Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39302e302f32342d3234203d3e203237383435.roa
File:                     3139302e39372e39302e302f32342d3234203d3e203237383435.roa (raw, json)
Hash identifier:          mdHvQvsu8gNI9RbHA/Y5a791uEyKeLOsmHPFs69/zk0=
Subject key identifier:   D7:A1:06:C2:A5:D7:CB:30:4A:85:B0:CF:72:67:84:C6:18:C2:B9:86
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       6C8BE501C1EDE72BC2AAE2D83D5E1D6F49B48250
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39302e302f32342d3234203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:43 +0000
ROA not before:           Tue 04 Feb 2025 18:46:43 +0000
ROA not after:            Tue 03 Feb 2026 18:51:43 +0000
asID:                     27845
IP address blocks:        190.97.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8b:e5:01:c1:ed:e7:2b:c2:aa:e2:d8:3d:5e:1d:6f:49:b4:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:43 2025 GMT
            Not After : Feb  3 18:51:43 2026 GMT
        Subject: CN=D7A106C2A5D7CB304A85B0CF726784C618C2B986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:6e:4a:ca:f6:62:e4:81:20:29:f5:ae:5e:
                    aa:79:4a:f9:c6:63:6a:22:3b:7a:de:45:b5:e0:88:
                    0f:d0:3f:5d:b9:1a:b5:21:0e:07:6c:ff:b7:20:e3:
                    cd:32:08:82:8f:b4:2c:5f:53:a7:e3:36:83:c2:d2:
                    94:6a:67:27:1d:7e:0c:f9:9a:a1:31:39:ef:9a:86:
                    92:16:b1:fe:b9:d6:43:f2:80:6d:ad:18:78:76:70:
                    3c:61:d7:f6:80:66:0b:49:12:83:f6:87:1d:f0:a2:
                    4c:ed:1b:4a:b1:2b:c7:a7:22:06:55:74:14:8b:d4:
                    a3:cc:83:28:67:6c:4a:a9:c6:2d:24:74:c1:e4:a4:
                    a6:0a:b5:83:4c:06:15:ed:ce:38:02:12:bf:02:d0:
                    71:ec:22:f1:72:04:50:5c:d9:2b:92:91:cf:b7:0a:
                    d7:be:76:e2:80:dd:42:36:9e:e4:66:68:56:d0:39:
                    20:79:af:38:46:1c:9c:f3:b7:a2:b3:07:cf:48:11:
                    b5:55:63:64:91:31:85:a4:d7:62:e8:6f:7f:a5:3c:
                    b3:73:b4:82:f8:85:90:b1:0c:37:11:47:e4:3c:c0:
                    75:3a:55:04:50:4b:2d:f4:c7:64:48:53:f1:e4:d9:
                    38:57:6a:0e:cb:bf:12:99:31:ab:5f:97:95:d4:4a:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:06:C2:A5:D7:CB:30:4A:85:B0:CF:72:67:84:C6:18:C2:B9:86
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39302e302f32342d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:06:7b:c6:f5:5a:f1:46:7e:2f:2b:6d:7a:ab:80:2d:cb:89:
         08:83:3b:61:11:91:9f:57:a5:17:7b:a8:ae:46:df:cb:af:e3:
         dc:83:d0:d6:71:d9:7b:7d:8e:82:de:a0:76:b3:f0:9d:90:7b:
         85:39:37:bd:7d:b3:b3:6f:a8:32:e8:fe:8e:96:9a:de:20:cd:
         f2:e8:a5:10:af:0a:8b:74:ea:1f:f5:f0:fb:3d:35:33:01:d6:
         45:df:20:35:73:2c:40:94:10:65:57:42:37:4a:26:3f:06:cd:
         bf:88:65:35:8f:a0:cd:32:c9:a5:73:20:e3:62:08:9d:93:ae:
         7a:22:a2:94:bf:ac:d8:a6:9c:a9:ff:26:d7:fe:c9:6c:65:a5:
         c8:cc:e5:01:83:6a:12:2d:4e:12:db:72:1f:fd:88:5a:b5:2a:
         97:a5:c3:99:d3:b7:11:6c:e1:17:06:32:d1:5a:a9:a0:77:83:
         ef:9a:ed:f3:4e:5a:ff:0b:99:9c:1f:4c:37:8f:e4:b1:bd:0c:
         4c:61:d9:f9:1e:8c:ac:37:6f:80:c4:5d:71:b7:b4:7e:3f:b9:
         5b:ff:6a:ef:46:dc:b4:48:2f:51:9a:36:62:fc:c6:3a:93:af:
         6b:bc:a4:8b:24:14:33:8c:7e:9e:e0:ce:6d:b6:c6:54:0b:cd:
         bb:67:b9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:31 2025 by rpki-client