Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32312d3231203d3e203132313237.roa
File:                     3139302e35372e3130342e302f32312d3231203d3e203132313237.roa (raw, json)
Hash identifier:          e1/yu0K/iqJhP6DU64Nhte8AQScw1bYkoZoICdd74N8=
Subject key identifier:   3C:7D:1D:CF:35:C0:C4:3B:51:E0:70:5A:8F:47:FB:2A:C8:02:17:3A
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0A0A53ECFFDACDEE3E08887838DB2A5BC29B6DC0
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32312d3231203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:32 +0000
ROA not before:           Tue 04 Feb 2025 18:46:32 +0000
ROA not after:            Tue 03 Feb 2026 18:51:32 +0000
asID:                     12127
IP address blocks:        190.57.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0a:53:ec:ff:da:cd:ee:3e:08:88:78:38:db:2a:5b:c2:9b:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:32 2025 GMT
            Not After : Feb  3 18:51:32 2026 GMT
        Subject: CN=3C7D1DCF35C0C43B51E0705A8F47FB2AC802173A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:98:dc:5c:01:6a:fe:c5:82:56:a0:f2:22:
                    b7:af:10:a8:65:13:93:ba:11:cc:73:d8:5e:a6:d3:
                    4c:ef:d9:87:cd:ce:1d:b3:9d:66:20:11:3d:c2:73:
                    32:64:13:8b:6c:8b:cc:9f:45:6c:ed:7f:1b:99:7f:
                    e4:e5:97:25:49:c9:57:02:bf:a1:1e:25:10:77:e1:
                    73:3b:a3:66:29:12:f9:26:fa:59:77:fd:cd:14:88:
                    89:66:1a:41:7c:0d:b6:36:4c:01:cc:49:a6:05:c2:
                    c4:96:ef:1f:e6:4c:1e:d0:3f:b0:40:03:ca:0d:29:
                    b2:23:47:9a:cb:ef:9a:5d:25:72:7a:27:6d:d5:9e:
                    7f:62:6d:25:00:dc:ab:93:31:ff:c0:df:9c:63:1c:
                    5d:ce:5b:ea:c0:60:b8:0e:7b:6f:83:1b:78:1d:9e:
                    19:b8:af:36:1c:60:e1:60:b0:76:52:aa:a8:f1:4b:
                    98:f3:c2:ee:88:66:d7:2a:bd:76:dc:c8:4c:d4:76:
                    f1:54:11:23:56:7a:15:41:b8:bf:1b:af:2d:e4:b4:
                    2c:ba:49:7e:66:b9:a0:6f:c0:64:d9:b9:ab:ad:fe:
                    24:13:95:78:51:e3:c1:69:d5:0b:e3:11:c7:29:5d:
                    a3:2c:fc:0d:f2:2c:0c:3b:86:b0:6c:e5:32:90:88:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:1D:CF:35:C0:C4:3B:51:E0:70:5A:8F:47:FB:2A:C8:02:17:3A
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32312d3231203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:2a:6c:c9:84:7e:40:13:a8:56:7c:3f:26:58:e3:bb:f3:
         32:a3:f5:5e:a8:3c:ba:7f:5b:ff:c3:ca:0e:2a:2d:13:08:03:
         f8:ee:87:36:dc:cf:4f:c0:73:d2:bf:d5:94:d6:9e:09:88:ca:
         06:be:9a:95:82:e7:09:4e:be:b8:4a:c0:26:6a:a6:47:38:7e:
         4d:af:ab:6e:47:24:db:70:83:a5:38:00:26:d2:a1:92:d3:0e:
         b5:b0:21:0d:83:b7:36:6a:05:a9:89:0c:cd:79:b3:8f:7b:0f:
         95:e6:ea:67:62:dd:d6:a2:31:30:61:38:ac:99:8e:41:7f:37:
         ef:a3:a8:7c:20:f4:40:c1:89:04:35:be:c6:31:e2:83:44:31:
         70:16:38:59:d1:1e:02:85:16:1b:bf:07:45:a8:6e:0d:f0:b9:
         44:52:56:9c:f2:63:ef:d2:17:cb:d3:55:61:cb:b0:f5:0b:af:
         2a:94:29:da:6e:c0:a4:0c:1b:a3:9a:74:da:c8:b8:c1:0f:cf:
         61:f7:22:5b:13:b7:7b:99:e4:61:d4:2e:f6:8d:33:1a:2e:8b:
         4f:1b:24:e0:b0:81:79:16:7f:fc:df:85:aa:34:57:17:6f:15:
         35:da:68:2a:c5:88:6e:c8:88:cc:4c:ca:c4:8f:22:2e:e3:3b:
         ad:d5:51:62
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCgpT7P/aze4+CIh4ONsqW8KbbcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MzJaFw0yNjAyMDMxODUxMzJaMDMxMTAvBgNV
BAMTKDNDN0QxRENGMzVDMEM0M0I1MUUwNzA1QThGNDdGQjJBQzgwMjE3M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSZjcXAFq/sWCVqDyIrevEKhl
E5O6Ecxz2F6m00zv2YfNzh2znWYgET3CczJkE4tsi8yfRWztfxuZf+TllyVJyVcC
v6EeJRB34XM7o2YpEvkm+ll3/c0UiIlmGkF8DbY2TAHMSaYFwsSW7x/mTB7QP7BA
A8oNKbIjR5rL75pdJXJ6J23Vnn9ibSUA3KuTMf/A35xjHF3OW+rAYLgOe2+DG3gd
nhm4rzYcYOFgsHZSqqjxS5jzwu6IZtcqvXbcyEzUdvFUESNWehVBuL8bry3ktCy6
SX5muaBvwGTZuaut/iQTlXhR48Fp1QvjEccpXaMs/A3yLAw7hrBs5TKQiCBdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPH0dzzXAxDtR4HBaj0f7KsgCFzowHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMDM0MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzMjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA745aDAN
BgkqhkiG9w0BAQsFAAOCAQEAJMsqbMmEfkATqFZ8PyZY47vzMqP1Xqg8un9b/8PK
DiotEwgD+O6HNtzPT8Bz0r/VlNaeCYjKBr6alYLnCU6+uErAJmqmRzh+Ta+rbkck
23CDpTgAJtKhktMOtbAhDYO3NmoFqYkMzXmzj3sPlebqZ2Ld1qIxMGE4rJmOQX83
76OofCD0QMGJBDW+xjHig0QxcBY4WdEeAoUWG78HRahuDfC5RFJWnPJj79IXy9NV
Ycuw9QuvKpQp2m7ApAwbo5p02si4wQ/PYfciWxO3e5nkYdQu9o0zGi6LTxsk4LCB
eRZ//N+FqjRXF28VNdpoKsWIbsiIzEzKxI8iLuM7rdVRYg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:55 2025 by rpki-client