Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39342e302f32332d3234203d3e203237383435.roa
File:                     3139302e39372e39342e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          4Fy/3A6sXLwj2qls7OX5jCbGgFhTqYUGhRWyW4TmoG8=
Subject key identifier:   78:E9:BE:E3:A0:ED:D5:35:C1:E4:4F:D6:A5:1C:27:00:76:A4:6E:C5
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       511A51E83E59FED452700579AE3987871259901D
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39342e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 04 Feb 2025 18:51:45 +0000
ROA not before:           Tue 04 Feb 2025 18:46:45 +0000
ROA not after:            Tue 03 Feb 2026 18:51:45 +0000
asID:                     27845
IP address blocks:        190.97.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1a:51:e8:3e:59:fe:d4:52:70:05:79:ae:39:87:87:12:59:90:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Feb  4 18:46:45 2025 GMT
            Not After : Feb  3 18:51:45 2026 GMT
        Subject: CN=78E9BEE3A0EDD535C1E44FD6A51C270076A46EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:fc:ad:37:cb:77:a1:e3:4e:b7:de:87:c7:
                    c0:b0:c4:19:d4:96:02:1d:b2:83:86:f6:f0:c9:e8:
                    42:6b:e6:fe:a8:32:08:27:da:5b:d0:c9:3e:85:5c:
                    05:95:df:a0:7e:94:e9:80:de:ee:1b:14:17:1b:39:
                    92:c1:bf:df:14:50:6e:5f:c3:03:16:30:67:b8:cf:
                    5e:11:32:93:83:1f:7c:e0:56:c4:2d:f9:d3:ac:bd:
                    33:bf:b4:0b:b2:b3:cb:4e:53:64:da:96:04:64:ed:
                    e9:f5:2f:75:83:f4:0e:d8:6d:f2:bd:dd:95:7e:10:
                    89:81:ad:7d:8c:da:bd:33:7c:07:60:0e:03:53:8f:
                    35:8d:3b:e4:04:a1:ee:c1:c6:e3:5b:54:e8:77:da:
                    11:a0:60:38:43:9b:e1:7c:4c:8e:8c:b8:5f:6d:66:
                    7d:91:93:de:5c:a3:a5:fb:23:9a:83:e0:1b:68:0e:
                    2f:f9:01:94:fc:af:a5:53:84:19:4c:9b:58:1e:a5:
                    a5:50:20:07:e6:45:95:cf:51:f5:10:57:ff:13:82:
                    98:d2:91:aa:e0:1c:e7:35:4c:c8:e0:64:84:22:72:
                    5f:48:46:1a:db:d2:e8:b5:2c:50:c9:0c:19:21:29:
                    db:e7:93:90:55:c3:a7:13:21:40:9b:e9:36:5a:1a:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E9:BE:E3:A0:ED:D5:35:C1:E4:4F:D6:A5:1C:27:00:76:A4:6E:C5
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39342e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:0d:02:6d:56:6a:2a:1e:d1:c3:c0:56:2a:e2:25:4c:95:d3:
         74:7d:df:bf:51:e5:06:05:4c:96:97:3c:ad:01:97:59:ca:db:
         73:7f:e4:9e:7b:f9:95:bf:72:36:66:64:db:f2:fb:5f:7b:a6:
         2a:c6:a2:c9:d5:3a:6f:45:04:12:e3:9b:0c:bb:a4:09:c0:8c:
         3a:76:f8:e8:4c:7b:53:7a:81:d0:64:f4:cb:b3:8b:c2:59:00:
         ef:45:9a:09:fc:83:37:8d:b3:79:7a:00:36:e9:05:5a:b0:7d:
         87:1f:2b:bf:dc:2c:50:ec:eb:9d:d0:37:80:cf:b0:d7:c0:8c:
         21:58:e3:39:f0:11:3d:59:59:00:3e:28:bb:76:12:1e:76:6b:
         27:05:f5:64:14:e4:f9:7b:67:a8:d1:28:35:ca:bd:d4:d7:03:
         21:9e:72:56:09:f2:f6:3a:f2:fc:ff:c3:bb:0d:88:83:8e:cb:
         18:18:eb:bb:91:d9:70:60:86:ad:a7:2c:b8:91:1c:83:99:5e:
         db:1d:e6:fc:c2:f3:7e:a8:5c:c0:59:cb:35:03:00:91:66:6f:
         eb:6b:16:a9:3b:a7:26:a9:61:5f:57:ef:95:a1:01:9a:30:3c:
         61:51:3b:bb:d1:b6:85:3e:98:fb:04:71:57:5d:ae:8e:ed:71:
         98:72:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:08 2025 by rpki-client