Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa
File:                     3139302e39372e37322e302f32312d3231203d3e203237383435.roa (raw, json)
Hash identifier:          PJtIYPgtkdNAfNoq5SFNjqu7fZUhYf/56opHF980POE=
Subject key identifier:   C8:FD:8C:07:62:B6:11:52:2E:2C:DE:C7:14:E4:13:84:10:50:0A:9D
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       5E9BB2BEF22D943F5AEA2FC823EA80CD1E89575E
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:35 +0000
ROA not before:           Tue 05 Mar 2024 17:41:35 +0000
ROA not after:            Tue 04 Mar 2025 17:46:35 +0000
asID:                     27845
IP address blocks:        190.97.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:b2:be:f2:2d:94:3f:5a:ea:2f:c8:23:ea:80:cd:1e:89:57:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:35 2024 GMT
            Not After : Mar  4 17:46:35 2025 GMT
        Subject: CN=C8FD8C0762B611522E2CDEC714E4138410500A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:e1:a1:0c:5a:fe:5c:85:a7:1a:8e:01:54:
                    0c:a7:67:ae:11:40:b1:aa:8e:dc:76:4c:43:61:4d:
                    7f:71:a0:8a:90:2e:ce:13:89:51:19:0b:e9:50:8f:
                    c3:3d:4f:8c:7e:3a:9b:3b:10:37:34:76:3c:cb:1a:
                    11:0e:d0:a0:37:b9:cd:3c:57:47:d7:dd:3f:ca:3a:
                    e9:3a:1f:d1:14:ba:9b:00:38:a3:dd:d8:11:0d:3f:
                    38:09:1e:3d:ce:ce:c4:d1:50:10:0a:59:26:04:53:
                    b9:6e:d8:9d:03:b0:a4:25:88:4c:7e:79:2f:77:4d:
                    94:41:bd:12:12:65:2c:8c:df:87:e1:c4:9e:65:16:
                    a4:1d:1f:24:9c:66:8d:3b:0f:19:0b:8d:a6:7a:72:
                    50:ee:c1:3e:88:d9:7b:6b:0b:13:89:bf:82:7d:41:
                    37:93:64:16:af:bb:6d:5e:b0:d5:e3:06:81:b2:16:
                    0d:10:1d:67:f6:68:84:b2:0f:a1:ab:12:92:86:d6:
                    53:35:4d:ca:bc:8a:4f:3f:45:46:28:76:42:7d:22:
                    a3:b5:c9:b5:c9:9b:c6:34:02:cb:2b:08:d5:ae:a9:
                    c4:e3:8b:9d:70:3c:a5:2e:fb:96:eb:68:ba:6c:5d:
                    80:69:f7:7a:cf:08:29:a9:09:23:b0:8e:74:e9:46:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:8C:07:62:B6:11:52:2E:2C:DE:C7:14:E4:13:84:10:50:0A:9D
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:d5:08:13:a0:04:f1:23:c8:6e:95:4f:e3:ce:ea:9b:41:55:
         ad:76:cf:6b:e8:5a:62:55:53:7d:cd:fb:a7:d0:34:ea:4e:b9:
         f6:77:bd:0f:2b:df:d0:6d:4b:f2:31:45:b2:39:4d:7e:3f:4e:
         68:e7:0d:4e:01:d4:04:87:6c:69:af:a8:8d:5f:a7:1d:38:52:
         42:e9:4b:5a:2c:56:15:25:44:50:66:14:33:c1:d5:19:83:92:
         7d:f4:6b:75:9b:98:06:31:85:91:15:8d:cf:a1:11:30:53:cb:
         c1:28:a8:65:5f:c7:4b:56:ef:32:89:d5:d6:d4:4b:65:07:64:
         e3:75:d1:91:dc:94:f8:37:02:5f:2a:37:15:44:78:c8:50:59:
         37:0b:cf:8a:b6:f8:68:9b:17:9f:a5:51:ce:70:15:f6:a4:9f:
         e5:eb:92:e5:d3:4f:5a:f4:01:b7:d7:92:49:88:9e:a1:b9:4d:
         f5:2d:48:29:b4:11:6c:cb:31:36:12:66:f3:30:d3:b0:ac:f2:
         26:6f:17:b8:e5:05:7b:68:db:78:48:6f:16:d1:4d:1f:87:24:
         0a:9e:17:e1:d2:ae:6c:69:e6:47:d8:55:fd:1d:7d:74:fc:88:
         7d:fb:4c:8d:0f:e5:6e:38:a1:fa:01:62:c8:a6:39:ed:1e:c8:
         ed:d4:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:05:53 2024 by rpki-client on console-fra.rpki-client.org