Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32332e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          TrL54EQJQqA3ozBEUl9og9+e5pxWfvoUnKSRMou6wiw=
Subject key identifier:   51:AA:7C:B9:FB:64:CA:20:65:B9:9B:F4:8E:58:4D:00:2F:6B:EE:3D
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       145A24A720A98F1B2286A7659E9F40BD3F6962FF
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:54 +0000
ROA not before:           Tue 05 Mar 2024 18:01:54 +0000
ROA not after:            Tue 04 Mar 2025 18:06:54 +0000
asID:                     12127
IP address blocks:        190.57.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Jun 2024 23:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5a:24:a7:20:a9:8f:1b:22:86:a7:65:9e:9f:40:bd:3f:69:62:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:54 2024 GMT
            Not After : Mar  4 18:06:54 2025 GMT
        Subject: CN=51AA7CB9FB64CA2065B99BF48E584D002F6BEE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:dc:90:cf:18:7f:cd:2f:b7:9b:5c:23:84:
                    60:f4:93:34:69:f1:36:2e:86:a8:48:dd:e6:70:d0:
                    5a:44:6d:ea:ab:65:83:69:32:3f:b1:3c:47:12:57:
                    5f:80:84:e2:d1:52:fc:d1:ff:ca:83:5f:66:5d:fb:
                    fc:10:e5:c0:9b:d3:21:1a:b9:00:47:4a:bb:53:31:
                    a4:ac:b8:5c:d9:fe:67:d2:1e:8e:f4:f0:a6:04:a2:
                    95:78:9c:2c:06:b6:ff:73:50:d6:83:11:85:ba:ed:
                    00:58:51:9b:99:6c:d2:42:d1:20:22:a5:f6:2d:88:
                    85:c4:6c:82:76:f6:aa:af:80:58:09:7f:12:f6:21:
                    5b:d3:d2:7c:29:e1:91:25:48:cf:92:79:81:aa:c4:
                    ce:e8:9e:72:cd:77:59:d5:69:2c:04:f3:80:5f:44:
                    8e:38:55:66:02:01:bb:2f:f6:3b:d8:d8:60:a5:28:
                    29:6e:92:10:7e:98:87:db:d0:9e:db:c2:fa:74:36:
                    bc:08:0f:bd:32:29:0c:36:7b:23:ad:a4:f3:24:6c:
                    b4:23:fe:91:a6:c5:a9:cf:6a:a2:58:bf:07:1f:b6:
                    36:d1:c1:34:79:08:8a:64:92:eb:ff:4e:9e:91:6a:
                    53:b2:d5:62:a2:b7:2c:fb:9b:96:71:a8:96:61:49:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:7C:B9:FB:64:CA:20:65:B9:9B:F4:8E:58:4D:00:2F:6B:EE:3D
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:19:a0:14:2d:c0:45:dc:79:1c:fa:20:84:4f:e6:dd:85:
         f6:4c:1d:43:0a:c0:c3:65:8f:15:4c:90:cd:7a:ab:a4:11:32:
         40:72:df:76:b4:01:b1:f9:0f:65:3b:7f:55:60:5c:59:e9:f8:
         8b:0c:65:c3:d4:bc:2e:19:72:07:1d:d7:6b:a2:b8:b4:05:fe:
         20:c4:f7:80:6a:6a:08:59:66:88:42:e9:0e:07:87:f2:5a:88:
         f7:e1:e0:02:bf:01:97:af:25:71:7d:df:f4:ab:de:d2:22:d4:
         07:3b:42:8b:92:a2:ef:c0:d0:33:3a:c7:95:e4:74:8b:73:11:
         4c:77:12:fd:6c:b3:34:22:45:9e:e2:be:41:23:0f:75:a4:96:
         73:b9:b1:3a:6a:07:d9:89:cf:95:73:f5:c0:7b:59:68:a7:83:
         11:ab:3e:18:d6:7a:e5:b7:54:93:01:39:2b:a0:b8:71:26:75:
         b8:e8:cc:a4:16:8f:63:88:60:42:3c:97:f4:a5:78:c4:58:d9:
         8f:a4:a5:bd:31:31:91:a8:26:e4:51:c2:c8:66:a9:54:e0:e5:
         6e:b1:08:f7:50:09:c9:4b:a7:07:f4:03:55:f8:bf:76:8e:c7:
         83:78:a5:1b:a1:aa:1f:39:27:df:b3:55:7c:d9:a3:5b:ab:f2:
         83:b6:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:32:14 2024 by rpki-client on console-ams.rpki-client.org