Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32322d3234203d3e203237383435.roa
File:                     3139302e39372e38382e302f32322d3234203d3e203237383435.roa (raw, json)
Hash identifier:          cpiE48lo+70/MbVmgNZzPTcfKa2X2CGwrYoeQ8pB6rk=
Subject key identifier:   08:F0:E3:A6:34:86:D0:26:4E:41:59:23:45:B0:3F:98:DB:80:EB:06
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       603A9DBDA48D2880B4FA3265B7F74E64E1328F88
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32322d3234203d3e203237383435.roa
Signing time:             Mon 28 Jul 2025 19:15:00 +0000
ROA not before:           Mon 28 Jul 2025 19:10:00 +0000
ROA not after:            Mon 27 Jul 2026 19:15:00 +0000
asID:                     27845
IP address blocks:        190.97.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 05:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3a:9d:bd:a4:8d:28:80:b4:fa:32:65:b7:f7:4e:64:e1:32:8f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jul 28 19:10:00 2025 GMT
            Not After : Jul 27 19:15:00 2026 GMT
        Subject: CN=08F0E3A63486D0264E41592345B03F98DB80EB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a1:04:dc:3b:ce:99:4d:52:24:02:8b:a0:dc:
                    9e:35:f2:7a:8b:df:64:f0:ae:7d:d9:07:0c:6d:38:
                    a2:82:77:34:c7:27:11:03:e3:af:7c:01:4e:82:2c:
                    82:eb:de:c2:2f:ba:51:4d:f0:50:28:ad:56:17:4a:
                    18:ee:8c:96:ce:80:f9:96:68:2b:0a:83:b3:99:04:
                    fc:79:5e:d0:56:8a:20:d9:2a:09:68:b8:86:d1:ca:
                    44:74:76:46:09:1c:07:bf:9b:00:8f:97:23:e8:61:
                    78:de:d5:09:2b:b8:f3:9c:ff:60:95:5b:77:9f:b2:
                    40:b2:cb:4b:84:d3:53:f0:dc:dd:98:f7:c3:82:74:
                    91:d7:30:3e:f9:42:fd:2f:92:c8:d2:4a:9a:d3:4a:
                    1b:14:d0:a0:4a:45:39:0e:2f:43:2e:07:38:e0:ce:
                    f8:6e:2e:b8:b8:86:ac:22:97:0b:94:1d:0c:65:2f:
                    78:81:58:12:3e:6b:0d:0a:90:46:80:eb:3e:7d:82:
                    a7:58:b3:7b:bb:52:af:ea:75:40:33:1f:96:41:39:
                    13:83:07:42:86:ea:ba:41:a4:f8:1c:48:6b:22:20:
                    5c:2b:15:91:21:db:1c:fc:db:76:6b:14:4b:2c:22:
                    a1:f5:fa:a2:8a:2c:ee:8e:65:61:6a:36:e2:f6:4d:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F0:E3:A6:34:86:D0:26:4E:41:59:23:45:B0:3F:98:DB:80:EB:06
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32322d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:43:5a:65:e6:76:b1:ed:96:d5:77:99:d1:24:c1:cb:70:b3:
         29:6e:41:f7:ba:cc:cd:2b:ad:32:e1:b7:40:cc:4c:d6:ce:5b:
         4b:1f:6f:e5:cf:66:e5:f9:4e:b1:9a:da:e7:eb:f4:7e:48:f3:
         a3:be:7d:b1:dd:c3:c5:58:e7:12:8c:07:cc:97:3d:dd:c7:ad:
         6c:1a:e8:de:25:41:19:dd:3a:a4:40:b6:ce:d2:60:d8:db:b6:
         5b:70:10:2c:2a:53:6a:90:3e:16:fe:ac:e2:94:c6:f9:99:10:
         6c:41:64:06:38:e1:5e:17:5e:e9:c5:f2:5e:5c:ce:18:b5:26:
         50:c2:15:0e:45:44:99:f4:2f:f2:08:85:f8:01:ef:9c:c7:fa:
         ad:46:de:91:d1:2e:f6:a6:b4:27:d2:25:a1:17:76:3b:4d:6c:
         74:71:b0:08:51:8d:80:e9:be:43:74:f5:10:f5:5c:73:ef:4b:
         30:a2:21:09:48:56:d3:c9:04:46:62:e2:5d:8e:31:c8:72:21:
         fc:8d:0e:06:a6:51:d7:56:a9:09:11:a3:04:d8:db:dd:df:8e:
         d9:c9:07:5d:db:42:6b:36:b7:f5:6d:f2:c4:6a:68:ae:50:61:
         87:ed:17:ac:3a:ea:15:06:58:ab:96:ae:42:5d:66:5b:a7:95:
         3e:9b:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:56 2025 by rpki-client