Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa
File:                     3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          A2uetsCLXMc29awVvyR84XlAPj6lwRpGt4UuM1Jv3gQ=
Subject key identifier:   F0:AA:74:2C:87:85:BB:24:10:A9:84:1B:33:2C:AC:CE:B3:62:5F:E3
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4E1866DB8838FDCA3C5F5C58F807667583D6B10E
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:54 +0000
ROA not before:           Tue 05 Mar 2024 18:01:54 +0000
ROA not after:            Tue 04 Mar 2025 18:06:54 +0000
asID:                     263783
IP address blocks:        190.57.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:18:66:db:88:38:fd:ca:3c:5f:5c:58:f8:07:66:75:83:d6:b1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:54 2024 GMT
            Not After : Mar  4 18:06:54 2025 GMT
        Subject: CN=F0AA742C8785BB2410A9841B332CACCEB3625FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:7a:90:9f:29:70:f9:ab:4c:d5:29:4a:40:
                    4f:1a:04:9b:2b:ae:c3:62:4d:32:4f:ef:a9:f7:86:
                    f5:82:95:e3:fd:1f:10:6b:22:84:d6:7d:2f:61:ca:
                    f9:fa:fb:67:f8:90:f4:98:fc:8f:60:dd:de:f0:59:
                    ef:b2:85:08:06:cb:41:7d:c7:c0:c3:3e:b4:ac:75:
                    06:65:e2:9c:ba:1c:f5:c1:d0:79:60:e2:d5:96:0e:
                    55:44:19:49:3f:16:93:88:a4:d0:c8:30:b9:97:19:
                    ef:0f:99:05:15:9d:d1:2d:51:89:f6:c0:39:a1:d8:
                    60:f1:a6:9a:06:2e:a2:b6:13:16:e3:ad:80:f8:70:
                    88:f5:91:5c:ed:35:07:02:50:73:03:38:2c:7a:fb:
                    18:92:c7:51:92:44:27:2b:4f:f6:2f:5f:3c:ab:7b:
                    42:1a:35:2b:07:8d:5f:72:98:c0:38:1d:04:ae:e3:
                    bf:ad:be:ca:7d:bd:2d:92:4e:ae:93:82:1d:e2:be:
                    e3:b6:c3:98:a7:7f:9a:a6:10:88:6b:1a:96:1c:34:
                    39:cc:51:7f:52:29:be:e8:f4:06:02:84:7d:c0:48:
                    6f:a7:fb:00:94:32:51:e4:46:1a:63:71:5b:3b:74:
                    d4:eb:8a:95:bf:10:f5:48:a1:ce:7a:5c:b4:7e:42:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AA:74:2C:87:85:BB:24:10:A9:84:1B:33:2C:AC:CE:B3:62:5F:E3
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:17:96:db:41:e6:d6:33:70:d9:92:97:3f:69:93:df:0e:b6:
         8c:3d:8e:c4:f1:06:4e:5c:1e:ab:d6:20:cd:14:d2:c0:35:a1:
         fa:6a:40:d6:9f:c8:44:42:b3:96:9d:0c:3c:66:16:c5:a0:b2:
         d8:b0:a0:14:29:20:8b:15:77:a6:bf:77:b6:68:26:46:e2:52:
         1a:ff:b1:fd:76:2f:bc:6e:07:c2:52:0b:d2:dc:9f:79:03:18:
         52:f2:cf:4a:0f:f6:d6:d6:79:98:77:00:47:21:03:6c:d2:ab:
         fd:0d:f6:ef:7a:45:18:2e:4a:6c:b0:0e:87:ca:90:c3:c0:a8:
         09:eb:54:84:63:b2:a2:fe:a4:a4:5b:34:80:e0:a2:a5:32:cc:
         5e:4a:6d:30:12:ef:25:56:2f:06:ce:33:41:74:e4:67:f6:60:
         5d:77:9f:7f:ee:dd:c5:64:b8:21:9a:3e:be:e5:04:53:15:aa:
         27:32:57:5f:71:e8:26:14:40:b8:f9:a9:f7:ea:25:1e:26:b7:
         58:ba:e9:28:f3:74:c6:42:52:0e:81:a2:c4:df:be:5f:d1:97:
         a4:ec:96:d1:0c:4c:9a:3a:a4:26:80:8f:7e:57:21:1e:7e:5c:
         00:d7:c5:0b:10:a1:e3:04:b6:f3:1b:90:9a:f9:52:36:3e:68:
         8e:74:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:35:37 2024 by rpki-client on console-ams.rpki-client.org