Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          6a7Xo8gk7Fc5TjRaFoDe+suQfXSq+wpPlYe1SDEMpKA=
Subject key identifier:   73:5C:3E:91:1D:9C:B3:BB:44:80:04:AC:FE:FA:E9:DA:FD:41:EF:61
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       73167ED2CF9C0B4E7FC7E823749CDEE45B0FB3D9
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:39 +0000
ROA not before:           Tue 04 Feb 2025 18:46:39 +0000
ROA not after:            Tue 03 Feb 2026 18:51:39 +0000
asID:                     263783
IP address blocks:        190.57.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:7e:d2:cf:9c:0b:4e:7f:c7:e8:23:74:9c:de:e4:5b:0f:b3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:39 2025 GMT
            Not After : Feb  3 18:51:39 2026 GMT
        Subject: CN=735C3E911D9CB3BB448004ACFEFAE9DAFD41EF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:50:7c:a8:a3:44:6f:2b:d8:2b:69:ad:c6:
                    67:81:06:2a:a0:0c:3a:a2:bd:f1:14:dd:e9:64:5c:
                    18:91:f3:9e:ef:ff:54:5f:8f:f7:69:51:1d:3f:b7:
                    ae:90:1e:e9:17:ca:36:2b:e2:67:0a:5e:59:ec:6a:
                    66:e1:39:7d:e7:72:dd:cc:e5:a3:3d:fa:05:ad:8b:
                    06:29:03:5d:dc:d7:23:cf:07:4b:0d:2e:60:d5:4f:
                    21:e6:68:00:5c:c2:ad:fd:1a:be:e7:29:ef:ce:d3:
                    92:7a:5d:bb:54:b3:d7:f2:f8:8b:a4:30:b3:f4:5c:
                    33:5b:e2:50:29:59:9c:41:36:f2:d1:27:50:5e:4a:
                    ba:8e:91:c3:87:f1:66:71:31:b6:40:c5:5e:af:0a:
                    c1:59:ed:c7:c3:62:a1:e6:d1:b5:dc:a3:fd:a1:94:
                    dd:c5:d4:c0:a8:c1:0b:51:29:14:bf:15:af:bb:46:
                    69:2c:86:11:54:7e:47:9d:aa:54:88:55:d8:e4:54:
                    5d:a5:74:3f:47:2b:82:7a:3a:5b:3f:70:48:b5:58:
                    7a:ad:33:c4:ca:e9:4d:2d:49:7f:27:b2:6c:c2:8c:
                    42:ab:94:0c:8b:91:0d:84:76:da:ed:ca:11:70:65:
                    23:5c:7d:0c:1a:cd:3b:5a:cb:fd:60:ee:23:1c:cf:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:3E:91:1D:9C:B3:BB:44:80:04:AC:FE:FA:E9:DA:FD:41:EF:61
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:65:30:82:1f:68:18:08:d8:e7:6b:c2:03:c1:32:86:25:76:
         6c:20:8a:b2:47:c6:51:60:fe:a7:9b:50:35:23:7b:a4:af:81:
         52:99:4e:9e:02:a7:22:4f:f3:d3:a6:d5:7f:08:5b:df:e4:f7:
         2a:7a:c4:4e:1b:8e:f0:94:e9:57:af:b5:bd:c7:f6:79:e0:a5:
         d4:44:0a:cb:a7:0e:75:70:e5:12:c0:0a:d9:1e:a0:7c:e8:f9:
         44:91:9b:05:c1:8a:fd:57:e1:4a:e3:08:89:3c:46:98:d3:c4:
         34:35:1f:9b:ac:63:ee:ae:7a:6e:af:ac:9e:b7:64:97:3d:9f:
         a8:37:23:6d:7f:83:d9:e8:39:a8:50:72:a5:da:cc:7d:47:ef:
         2d:59:26:c7:95:8e:8b:98:6d:67:6d:34:fc:e8:6a:08:70:bf:
         72:11:bc:65:6c:38:be:cb:ba:71:97:ff:c7:e7:10:55:9b:b4:
         76:2c:c8:63:64:dd:8c:97:e2:c2:8d:82:d1:00:8c:4d:e9:63:
         84:7d:ef:9f:43:62:7c:5c:25:72:aa:4b:de:95:1d:a8:e9:ea:
         d4:66:d3:06:d7:73:83:3d:ac:59:f7:46:20:cb:d0:d0:30:af:
         a0:c1:72:e8:2c:ca:33:fc:bc:02:84:4f:79:cd:9a:f5:5a:ba:
         79:b2:91:bf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcxZ+0s+cC05/x+gjdJze5FsPs9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MzlaFw0yNjAyMDMxODUxMzlaMDMxMTAvBgNV
BAMTKDczNUMzRTkxMUQ5Q0IzQkI0NDgwMDRBQ0ZFRkFFOURBRkQ0MUVGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLFB8qKNEbyvYK2mtxmeBBiqg
DDqivfEU3elkXBiR857v/1Rfj/dpUR0/t66QHukXyjYr4mcKXlnsambhOX3nct3M
5aM9+gWtiwYpA13c1yPPB0sNLmDVTyHmaABcwq39Gr7nKe/O05J6XbtUs9fy+Iuk
MLP0XDNb4lApWZxBNvLRJ1BeSrqOkcOH8WZxMbZAxV6vCsFZ7cfDYqHm0bXco/2h
lN3F1MCowQtRKRS/Fa+7RmkshhFUfkedqlSIVdjkVF2ldD9HK4J6Ols/cEi1WHqt
M8TK6U0tSX8nsmzCjEKrlAyLkQ2EdtrtyhFwZSNcfQwazTtay/1g7iMczzIrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUc1w+kR2cs7tEgASs/vrp2v1B72EwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvjlx
MA0GCSqGSIb3DQEBCwUAA4IBAQA4ZTCCH2gYCNjna8IDwTKGJXZsIIqyR8ZRYP6n
m1A1I3ukr4FSmU6eAqciT/PTptV/CFvf5PcqesROG47wlOlXr7W9x/Z54KXURArL
pw51cOUSwArZHqB86PlEkZsFwYr9V+FK4wiJPEaY08Q0NR+brGPurnpur6yet2SX
PZ+oNyNtf4PZ6DmoUHKl2sx9R+8tWSbHlY6LmG1nbTT86GoIcL9yEbxlbDi+y7px
l//H5xBVm7R2LMhjZN2Ml+LCjYLRAIxN6WOEfe+fQ2J8XCVyqkvelR2o6erUZtMG
13ODPaxZ90Ygy9DQMK+gwXLoLMoz/LwChE95zZr1Wrp5spG/
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:08 2025 by rpki-client