Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa
File:                     3139302e39372e38362e302f32342d3234203d3e203237383435.roa (raw, json)
Hash identifier:          qXLy/2svsqdL3W2EcGPw9n92bZt9N9lQV5ce0vRFBn4=
Subject key identifier:   E0:DB:32:CF:DC:60:88:77:2E:39:C7:FB:1C:1E:D1:1A:70:D1:FB:6B
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       674B95EA9C1AB02E0149B99554184D49D6C08BD5
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa
Signing time:             Fri 06 Dec 2024 01:10:00 +0000
ROA not before:           Fri 06 Dec 2024 01:05:00 +0000
ROA not after:            Fri 05 Dec 2025 01:10:00 +0000
asID:                     27845
IP address blocks:        190.97.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4b:95:ea:9c:1a:b0:2e:01:49:b9:95:54:18:4d:49:d6:c0:8b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Dec  6 01:05:00 2024 GMT
            Not After : Dec  5 01:10:00 2025 GMT
        Subject: CN=E0DB32CFDC6088772E39C7FB1C1ED11A70D1FB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:ba:bc:b2:c6:a1:31:42:1e:0a:bc:04:b0:
                    79:f6:3e:f2:0c:a6:08:55:6f:c3:e3:97:d5:5b:58:
                    fb:fd:4a:fe:89:2e:34:9c:15:e1:43:d1:de:1c:34:
                    83:8a:78:ad:95:cd:31:e3:65:31:dd:5b:6a:1a:f9:
                    c3:58:67:1d:bf:eb:c2:90:4b:2b:00:76:70:d8:0f:
                    a2:30:89:21:51:54:a5:5e:77:f0:02:ff:1d:6e:e3:
                    1e:fb:10:ff:02:48:21:f7:db:68:95:2b:38:53:72:
                    09:db:4e:c8:ca:6a:39:d6:56:57:e2:7c:e9:e7:19:
                    69:15:31:fa:2f:8b:37:5a:8d:73:76:6e:2c:d5:56:
                    83:91:07:c2:44:7c:ee:48:2e:d3:23:c6:a8:21:fd:
                    7b:fb:49:27:e7:be:3e:b5:d5:64:25:e4:75:c9:22:
                    79:53:a8:0f:b2:a5:da:5c:73:2a:1a:68:91:46:ee:
                    28:2e:eb:54:58:5e:62:e5:33:48:c0:d8:5d:29:fe:
                    32:cf:94:23:3d:dd:27:d9:9f:9f:56:73:16:cf:8a:
                    e4:92:92:3e:50:80:c8:e5:a1:5e:de:cf:2b:f2:d1:
                    4c:f0:c5:29:7e:81:07:f7:7c:19:57:98:59:30:39:
                    7f:04:d2:95:f9:54:42:5d:86:64:fb:da:d4:c2:01:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DB:32:CF:DC:60:88:77:2E:39:C7:FB:1C:1E:D1:1A:70:D1:FB:6B
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d4:4d:de:2a:9d:41:44:34:27:22:ff:8b:d3:7b:a8:81:a5:
         00:2f:82:90:a9:f1:6a:60:bf:05:ae:c2:b3:4c:1e:a7:74:4e:
         21:43:03:e2:aa:8e:15:d3:a9:86:fa:8b:0d:a7:fe:88:02:d3:
         86:0e:be:55:f2:0a:63:f3:aa:9f:75:65:02:e9:85:cd:46:e4:
         3b:8a:e7:5b:23:ce:44:8c:f3:de:a3:9b:50:63:81:f7:a9:01:
         29:b5:2f:d8:4b:0d:05:17:19:f5:6c:44:78:23:ed:77:ab:e2:
         74:6f:1d:70:6b:ae:ad:ba:43:14:65:47:35:2c:e8:b7:07:2e:
         90:3d:6f:90:68:35:5c:26:fe:b6:72:3d:ff:4c:e6:26:86:fd:
         81:e1:6c:bb:ec:90:5d:91:7b:0f:29:f9:2b:f8:7d:07:b9:46:
         b4:ad:4e:8c:19:b8:61:47:2a:2b:48:34:82:dc:e2:f4:77:90:
         41:bd:3a:5d:93:9f:47:13:81:15:9e:a0:88:3c:12:71:08:5a:
         08:ca:45:6f:a1:cc:e9:60:2c:ec:e6:14:21:3e:9e:19:44:77:
         91:ff:01:01:bf:3a:23:20:38:78:f7:ba:77:79:1d:20:aa:5e:
         3b:f9:36:59:32:be:2e:3b:2f:44:43:28:f0:d6:9f:8b:13:3a:
         25:28:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:08 2025 by rpki-client