Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39302e302f32342d3234203d3e203237383435.roa
File:                     3139302e39372e39302e302f32342d3234203d3e203237383435.roa (raw, json)
Hash identifier:          QdYLlKZ+tfa62GPTyt7p8H5ewwRJLkZVKbGUC9gSzpc=
Subject key identifier:   84:C8:F1:24:4E:91:CC:0C:9E:1F:81:5F:E0:E8:07:95:C6:9D:CC:00
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       167DA6BF5500EEFDCE964098D9EFF3F962E23A85
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39302e302f32342d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     27845
IP address blocks:        190.97.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7d:a6:bf:55:00:ee:fd:ce:96:40:98:d9:ef:f3:f9:62:e2:3a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=84C8F1244E91CC0C9E1F815FE0E80795C69DCC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:6d:3e:7c:87:83:ed:18:e4:bb:19:f9:0d:
                    4b:db:64:ec:ac:93:a4:49:85:59:37:19:af:a5:1d:
                    fd:88:07:69:67:d4:34:50:03:eb:80:90:7d:8b:7f:
                    30:d6:d7:9c:ae:f4:a8:c8:b4:00:8a:d4:0b:39:87:
                    d3:e9:95:3b:f0:49:51:3a:80:d8:f2:5a:12:a7:60:
                    42:34:30:e6:3b:69:d7:0c:20:b8:bd:ab:59:60:4a:
                    29:01:6f:b1:dd:2b:4f:bd:85:9f:da:c9:91:32:20:
                    34:74:f8:23:20:c1:f4:df:cb:e6:b6:5e:c7:43:c6:
                    71:c5:d4:3c:25:4e:e6:ce:39:fa:b9:8f:fe:ff:3c:
                    8e:c4:95:2a:ff:cb:3e:3f:94:3a:2b:1b:36:f2:e5:
                    64:26:30:b1:e8:a3:94:29:5d:21:0e:89:8c:9c:1b:
                    a0:71:eb:70:a4:b5:01:b5:cc:e6:e1:a9:41:ed:4a:
                    98:05:56:ed:28:28:62:63:4b:6c:df:8e:88:7d:39:
                    31:1b:66:5e:6d:6d:c2:3a:35:b1:29:1c:bb:aa:94:
                    1f:80:fe:22:fd:0a:11:30:03:58:29:6e:f4:90:98:
                    6c:ca:b1:a8:fc:35:9e:6a:f1:79:28:25:81:31:d5:
                    d9:d1:d2:4a:fd:c4:03:a9:73:cc:14:59:ff:f7:e4:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C8:F1:24:4E:91:CC:0C:9E:1F:81:5F:E0:E8:07:95:C6:9D:CC:00
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39302e302f32342d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:90:20:3a:77:4e:84:52:ab:c9:0e:79:d9:b2:92:0a:5a:39:
         5c:6d:f9:82:da:91:20:fd:66:59:91:cb:f2:49:10:28:88:4b:
         ef:01:c5:d8:d6:e1:0b:ae:0d:96:2f:2c:46:9a:d0:2b:dc:0a:
         a5:44:dc:98:2a:0d:54:21:06:35:69:16:31:b2:d4:cb:83:93:
         a6:a6:39:a2:f3:f1:d1:bc:a0:bb:1d:d4:cc:50:68:de:fd:35:
         61:1b:9b:a9:aa:30:ff:74:0a:91:b7:d9:59:6f:b6:cf:02:98:
         6c:d4:2f:98:0e:77:30:3e:fc:74:a2:90:f2:29:3d:a8:f5:0e:
         ed:8f:26:1d:9e:fc:39:0a:67:1c:3d:ba:b5:b3:b5:67:85:3a:
         17:99:80:3b:e4:7d:cd:f8:74:4d:91:7c:99:61:21:e0:24:f9:
         26:24:74:0f:6b:e8:42:4e:01:5f:d4:af:bb:3f:7f:2c:ee:36:
         c1:e7:23:8e:38:ed:32:2b:6b:87:e7:73:01:11:b2:6d:5c:a3:
         a5:b6:49:9d:ed:e2:d7:19:f7:15:d8:90:16:98:aa:51:dd:ef:
         b6:28:f4:b2:59:83:1c:8b:d0:ee:07:a6:b3:4a:66:f2:20:a6:
         80:3b:4e:00:c4:c6:6b:c6:6f:cc:09:2f:da:4f:28:8d:38:99:
         18:1c:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 18:29:47 2024 by rpki-client on console-fra.rpki-client.org