Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa
File:                     3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa (raw, json)
Hash identifier:          MhdW6Z931eBtioGlYpvxxlozAT8eWDthPIJg9LnMHtc=
Subject key identifier:   5E:BB:57:4B:BB:BC:BB:AE:D4:64:91:0A:18:78:4A:B4:A0:67:E3:3F
Certificate issuer:       /CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
Certificate serial:       1BEE874C565B5640E2A64571CA0A01E477647705
Authority key identifier: 55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa
Signing time:             Tue 05 Mar 2024 17:41:44 +0000
ROA not before:           Tue 05 Mar 2024 17:36:44 +0000
ROA not after:            Tue 04 Mar 2025 17:41:44 +0000
asID:                     270098
IP address blocks:        190.171.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ee:87:4c:56:5b:56:40:e2:a6:45:71:ca:0a:01:e4:77:64:77:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
        Validity
            Not Before: Mar  5 17:36:44 2024 GMT
            Not After : Mar  4 17:41:44 2025 GMT
        Subject: CN=5EBB574BBBBCBBAED464910A18784AB4A067E33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:7d:ce:0d:07:75:18:99:1a:98:5e:f9:a0:
                    29:f4:51:70:96:e1:b7:2a:81:02:84:a1:9f:41:10:
                    19:78:bd:b3:ef:d5:3f:1f:61:6e:e6:48:22:0d:b4:
                    cf:47:09:bb:a6:ae:bf:a8:af:d1:3b:bd:43:ff:b8:
                    6b:78:e2:78:f8:92:62:79:74:2f:8c:a7:77:78:b0:
                    0f:50:e8:b3:4e:9c:73:a1:3e:ea:7a:f1:a2:a4:05:
                    74:58:a2:69:9f:d4:d5:53:00:e5:3a:42:58:52:ad:
                    57:51:79:89:2f:e5:71:c5:07:06:ec:f4:92:91:f6:
                    b2:bc:b3:ca:8d:7b:17:94:dc:14:28:fc:28:e9:ab:
                    15:6e:71:c5:36:d9:e7:7c:f1:6e:b2:f4:af:03:a8:
                    77:e8:18:28:c5:72:1b:e2:47:69:0a:79:03:7c:0b:
                    e4:a7:48:28:c0:11:e8:7d:b8:b3:8e:31:48:4b:63:
                    9a:53:f7:e9:3b:40:5a:76:5c:30:74:21:28:59:a3:
                    2d:bf:74:6f:71:1c:1e:44:53:04:41:77:0d:a0:df:
                    af:cd:10:6b:42:f8:32:c6:57:7b:37:ee:a6:e0:5a:
                    0e:2c:86:d5:d3:39:6e:6e:9c:88:78:5c:36:cd:2b:
                    4d:48:0a:ae:52:7b:c3:4f:71:ae:3b:29:a6:94:48:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:57:4B:BB:BC:BB:AE:D4:64:91:0A:18:78:4A:B4:A0:67:E3:3F
            X509v3 Authority Key Identifier:
                keyid:55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:36:d7:d8:2a:18:d2:b6:f2:c2:a4:4e:99:fd:64:e9:d2:b4:
         41:06:d0:62:e4:f1:76:91:52:45:74:19:31:27:13:23:45:29:
         86:53:f3:f1:3f:8f:d8:08:c3:6f:58:6d:12:0c:01:f6:99:66:
         b8:fa:4d:01:62:ac:07:b9:1a:ff:56:2b:e5:e4:21:ad:06:61:
         a8:f9:6c:40:e5:b7:f4:50:ff:ce:c5:7b:02:55:09:be:15:bd:
         e7:a2:81:21:75:ca:10:b2:8b:57:51:a2:87:8f:e6:df:de:7b:
         e0:95:9c:45:27:da:60:63:1c:68:25:2c:b3:1e:f5:eb:f7:e1:
         16:f7:c6:91:31:d3:da:83:b1:18:e2:94:d6:a0:c2:5a:ba:39:
         79:0d:c3:64:de:a9:5a:3b:7c:32:34:1e:20:dd:88:f8:8b:53:
         21:38:d8:fe:aa:8c:d4:a4:ba:d1:c6:ab:97:cd:39:39:02:85:
         8d:de:99:6b:bb:dd:a1:63:85:8a:e6:33:7c:5a:6f:98:8c:04:
         40:ea:98:28:56:ed:ec:37:31:ea:2d:03:3a:97:a8:12:d5:9c:
         b4:19:51:6c:49:43:41:1b:1f:76:e0:c6:66:c0:d0:f0:64:45:
         70:c4:99:42:a8:69:88:c7:a6:e0:41:7a:5b:74:11:40:df:e6:
         b5:23:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:04:19 2024 by rpki-client on console-fra.rpki-client.org