Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e3131332e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          i4X1tTTYcGhCn8HWjKm3UV152W8zDiDF8CW5h0uEea8=
Subject key identifier:   6F:BD:E3:51:2B:F6:05:1F:8B:B9:9F:86:19:4D:EB:8C:4E:5F:0D:E3
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       47FFC6532BDE504F88822F319011930E3B22224C
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:26 +0000
ROA not before:           Tue 04 Feb 2025 18:46:26 +0000
ROA not after:            Tue 03 Feb 2026 18:51:26 +0000
asID:                     12127
IP address blocks:        190.57.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ff:c6:53:2b:de:50:4f:88:82:2f:31:90:11:93:0e:3b:22:22:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:26 2025 GMT
            Not After : Feb  3 18:51:26 2026 GMT
        Subject: CN=6FBDE3512BF6051F8BB99F86194DEB8C4E5F0DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:fb:53:08:3d:2a:38:aa:2f:eb:2d:82:8b:
                    95:90:98:1d:0f:e7:86:b1:9a:c7:fc:a4:0f:46:a1:
                    d0:9b:3a:0c:9b:33:f4:e3:89:9f:87:8b:ea:47:e0:
                    0b:fa:c9:2f:8f:c2:63:f1:27:e1:05:59:b8:67:66:
                    58:02:b2:3d:57:42:98:57:6b:43:f5:f5:f1:fd:15:
                    76:85:38:5d:7a:a3:7b:fc:8c:ea:68:32:cd:9b:2f:
                    76:ca:35:ad:8a:39:6b:05:d3:59:19:fb:b8:25:8f:
                    d0:c7:b2:c6:f5:90:2d:71:91:66:10:ba:84:cb:01:
                    70:b8:5e:13:a8:3e:37:d4:94:b4:c6:8a:49:f8:38:
                    28:6e:97:24:e2:49:f6:46:3c:9f:2d:40:24:57:8c:
                    a9:f5:23:d8:4f:4b:5a:78:a9:34:59:b1:96:b8:5e:
                    5e:01:7f:cb:cc:61:69:9c:b7:e2:4c:74:a0:e7:07:
                    e5:98:1a:c9:e0:51:6d:ae:ba:56:26:71:c0:4a:3a:
                    41:58:96:94:9f:76:75:7d:3f:18:3e:ac:c4:c7:1b:
                    b1:1b:ea:ca:e8:03:86:e5:a9:e4:88:92:19:03:b4:
                    d8:17:cc:10:5a:29:ef:53:0b:d0:38:39:78:c1:b4:
                    a6:74:98:70:43:cd:8d:a9:07:4e:fa:89:77:f5:13:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:E3:51:2B:F6:05:1F:8B:B9:9F:86:19:4D:EB:8C:4E:5F:0D:E3
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ab:1f:7f:80:dd:75:ff:7e:1f:d0:65:ba:1d:00:65:b5:0f:
         0a:79:49:a3:67:e1:31:54:10:ad:ef:7d:40:49:d3:07:fe:8c:
         bc:83:1d:d5:6b:c4:e8:4d:ef:31:64:75:0d:fc:db:a1:0e:92:
         31:19:8d:0a:f3:71:f4:db:3e:11:0d:0a:7f:95:26:60:39:0c:
         2a:3b:eb:cc:43:b9:77:ad:f7:02:1a:de:ea:56:f4:04:88:59:
         1d:30:5e:19:67:12:fe:31:b0:4e:e5:eb:a4:48:54:b8:70:84:
         a3:86:2f:df:de:e9:08:a9:24:22:d9:95:82:b6:c5:b3:84:49:
         71:b5:19:9f:8f:df:14:21:6b:8f:43:2a:79:fe:27:c5:ff:11:
         59:d2:de:c6:a0:20:8b:f7:61:ef:6a:d5:75:58:06:88:2b:76:
         c2:ad:15:61:49:32:85:89:78:57:fc:c4:fd:07:7d:cf:5c:4b:
         d7:21:46:4f:85:36:f7:f1:47:fb:59:bc:5b:51:8a:bd:41:92:
         45:9f:51:15:df:6c:d2:02:1c:c8:e3:88:b2:90:65:13:b8:16:
         c1:f0:07:6d:48:82:5f:57:36:33:ef:10:fe:9f:2f:88:f2:ef:
         54:89:d8:47:56:ea:42:74:11:69:d5:21:67:bb:82:19:fc:0b:
         52:41:aa:0e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUR//GUyveUE+Igi8xkBGTDjsiIkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MjZaFw0yNjAyMDMxODUxMjZaMDMxMTAvBgNV
BAMTKDZGQkRFMzUxMkJGNjA1MUY4QkI5OUY4NjE5NERFQjhDNEU1RjBERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IvtTCD0qOKov6y2Ci5WQmB0P
54axmsf8pA9GodCbOgybM/TjiZ+Hi+pH4Av6yS+PwmPxJ+EFWbhnZlgCsj1XQphX
a0P19fH9FXaFOF16o3v8jOpoMs2bL3bKNa2KOWsF01kZ+7glj9DHssb1kC1xkWYQ
uoTLAXC4XhOoPjfUlLTGikn4OChulyTiSfZGPJ8tQCRXjKn1I9hPS1p4qTRZsZa4
Xl4Bf8vMYWmct+JMdKDnB+WYGsngUW2uulYmccBKOkFYlpSfdnV9Pxg+rMTHG7Eb
6sroA4blqeSIkhkDtNgXzBBaKe9TC9A4OXjBtKZ0mHBDzY2pB076iXf1Ez7fAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUb73jUSv2BR+LuZ+GGU3rjE5fDeMwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL45cTAN
BgkqhkiG9w0BAQsFAAOCAQEAxqsff4Dddf9+H9Bluh0AZbUPCnlJo2fhMVQQre99
QEnTB/6MvIMd1WvE6E3vMWR1DfzboQ6SMRmNCvNx9Ns+EQ0Kf5UmYDkMKjvrzEO5
d633Ahre6lb0BIhZHTBeGWcS/jGwTuXrpEhUuHCEo4Yv397pCKkkItmVgrbFs4RJ
cbUZn4/fFCFrj0Mqef4nxf8RWdLexqAgi/dh72rVdVgGiCt2wq0VYUkyhYl4V/zE
/Qd9z1xL1yFGT4U29/FH+1m8W1GKvUGSRZ9RFd9s0gIcyOOIspBlE7gWwfAHbUiC
X1c2M+8Q/p8viPLvVInYR1bqQnQRadUhZ7uCGfwLUkGqDg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:47 2025 by rpki-client