Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39322e302f32342d3234203d3e203237383435.roa
File:                     3139302e39372e39322e302f32342d3234203d3e203237383435.roa (raw, json)
Hash identifier:          HsseuZVFZRoiyWnrr1q3r+4XE6kjlml6KmuAjUHa8sk=
Subject key identifier:   A5:75:EE:2C:55:61:A8:CE:1C:C2:86:42:74:9F:11:03:82:D0:D2:12
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       1633A6B26677BE95033D218BC84AB1AFE4BCFC80
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39322e302f32342d3234203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:47 +0000
ROA not before:           Tue 04 Feb 2025 18:46:47 +0000
ROA not after:            Tue 03 Feb 2026 18:51:47 +0000
asID:                     27845
IP address blocks:        190.97.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:33:a6:b2:66:77:be:95:03:3d:21:8b:c8:4a:b1:af:e4:bc:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:47 2025 GMT
            Not After : Feb  3 18:51:47 2026 GMT
        Subject: CN=A575EE2C5561A8CE1CC28642749F110382D0D212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:2b:55:f7:1e:c3:d3:47:8b:b2:04:b2:0e:
                    7d:1a:ab:98:8f:69:ce:3c:b1:f6:b5:81:e7:49:ce:
                    41:f0:e7:82:fa:71:2a:d2:1f:f5:31:80:d8:97:00:
                    62:f2:d9:bd:5f:c7:e7:49:40:6a:70:b9:d9:d5:dc:
                    ce:50:67:4c:2b:2e:b5:d6:33:24:bc:53:a4:34:e3:
                    79:1e:f4:f9:79:e3:f8:df:5b:7d:e6:d3:db:39:59:
                    50:64:f4:f0:20:82:e0:b4:84:1a:6d:4a:4d:0e:17:
                    98:b5:dc:73:b2:ac:26:9e:b7:19:35:18:27:32:c4:
                    eb:4d:89:43:a4:53:f6:a4:1b:79:50:e4:4b:97:dc:
                    8a:63:d6:8c:36:05:20:a4:69:6f:c0:61:a3:80:13:
                    bd:97:59:07:19:8a:13:19:86:97:c2:9c:b1:e9:ee:
                    2b:2f:14:b3:0b:39:07:42:2f:16:7e:00:89:bd:da:
                    a0:bb:e0:7b:84:67:7a:25:0e:af:3d:69:c5:35:4c:
                    f1:c4:68:cc:c4:3f:6f:ca:75:15:f7:4e:20:31:5b:
                    47:8e:63:ac:42:7e:7b:3b:7c:3a:05:94:97:c3:f7:
                    e7:86:15:9f:9c:46:0c:dd:cb:89:3b:45:09:c6:92:
                    0e:c4:41:60:75:21:81:62:ea:b6:c7:9a:10:7b:39:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:75:EE:2C:55:61:A8:CE:1C:C2:86:42:74:9F:11:03:82:D0:D2:12
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39322e302f32342d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:3a:ab:f9:1a:11:eb:8d:18:b9:e6:98:9b:19:c6:5e:10:
         1f:6a:f9:37:63:52:9b:60:6a:8b:df:35:d3:73:1d:a5:2d:f8:
         fa:60:be:4e:1c:e9:36:7a:54:41:1a:5b:73:c9:a5:a5:03:cf:
         71:2a:93:84:c9:2a:cc:2b:1d:b3:17:10:6f:19:3f:e9:5d:86:
         2f:d6:ef:07:b1:e3:2d:de:fe:a9:1a:87:3f:42:6a:25:e0:32:
         1a:11:e3:b5:4b:8d:1f:89:8f:67:fe:e4:02:ac:aa:30:3f:e3:
         68:14:f8:9b:87:1f:6b:58:1a:df:d2:e0:a5:fb:66:72:01:51:
         f2:e9:1c:e7:52:7f:34:c1:70:44:1a:ab:99:d9:12:e1:33:87:
         6f:23:fc:05:94:9e:d1:b4:69:a0:61:b9:61:25:bf:71:5c:62:
         5e:cf:d3:52:76:43:c3:64:62:cb:65:4f:bf:72:cb:2c:3e:8c:
         a8:a0:6f:39:db:44:fc:02:fb:a3:1b:05:66:59:bc:d7:ad:b5:
         c8:d0:b6:08:81:fe:eb:4b:36:fb:16:42:2e:a3:e4:91:b1:e8:
         fc:7a:d7:da:96:25:46:29:ff:5e:00:01:e0:67:cc:c0:4d:ea:
         9d:e0:56:6b:bd:9a:aa:aa:81:14:37:c5:8f:d8:dc:c5:7e:4e:
         5d:72:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:15 2025 by rpki-client