dv70tSZMwHwYDVR0j
BBgwFoAUVdsNF7FXv2rQi6wlmISJr9VbhbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTlDQjgxN0M5RTdDNTQzNTJENjRENTU0OEU2QjVBMTE5
MTkyREY3RUMyRDhEODFFMzc5QzQ5MjRCNzhBMUZDLzAvNTVEQjBEMTdCMTU3QkY2
QUQwOEJBQzI1OTg4NDg5QUZENTVCODVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NURCMEQxN0IxNTdCRjZBRDA4
QkFDMjU5ODg0ODlBRkQ1NUI4NUJDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U5Q0I4MTdDOUU3QzU0MzUyRDY0RDU1NDhFNkI1QTExOTE5MkRGN0VD
MkQ4RDgxRTM3OUM0OTI0Qjc4QTFGQy8wLzMxMzkzMDJlMzkzNzJlMzczMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczODM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+YUYwDQYJ
KoZIhvcNAQELBQADggEBAKnjG1+7FkRoDAxhTAv1PjGVoNPlBG9k/Fl9fpiYzVcC
PZ5H70/pSl3nK5rvTt20RrbhN5F7+4E4nUOIrWIFItGEcu4NFlpPcs53niD5p2zJ
kiGCtyyfGX9P5bSTSBSKA7nUxhWW/QKAPI5ONmWJFJ+WLSid/1R3K68Ds2GtWAu3
34UHFAp3ivOzRAAkJp4CzGWWra/niZIXdRp6dAjlHfhOFNoh2RpyN2BhEaPT7TFN
V7UjsADvCTmA0PdSl2y4Z+u9zGlG5Isd6Ql5C5lkgBX19vOWUuPYzAk9qnrZkoBY
yyl0z5b+yjKgfWvJbbj8cEQhP9jN6onhG3vQrbpWuYE=
-----END CERTIFICATE-----
Generated at Tue May 14 21:47:22 2024 by rpki-client on console-ams.rpki-client.org