Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa
File:                     3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          k4MWwJRAHYsG9kRtpAenp0yd3nvo4ITdsvnqNvVu5F0=
Subject key identifier:   7A:E4:46:BC:BB:D3:B3:8F:7D:70:BB:B3:50:67:3A:F5:14:AA:86:6B
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       551B44FE1C71669CEBDCAE840894F7ACF96408F8
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:27 +0000
ROA not before:           Tue 04 Feb 2025 18:46:27 +0000
ROA not after:            Tue 03 Feb 2026 18:51:27 +0000
asID:                     263783
IP address blocks:        190.57.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1b:44:fe:1c:71:66:9c:eb:dc:ae:84:08:94:f7:ac:f9:64:08:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:27 2025 GMT
            Not After : Feb  3 18:51:27 2026 GMT
        Subject: CN=7AE446BCBBD3B38F7D70BBB350673AF514AA866B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:45:19:6f:ed:53:0c:c0:2f:b6:38:3c:5e:55:
                    bd:34:b7:8f:ce:40:7b:99:cb:5b:da:28:a8:fa:a8:
                    fb:5c:f0:d2:74:10:5d:74:fa:48:06:ed:a3:71:46:
                    32:23:c3:27:c6:ac:42:b5:a3:0f:86:2c:8b:2b:c4:
                    9a:f3:fc:88:c5:1e:57:14:c4:0b:00:df:9a:d3:54:
                    01:bc:1e:bd:ee:22:aa:59:98:a8:1c:e7:d7:24:33:
                    d3:12:53:09:1b:0c:92:24:92:45:22:99:44:6f:3b:
                    2c:26:b8:8d:f2:a7:10:c4:14:17:7d:49:5f:00:53:
                    da:c9:c0:0f:4c:f6:f0:10:b7:f1:b6:fb:0a:42:1c:
                    81:d7:be:27:e0:66:53:30:64:8d:06:72:bd:ee:ae:
                    03:25:c7:cd:83:ec:8c:ba:d4:fd:e7:f8:12:2c:11:
                    ff:e3:69:03:df:7d:e6:77:c2:d4:91:fe:93:41:da:
                    d3:4e:23:14:1d:4a:a3:23:1a:6e:eb:88:42:93:76:
                    fb:36:34:50:06:37:12:25:e5:e3:73:e9:7c:b1:37:
                    56:60:b1:e0:53:15:cf:0e:64:93:c3:8b:e9:f2:02:
                    1d:b9:9a:60:c5:1b:b6:d9:71:d6:4c:10:b3:9f:a0:
                    c5:e9:4a:94:98:77:23:e2:3c:20:20:84:81:d7:5a:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E4:46:BC:BB:D3:B3:8F:7D:70:BB:B3:50:67:3A:F5:14:AA:86:6B
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:56:4f:cf:fd:79:ab:02:66:a0:c9:bc:41:df:f3:0c:3e:01:
         69:45:1e:c3:09:ac:43:e4:f3:a6:17:0b:63:c3:eb:b2:e4:5a:
         58:53:08:2c:65:50:5c:e1:86:09:f0:1e:ee:e6:b9:1d:48:ac:
         9b:10:b6:ed:52:eb:03:83:3d:f0:8f:8a:c8:1e:27:ff:70:19:
         a9:a8:37:a5:a0:74:55:f1:07:63:ea:4c:f5:41:4d:2b:73:ec:
         c2:97:a2:2d:3f:fb:1d:19:ae:8b:9b:e6:2a:ff:d1:1b:87:06:
         07:4f:fb:b5:a1:30:e3:35:c0:11:a0:8d:06:92:1b:33:75:38:
         99:04:36:fb:dc:1c:4a:a0:99:96:c8:fd:82:1d:e9:7a:be:58:
         34:44:5c:38:a8:71:17:85:ce:3b:9c:b7:50:af:d9:d8:2f:bf:
         46:d4:dd:b0:cf:69:51:6c:96:29:52:ae:49:96:83:4e:11:e6:
         19:f1:af:b4:24:2e:c9:c3:88:ae:86:5c:5d:95:7f:56:b4:1b:
         0c:35:83:78:ad:e5:64:90:a6:21:a7:ae:47:70:75:8a:53:d2:
         29:2b:9c:be:81:e4:80:26:ab:10:f6:66:5d:78:51:6f:66:91:
         67:76:d5:06:8c:c9:22:60:8c:e7:8e:77:c6:13:3c:3d:ff:d9:
         44:63:b0:cc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVRtE/hxxZpzr3K6ECJT3rPlkCPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MjdaFw0yNjAyMDMxODUxMjdaMDMxMTAvBgNV
BAMTKDdBRTQ0NkJDQkJEM0IzOEY3RDcwQkJCMzUwNjczQUY1MTRBQTg2NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxRRlv7VMMwC+2ODxeVb00t4/O
QHuZy1vaKKj6qPtc8NJ0EF10+kgG7aNxRjIjwyfGrEK1ow+GLIsrxJrz/IjFHlcU
xAsA35rTVAG8Hr3uIqpZmKgc59ckM9MSUwkbDJIkkkUimURvOywmuI3ypxDEFBd9
SV8AU9rJwA9M9vAQt/G2+wpCHIHXvifgZlMwZI0Gcr3urgMlx82D7Iy61P3n+BIs
Ef/jaQPffeZ3wtSR/pNB2tNOIxQdSqMjGm7riEKTdvs2NFAGNxIl5eNz6XyxN1Zg
seBTFc8OZJPDi+nyAh25mmDFG7bZcdZMELOfoMXpSpSYdyPiPCAghIHXWsDlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeuRGvLvTs499cLuzUGc69RSqhmswHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvjlo
MA0GCSqGSIb3DQEBCwUAA4IBAQB2Vk/P/XmrAmagybxB3/MMPgFpRR7DCaxD5POm
Fwtjw+uy5FpYUwgsZVBc4YYJ8B7u5rkdSKybELbtUusDgz3wj4rIHif/cBmpqDel
oHRV8Qdj6kz1QU0rc+zCl6ItP/sdGa6Lm+Yq/9EbhwYHT/u1oTDjNcARoI0Gkhsz
dTiZBDb73BxKoJmWyP2CHel6vlg0RFw4qHEXhc47nLdQr9nYL79G1N2wz2lRbJYp
Uq5JloNOEeYZ8a+0JC7Jw4iuhlxdlX9WtBsMNYN4reVkkKYhp65HcHWKU9IpK5y+
geSAJqsQ9mZdeFFvZpFndtUGjMkiYIznjnfGEzw9/9lEY7DM
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:31 2025 by rpki-client