Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39342e302f32332d3234203d3e203237383435.roa
File:                     3139302e39372e39342e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          s/G7gtXDnkG5vQ4jWKCxMkHCW4gGYyLXFvAHi6cw0tI=
Subject key identifier:   38:31:CF:0D:2A:A3:EE:97:6B:00:18:57:08:77:35:35:AF:A2:9C:A5
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       3AC5A0594AD1E07F9BAEB9EBC433C69B6CFF6D5F
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39342e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:36 +0000
ROA not before:           Tue 05 Mar 2024 17:41:36 +0000
ROA not after:            Tue 04 Mar 2025 17:46:36 +0000
asID:                     27845
IP address blocks:        190.97.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c5:a0:59:4a:d1:e0:7f:9b:ae:b9:eb:c4:33:c6:9b:6c:ff:6d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:36 2024 GMT
            Not After : Mar  4 17:46:36 2025 GMT
        Subject: CN=3831CF0D2AA3EE976B00185708773535AFA29CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:61:6c:eb:60:42:06:21:11:57:47:57:a2:
                    5b:e6:b4:44:12:ac:1f:6b:6e:65:4f:8c:c8:51:6d:
                    11:bb:c9:52:80:68:0d:c1:8c:fc:c0:51:84:ea:96:
                    e6:5b:77:16:8e:a1:72:92:8b:f3:da:b8:df:f4:ce:
                    05:2b:3e:4b:64:fa:94:2b:cd:0c:69:d2:81:63:99:
                    a5:a8:ef:48:63:b7:bf:76:f0:5e:ba:fd:48:82:4c:
                    ef:06:70:d4:7d:2e:0d:35:79:25:9e:2f:67:4b:b2:
                    31:b0:62:64:36:ed:5a:44:aa:e1:41:2d:b4:c0:b2:
                    da:52:5b:f0:8c:8d:b2:37:45:1d:4b:c7:2f:3d:63:
                    7f:d3:ec:1c:4c:13:d1:36:d5:a4:61:27:de:37:e3:
                    6f:9c:e8:0a:79:93:fc:03:56:a2:48:04:8c:41:dc:
                    09:4c:2e:47:c1:6e:f9:2c:4d:fc:5c:42:f0:08:7f:
                    9a:ce:56:38:8a:f3:7b:a2:8a:50:d3:5b:87:9d:66:
                    0e:1f:de:07:07:34:7f:99:86:47:50:4e:93:51:7c:
                    97:e0:b7:2d:2e:e1:17:67:aa:9d:ec:a3:28:c2:15:
                    25:41:8e:61:4d:2a:aa:97:27:83:5e:b7:07:cd:2f:
                    35:b0:f0:12:b2:2b:5f:65:7f:8d:95:78:d2:a8:24:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:CF:0D:2A:A3:EE:97:6B:00:18:57:08:77:35:35:AF:A2:9C:A5
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39342e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:43:e3:91:f8:ac:a4:c9:5c:63:4b:51:aa:a3:de:12:b3:ea:
         25:a1:55:e3:41:48:36:46:57:7c:fe:f2:1b:ab:c2:87:d7:70:
         c7:50:64:1e:24:9b:15:26:e7:aa:a9:60:ed:8b:0a:fa:f5:02:
         de:07:ac:ac:78:09:fc:64:9d:ef:0f:d1:ef:fd:cd:d8:ef:df:
         bd:8f:d8:6b:ec:c7:85:0b:88:e9:80:04:17:1b:5e:e5:56:15:
         35:50:6f:51:f8:95:22:7b:e5:bc:48:4f:01:86:7b:84:0d:0b:
         b0:27:c5:99:87:bb:4a:d4:ee:14:92:7d:6a:d8:d9:d4:6d:b3:
         89:47:13:23:e7:c5:e1:15:5d:14:aa:6a:d3:8b:d3:6d:c8:1d:
         ee:10:7d:43:27:f3:b4:c4:23:26:8d:28:18:c6:35:73:0a:ad:
         88:3d:19:7b:bc:90:cf:ad:a3:1a:dd:5e:0d:f8:c6:db:08:b2:
         b3:eb:64:45:37:92:b6:8c:d5:2d:2d:6a:fb:6e:1b:1e:f4:65:
         f8:df:8b:d7:7e:bd:af:cf:0a:dd:f4:4c:32:2e:76:88:f8:1c:
         1b:84:91:96:91:68:70:43:1a:d7:32:28:6e:d5:6e:5c:3c:3a:
         a5:a8:a7:89:fd:45:db:4c:9a:16:fb:b2:c4:ea:12:28:50:c9:
         c4:7e:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 20:51:09 2024 by rpki-client on console-fra.rpki-client.org