Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32332d3234203d3e203237383435.roa
File:                     3139302e39372e38382e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          cuByxbPCkNvaFgNOEQYcEVpCavodCUOfmKEhpez4kcg=
Subject key identifier:   E8:FC:D2:97:0D:D4:8D:82:BF:2E:36:9C:5C:84:95:EB:07:91:D8:89
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       456F419052FBB7988A629C9CF24147E3B4C4EEDF
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:46 +0000
ROA not before:           Tue 04 Feb 2025 18:46:46 +0000
ROA not after:            Tue 03 Feb 2026 18:51:46 +0000
asID:                     27845
IP address blocks:        190.97.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6f:41:90:52:fb:b7:98:8a:62:9c:9c:f2:41:47:e3:b4:c4:ee:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:46 2025 GMT
            Not After : Feb  3 18:51:46 2026 GMT
        Subject: CN=E8FCD2970DD48D82BF2E369C5C8495EB0791D889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:2c:98:3b:f5:bb:aa:dd:44:9b:d7:96:9e:84:
                    c0:25:46:9c:23:18:05:31:ca:75:c6:68:f7:e2:6e:
                    40:a9:96:d6:17:89:17:fb:f7:87:c8:27:73:fc:9f:
                    f8:09:28:f8:48:22:32:27:70:64:f6:51:87:0d:90:
                    20:7d:d5:c8:cd:b3:d0:29:39:4b:b9:aa:d1:93:05:
                    c0:3a:ef:c8:09:c1:9e:c8:f4:ab:38:61:69:74:b7:
                    65:bd:fc:2a:10:c4:40:e7:6b:ca:1c:71:6f:77:81:
                    84:28:9c:3c:20:4d:47:30:fd:d5:8d:d4:16:5f:d0:
                    b6:e0:8c:25:9b:ca:20:13:e9:9a:2d:1c:21:6f:3a:
                    68:94:e2:72:10:9e:d9:69:45:5b:ef:d7:54:bd:f4:
                    92:c8:68:44:45:ec:c9:76:81:51:e8:62:fb:d3:88:
                    8d:08:0d:66:f8:1b:8d:47:61:9f:db:f4:62:58:b7:
                    95:df:f0:86:36:04:b7:90:b2:22:92:4b:db:ed:f6:
                    3c:60:84:9c:1a:ea:2c:59:97:78:77:3b:7b:61:b9:
                    67:87:ab:a5:e6:77:0b:65:9b:29:51:99:36:36:e2:
                    59:23:59:3f:58:11:72:23:19:9f:75:c7:4e:3c:b5:
                    b4:60:60:4e:b2:10:95:1d:c8:c1:8a:4f:50:bf:97:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:D2:97:0D:D4:8D:82:BF:2E:36:9C:5C:84:95:EB:07:91:D8:89
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:9b:98:dd:94:12:25:c6:12:a2:d2:f1:48:da:23:9f:69:f6:
         07:1e:18:33:a3:1a:67:b9:ab:df:03:62:e6:bf:75:a0:e5:34:
         98:a5:e2:09:95:3d:0a:bb:93:c6:87:da:82:21:0d:9b:39:15:
         da:01:23:3d:ed:85:f6:3c:a3:b9:67:e3:70:35:7a:b5:99:1e:
         09:c8:e7:11:31:6e:2e:7a:e2:1f:7a:5d:fd:51:25:e6:68:63:
         a1:00:8c:29:97:f6:d0:d9:4f:ee:60:f9:57:54:85:c8:cf:30:
         96:0e:db:27:a8:f1:a1:fe:49:2e:fc:a8:0b:c1:9c:e4:4a:4d:
         2e:33:bb:ec:29:cb:40:c3:1e:bc:9a:9e:80:f6:c8:85:fd:a5:
         bd:39:27:52:8f:cc:58:f9:d9:6b:4c:dd:29:3d:e3:ef:b5:33:
         0d:e1:dd:d8:61:62:f5:cb:95:3e:8b:18:3f:37:b5:ce:3b:78:
         c4:bc:f1:a8:3a:ce:27:db:c2:5a:d6:fc:a2:48:83:03:8d:8c:
         7f:90:82:fd:47:c9:91:9f:e6:20:be:6d:f3:30:29:dc:48:0d:
         0b:62:8f:c3:c7:d3:b6:d5:90:cc:6b:39:f2:95:6e:f4:22:ec:
         c0:7b:e6:1c:94:78:27:82:04:ea:58:99:82:30:a5:91:80:6a:
         ec:a6:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:13 2025 by rpki-client