Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e3130342e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          J3GG+9pPTbAviAkZsDccj3cgDta0ZL1bzOblukphI1E=
Subject key identifier:   5E:F6:04:1A:8C:21:97:C3:85:A4:B3:6C:C8:C8:A4:89:75:DE:C1:E8
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       7BC26DD2F01FDD2A8388004537C2DEB9ED948C4A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:49 +0000
ROA not before:           Tue 05 Mar 2024 18:01:49 +0000
ROA not after:            Tue 04 Mar 2025 18:06:49 +0000
asID:                     12127
IP address blocks:        190.57.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c2:6d:d2:f0:1f:dd:2a:83:88:00:45:37:c2:de:b9:ed:94:8c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:49 2024 GMT
            Not After : Mar  4 18:06:49 2025 GMT
        Subject: CN=5EF6041A8C2197C385A4B36CC8C8A48975DEC1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:a0:79:55:3a:fa:18:8a:6a:6e:8f:aa:22:
                    98:bc:cf:2d:9e:68:a9:fa:27:3c:6d:66:76:82:2d:
                    5b:6f:e7:cf:78:74:08:b7:41:da:a0:38:05:a0:13:
                    c9:55:a7:e3:30:fb:44:8a:95:a1:b1:44:28:0c:fe:
                    7d:21:f0:84:44:cf:5f:60:fc:58:2c:00:0d:70:30:
                    0c:0f:a4:91:8b:55:fc:c6:35:ca:c0:07:e3:06:60:
                    fb:eb:5e:67:b2:8a:53:42:0b:da:b5:e6:68:e7:76:
                    41:09:72:a5:c2:e2:77:c6:2f:ac:96:e9:a1:e7:66:
                    30:d3:f2:e8:62:da:b7:1c:8c:69:56:40:b7:b5:7c:
                    f2:52:e0:e1:9f:03:90:83:a5:a9:81:4f:60:ce:b1:
                    d0:85:ae:80:01:66:aa:c5:e0:f5:73:b4:cf:04:de:
                    34:f3:e9:01:16:ec:ea:23:13:07:74:79:c2:63:55:
                    a2:7c:d2:4e:9c:71:72:78:e8:66:ea:bd:c5:92:3c:
                    01:02:aa:28:e6:1b:cb:8a:f9:3d:fb:18:70:2b:0b:
                    80:59:d5:1c:45:53:f1:77:a2:dd:b4:3a:12:37:47:
                    cb:7d:97:de:a9:93:77:8a:d0:08:ff:aa:b7:bd:87:
                    a4:bf:59:6e:09:98:84:9a:70:33:7f:04:ea:1d:09:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F6:04:1A:8C:21:97:C3:85:A4:B3:6C:C8:C8:A4:89:75:DE:C1:E8
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:48:8a:a3:de:dc:07:49:a4:f7:d3:92:ee:ee:69:f6:85:f3:
         62:18:f7:90:17:6a:a5:9d:d9:0c:5e:7e:b5:c3:e1:e1:62:4f:
         ea:13:0e:e0:06:c5:91:0a:d0:b5:30:1a:19:83:ca:49:a8:d8:
         19:fd:ac:44:9d:8a:6a:ee:00:c3:99:42:ff:6c:40:34:da:e4:
         4c:7a:08:bc:39:9c:2c:0b:14:7e:e9:75:89:58:f5:a7:95:3a:
         39:ad:62:c3:e5:b9:74:cc:bd:bf:dd:db:7e:2e:8f:71:2b:3b:
         82:a9:39:43:94:5c:36:7a:0c:30:df:1e:7c:d7:88:14:8f:70:
         6e:1a:25:65:90:fa:98:5d:b9:8b:26:3a:ab:0c:5f:71:60:26:
         dc:62:de:98:4e:2f:b0:19:1d:43:32:22:74:4e:2f:0b:7c:d9:
         d0:ce:d2:57:0b:cd:6f:0c:e3:05:aa:f2:5d:9a:7b:f8:9f:fd:
         99:73:0e:41:cb:52:19:5d:d9:3a:2b:df:62:4c:8d:b4:2d:bb:
         7c:f2:e7:9a:39:4f:07:4d:43:f4:52:da:c7:b4:21:c2:40:63:
         1f:93:08:c7:42:e9:f0:80:8a:36:5f:31:c7:6d:73:ba:c3:f9:
         5d:af:e6:01:94:94:b5:ba:ef:04:ae:b5:5b:66:28:78:03:e1:
         cb:fa:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org