Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38382e302f32322d3234203d3e20323730303938.roa
File:                     3139302e3137312e38382e302f32322d3234203d3e20323730303938.roa (raw, json)
Hash identifier:          8JQ7p4k3NyYETcjSEEeh2cpLL3MQWhqTwdLyXpjfess=
Subject key identifier:   71:F5:4C:8D:9F:8D:78:E2:2A:EF:1D:98:54:22:15:85:53:56:99:DF
Certificate issuer:       /CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
Certificate serial:       02D0CA346FF8CF63AF19A14A151DF600F63A3A06
Authority key identifier: 55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38382e302f32322d3234203d3e20323730303938.roa
Signing time:             Tue 05 Mar 2024 17:41:42 +0000
ROA not before:           Tue 05 Mar 2024 17:36:42 +0000
ROA not after:            Tue 04 Mar 2025 17:41:42 +0000
asID:                     270098
IP address blocks:        190.171.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d0:ca:34:6f:f8:cf:63:af:19:a1:4a:15:1d:f6:00:f6:3a:3a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
        Validity
            Not Before: Mar  5 17:36:42 2024 GMT
            Not After : Mar  4 17:41:42 2025 GMT
        Subject: CN=71F54C8D9F8D78E22AEF1D9854221585535699DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:9d:73:44:cc:07:b2:fe:98:14:36:1c:3b:
                    45:2f:62:b6:d9:5f:18:f8:dc:ba:51:94:2c:ba:30:
                    5c:9b:2d:14:66:34:6f:01:48:5e:43:0a:88:ba:1d:
                    de:c4:bb:dd:a4:06:a3:f8:7a:31:e2:4b:36:6a:6f:
                    a5:d9:1a:6b:3d:07:ec:7d:79:e9:91:e2:c7:35:f4:
                    ba:e0:5a:d4:6e:19:32:7a:8f:a8:18:1c:7c:24:07:
                    63:1d:07:74:23:9d:48:02:94:4f:e7:bc:74:61:0f:
                    4d:9e:48:7b:53:a3:b1:e8:d4:5a:de:c5:9f:f9:41:
                    6c:09:e0:57:1c:74:46:77:93:18:a1:80:f7:cf:c6:
                    70:9c:6b:8b:a2:9d:3c:63:d1:6c:d0:86:23:1a:d6:
                    c7:d7:3b:ae:41:9f:f7:3c:11:fd:ab:bf:47:b4:f8:
                    4a:f5:33:16:09:b3:0e:6b:a4:44:e9:77:ae:06:ff:
                    94:6f:1f:2a:da:6a:5c:7c:1d:2e:3c:0f:df:61:a7:
                    2b:74:a8:a7:30:13:2e:e0:6d:51:16:89:4d:53:17:
                    63:87:0f:12:56:3a:01:a8:93:c3:20:8f:5e:26:14:
                    91:39:12:2f:29:35:0a:1a:f6:1f:cd:25:05:51:49:
                    3b:a2:bc:b6:7c:96:db:8f:c3:3a:e9:0c:c3:93:e8:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F5:4C:8D:9F:8D:78:E2:2A:EF:1D:98:54:22:15:85:53:56:99:DF
            X509v3 Authority Key Identifier:
                keyid:55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38382e302f32322d3234203d3e20323730303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:04:dd:87:ae:09:f3:96:31:39:94:77:76:dd:6d:56:64:
         d8:5b:1f:9d:d3:4b:bf:9c:96:f1:ef:fb:35:ba:bf:fa:1b:20:
         2d:c8:12:4b:09:8a:c7:c7:6a:ae:76:a8:6c:a5:26:f5:8d:c2:
         76:67:ab:b6:d0:28:dd:61:8a:20:c6:f2:56:14:2e:fc:65:f3:
         0f:f2:9e:e0:dd:33:82:25:85:01:c5:bb:07:91:d0:a6:24:cc:
         69:02:6a:3d:18:91:95:be:64:ad:ab:56:58:92:a8:2d:e8:c1:
         96:2f:34:e9:82:8c:b9:3c:1e:8e:ec:56:2f:19:47:18:8f:54:
         0c:30:77:84:5f:71:d7:25:86:31:c0:b4:99:e9:b5:f2:e7:83:
         d3:88:a4:f8:7a:6b:a1:1c:b0:d5:72:75:8f:79:a8:d5:6c:0f:
         46:62:0b:4a:94:a1:bd:6f:aa:25:06:3e:8b:09:f6:14:83:14:
         f3:64:34:ef:cd:e0:ee:6e:fb:32:b8:18:99:ef:b1:61:4f:40:
         11:2c:da:a4:5e:c5:e6:f2:70:c2:49:59:71:b4:32:29:98:bd:
         a7:dd:0f:56:a1:af:36:41:82:ef:1d:73:c8:ad:9d:9c:8f:4b:
         44:82:b2:64:e8:0a:6d:b9:e3:22:f7:32:62:4f:e7:4e:1f:33:
         d7:fb:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:06 2024 by rpki-client on console-fra.rpki-client.org