Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e37322e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          K72Jpe5griWpK18J09cvC9mowcTxm6tOaGxb6H73K+I=
Subject key identifier:   86:97:36:86:4E:E1:2C:50:88:D0:74:89:06:6F:DA:1B:2B:D8:DA:27
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       16B37EC9438182E73119FA31CA6A85DD8E957F73
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:57 +0000
ROA not before:           Tue 05 Mar 2024 18:01:57 +0000
ROA not after:            Tue 04 Mar 2025 18:06:57 +0000
asID:                     12127
IP address blocks:        190.57.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Jun 2024 23:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b3:7e:c9:43:81:82:e7:31:19:fa:31:ca:6a:85:dd:8e:95:7f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:57 2024 GMT
            Not After : Mar  4 18:06:57 2025 GMT
        Subject: CN=869736864EE12C5088D07489066FDA1B2BD8DA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:2c:87:a9:4c:6e:cc:24:e9:17:a8:00:52:
                    4e:44:0b:2f:c8:a9:e0:d2:23:38:6d:59:6a:60:9c:
                    80:f8:1a:2d:20:3e:7f:0b:95:e2:e6:81:00:8a:39:
                    bb:ed:8b:65:b1:bd:29:a6:be:95:88:fd:3c:a6:9c:
                    0e:c5:42:ea:f5:51:ea:a5:bf:69:e4:78:32:85:e6:
                    44:c6:f7:90:07:95:65:1c:a9:6f:6a:8b:3f:1c:df:
                    c7:87:2b:57:44:d8:e5:8e:8c:5f:6d:19:fd:ec:9c:
                    6d:bc:ac:31:27:00:55:af:c4:25:a0:74:ad:9e:e7:
                    5b:e6:61:7d:97:1e:a5:65:f5:3e:b2:b2:42:d5:b5:
                    c8:65:ff:80:dd:aa:4d:75:77:f6:9a:b6:5f:08:cd:
                    65:7c:ca:73:86:24:f8:78:a8:8e:c3:9c:02:a6:3b:
                    8a:08:d0:0b:9f:f3:39:e8:f4:98:c9:f1:f5:64:34:
                    4f:95:5f:ae:1c:a2:b4:6c:47:b8:20:8c:74:73:1a:
                    8f:f0:bf:84:ed:1c:9a:02:2e:0b:4a:f7:d8:22:38:
                    76:94:a6:c0:b8:2c:c4:d6:17:95:f4:5b:8e:5b:b7:
                    2c:dc:03:83:bc:83:bf:b3:a4:39:a0:6e:a8:6d:b1:
                    b1:65:0b:cc:71:22:73:d6:94:bd:bc:f2:79:3e:69:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:97:36:86:4E:E1:2C:50:88:D0:74:89:06:6F:DA:1B:2B:D8:DA:27
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:54:01:66:5c:a0:fe:ff:ec:b3:12:9d:a5:86:d8:70:a2:ad:
         ae:6d:0b:d9:d2:ef:08:0f:6b:a7:e6:82:d5:a2:d4:03:21:06:
         24:36:c2:45:a6:7e:d7:91:e1:27:79:19:2e:6c:cf:31:cb:5f:
         e8:63:1c:45:6b:bf:ed:38:ec:db:62:be:75:b3:ed:6d:79:86:
         2c:26:6c:89:01:74:78:62:84:0c:89:80:06:8b:68:a1:43:f0:
         95:02:9b:a9:46:d0:1b:28:29:9e:a9:75:38:76:68:cd:83:ef:
         9e:8d:96:cc:8b:f1:66:f5:f3:67:61:12:28:aa:8b:fb:1c:66:
         74:2c:21:7f:14:77:24:d2:5a:33:38:5e:83:80:c3:ea:d0:60:
         51:7f:0f:2f:49:d1:9a:e7:0e:d3:7a:13:bf:f4:a4:64:47:81:
         0e:8e:bd:e5:8b:66:1f:43:78:45:b0:aa:91:41:f2:34:09:ac:
         3c:68:6f:99:48:18:48:f7:81:bf:46:46:20:4a:c8:ff:12:92:
         dc:50:73:ee:4f:e7:45:31:30:a8:2f:9c:16:bf:c7:ea:84:d4:
         24:ec:ce:65:7f:fa:22:27:d0:2a:5f:88:5c:21:48:5b:ed:83:
         d0:59:4f:e6:65:bc:61:77:90:5b:a7:29:90:f1:73:c3:3a:88:
         57:52:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:32:14 2024 by rpki-client on console-ams.rpki-client.org