Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38302e302f32322d3234203d3e203237383435.roa
File:                     3139302e39372e38302e302f32322d3234203d3e203237383435.roa (raw, json)
Hash identifier:          Ky1XvK6Y4BEoTjLUxyLgkWtbISFZjtU1u8L3RSFzx20=
Subject key identifier:   38:0C:F3:8F:1B:04:AF:AF:18:95:0F:3B:46:9E:AA:93:C0:E6:28:BE
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       6C83A13A7CA9D04ED9C825E16DA391638E1B0FCF
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38302e302f32322d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:35 +0000
ROA not before:           Tue 05 Mar 2024 17:41:35 +0000
ROA not after:            Tue 04 Mar 2025 17:46:35 +0000
asID:                     27845
IP address blocks:        190.97.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:83:a1:3a:7c:a9:d0:4e:d9:c8:25:e1:6d:a3:91:63:8e:1b:0f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:35 2024 GMT
            Not After : Mar  4 17:46:35 2025 GMT
        Subject: CN=380CF38F1B04AFAF18950F3B469EAA93C0E628BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:0d:c6:39:ff:b6:fb:3a:0a:ce:ed:cf:35:
                    c7:d6:b5:f5:d0:2e:8e:41:54:5a:fd:30:da:9a:75:
                    89:e0:53:e6:c0:fa:d0:1a:62:1f:57:c8:27:20:68:
                    b2:30:c1:d1:f6:4d:db:ae:e9:db:fa:60:e9:1e:1e:
                    b8:70:41:18:e3:b1:3f:eb:df:3e:f1:1d:09:3f:89:
                    e7:27:8d:57:d0:df:8b:e1:6a:c4:44:05:b7:93:8f:
                    df:ee:3a:d5:b9:9c:02:c3:4b:5b:22:74:98:05:e4:
                    fd:55:36:2c:43:8d:c7:69:79:99:80:41:72:69:5f:
                    cd:fb:be:18:7f:80:a6:04:21:a9:ec:50:6c:c1:a6:
                    44:f1:e1:f1:be:03:51:8c:02:80:80:90:d0:ef:5d:
                    6e:fc:d2:24:67:03:79:c9:2c:4f:a0:38:31:86:f2:
                    b4:54:be:29:93:14:d8:94:23:90:fa:bc:d2:ce:07:
                    6a:19:a5:06:26:52:44:83:30:1b:24:c6:5f:e9:25:
                    3b:9d:bf:cb:b8:51:12:95:a1:4b:f6:6c:88:0e:8c:
                    57:80:cd:68:55:3e:09:80:36:9b:91:bf:18:a0:c0:
                    47:20:9a:43:66:52:2f:79:95:ec:34:b8:60:4c:55:
                    4b:90:92:0f:61:34:4b:38:89:80:04:6a:0a:9e:63:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0C:F3:8F:1B:04:AF:AF:18:95:0F:3B:46:9E:AA:93:C0:E6:28:BE
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38302e302f32322d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:1a:4e:1b:b0:19:a6:fa:59:ce:d0:6b:f5:cd:82:d4:2b:65:
         14:31:2b:5f:ee:4c:b8:ec:57:08:43:d9:ce:13:c1:67:2c:41:
         f0:1e:3c:35:8f:16:bb:6e:c2:66:10:6b:9e:8f:56:8c:02:54:
         f0:1c:14:2a:22:40:e8:d9:4b:02:eb:db:d6:76:bb:0a:5f:3b:
         7d:a0:e3:a9:83:d6:dc:af:85:32:bb:35:6c:1b:c5:21:0f:76:
         17:7d:32:f8:be:99:67:4f:8c:e6:8b:44:62:d0:8d:e4:85:ce:
         4a:94:a7:97:51:ab:1f:fe:36:86:56:b5:73:7e:c2:b6:9b:5d:
         09:a0:de:9f:de:ec:cd:ab:32:8b:36:de:2b:55:dd:dc:ec:f9:
         99:91:5d:77:eb:0a:fe:40:15:ef:8a:04:5f:33:0a:07:c9:91:
         b9:88:92:f3:0d:52:50:5a:2f:ee:76:20:c5:05:0c:1a:b7:52:
         30:22:5b:de:7e:70:87:f4:41:d3:db:c0:f9:21:e5:da:46:d4:
         b3:a6:fd:1b:3e:f1:42:3f:5c:84:5c:4a:94:e1:75:01:a6:e2:
         eb:d1:6a:57:79:28:76:36:f4:4b:15:2d:2b:61:51:3f:d3:2b:
         fa:39:10:12:2e:f4:b5:df:a4:57:f0:c9:c9:fb:2c:a8:0d:fe:
         48:09:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:47:22 2024 by rpki-client on console-ams.rpki-client.org