Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa
File:                     3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa (raw, json)
Hash identifier:          D8V4BSQ+EmWh0cWgNNWz90RBZid7zcZ+JkqHRWxBzqg=
Subject key identifier:   3B:9E:ED:B3:39:0D:C6:0C:64:AD:EC:00:C1:E0:52:AD:9A:4D:40:CD
Certificate issuer:       /CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
Certificate serial:       134FB7C397204439AE10E2847AEF664A877935BE
Authority key identifier: 55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa
Signing time:             Tue 04 Feb 2025 18:17:32 +0000
ROA not before:           Tue 04 Feb 2025 18:12:32 +0000
ROA not after:            Tue 03 Feb 2026 18:17:32 +0000
asID:                     270098
IP address blocks:        190.171.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4f:b7:c3:97:20:44:39:ae:10:e2:84:7a:ef:66:4a:87:79:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
        Validity
            Not Before: Feb  4 18:12:32 2025 GMT
            Not After : Feb  3 18:17:32 2026 GMT
        Subject: CN=3B9EEDB3390DC60C64ADEC00C1E052AD9A4D40CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:ed:be:c2:ef:23:a2:7e:66:72:82:ae:76:
                    27:44:df:71:8c:9e:7f:ee:6f:23:39:4b:b9:a5:ed:
                    b7:79:81:19:41:ce:d8:47:e5:03:3a:7b:23:d4:90:
                    50:18:41:7a:39:87:5b:b2:35:ab:e8:48:fc:65:9a:
                    58:87:bb:3a:64:e3:35:d3:15:d5:34:6d:0f:8b:58:
                    c6:5f:3b:a9:fa:82:24:c1:dc:ca:cd:bd:d3:6a:b6:
                    ad:8d:ae:42:a1:cc:6e:e9:a7:fc:74:6c:1b:d0:74:
                    73:7c:e6:ce:d0:19:15:59:07:60:66:61:43:13:f4:
                    c1:bd:e8:d1:30:44:ef:b0:d6:e4:84:f1:20:3f:7d:
                    56:7a:e3:5c:57:e3:dc:d7:c4:98:8f:f5:50:50:fc:
                    f7:e0:98:bf:1b:4e:e6:22:52:8e:48:e8:fc:3f:4d:
                    c4:5b:b2:1e:12:8d:33:7c:f0:1a:ae:c7:88:8e:29:
                    47:81:4c:64:99:f2:e1:0e:97:cc:b4:d3:9b:cd:65:
                    7f:f6:92:d9:c2:29:3d:11:4e:35:8a:3e:52:e9:99:
                    81:36:2b:f3:38:1a:db:b7:53:9d:32:9f:89:65:0a:
                    54:49:5f:1a:85:63:dd:ba:30:b8:43:5c:b3:72:7d:
                    1b:61:cc:77:4f:20:18:a7:36:69:40:bc:4d:cc:aa:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9E:ED:B3:39:0D:C6:0C:64:AD:EC:00:C1:E0:52:AD:9A:4D:40:CD
            X509v3 Authority Key Identifier:
                keyid:55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e39312e302f32342d3234203d3e20323730303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7f:58:f4:6e:70:45:0b:0d:0d:6a:84:97:b5:2d:9a:63:7b:
         76:d3:22:56:37:49:31:2c:82:0c:76:bc:e2:f0:bb:a5:ba:b3:
         61:4a:f9:be:57:da:c6:17:d9:5a:9f:a7:a2:9f:06:72:dd:a4:
         70:12:48:b0:a3:10:b5:15:f8:66:3e:73:8c:04:bc:3b:ee:74:
         2f:cd:71:fd:11:58:02:95:d5:36:81:fc:19:2c:d4:9e:92:3d:
         46:67:09:2b:b1:9d:99:67:0b:a5:19:89:6e:ef:a6:0c:78:27:
         a8:08:e8:e1:1b:dd:7b:80:6e:69:b4:24:ee:88:f3:62:1c:8d:
         91:55:e9:97:b0:72:2f:98:06:83:ac:30:07:5f:3c:21:47:d6:
         14:07:17:96:6a:d3:bc:41:bb:ff:60:9e:73:35:3d:07:dd:6c:
         14:74:c4:4e:b7:72:bd:3f:4f:46:a5:a3:d1:0f:cf:95:3b:d7:
         35:27:32:12:03:2f:90:9d:da:66:8b:23:c2:33:e1:23:20:c1:
         7f:02:ea:3a:75:bf:6d:83:b8:29:54:c7:2f:0d:35:6f:42:4e:
         a3:7a:e9:3c:db:a1:92:82:5e:db:c4:61:f8:c5:21:21:b9:7c:
         57:5b:76:9f:b2:c6:8d:15:d7:4f:86:03:a4:14:d9:0d:14:bf:
         a7:97:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:43:06 2025 by rpki-client