Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          ykBEF+tW5Hh3TVQ7ivYtP+LmHbR99xQ6qjmcC0XWJnU=
Subject key identifier:   ED:38:AA:4F:F9:6D:3E:7C:C3:39:5C:14:97:79:8E:7D:70:2A:B4:6A
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       211E2C06323FB2D591993DF0090A1DBD357895EB
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:58 +0000
ROA not before:           Tue 05 Mar 2024 18:01:58 +0000
ROA not after:            Tue 04 Mar 2025 18:06:58 +0000
asID:                     263783
IP address blocks:        190.57.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1e:2c:06:32:3f:b2:d5:91:99:3d:f0:09:0a:1d:bd:35:78:95:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:58 2024 GMT
            Not After : Mar  4 18:06:58 2025 GMT
        Subject: CN=ED38AA4FF96D3E7CC3395C1497798E7D702AB46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:f5:fc:23:c5:61:2d:02:87:26:42:06:f8:
                    5c:79:91:bf:52:21:54:51:e6:90:c3:9b:e5:f7:80:
                    5a:ef:a1:47:05:29:d9:e0:2e:9a:5a:d2:3e:13:ab:
                    a7:01:54:00:e4:55:c7:2c:3f:77:dc:d8:e6:ee:14:
                    3d:46:c6:d3:ef:54:f4:07:d5:cd:15:cf:a9:11:28:
                    a1:2b:e4:97:06:c6:70:81:e1:a8:34:a3:0d:9f:d9:
                    93:bf:9e:10:9c:38:f2:6c:f9:39:7e:ae:ea:2d:e2:
                    de:83:f6:bf:2a:2d:a1:cf:25:a4:85:e4:74:84:6a:
                    34:6f:18:d1:b1:bc:cd:4f:9f:25:fe:5f:58:0f:9b:
                    03:00:b6:9e:9e:a0:73:ea:0e:02:36:0f:7b:c2:01:
                    04:85:4a:e2:00:44:54:c1:da:44:fa:b5:90:0c:61:
                    74:82:fe:d2:10:1f:17:80:e5:3b:f7:01:46:e9:59:
                    d6:4c:44:de:1d:af:75:b1:0a:c5:16:4e:94:7f:e0:
                    9e:ab:5e:dc:90:13:a7:4a:ff:90:ed:ed:3e:06:59:
                    d4:cb:98:d5:01:23:34:5e:19:c4:28:10:49:19:90:
                    c2:14:e8:89:75:cf:c2:95:20:a3:ac:4c:e0:5d:20:
                    ba:16:9c:0f:5a:e0:dc:26:33:5e:03:57:30:c8:ba:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:38:AA:4F:F9:6D:3E:7C:C3:39:5C:14:97:79:8E:7D:70:2A:B4:6A
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131332e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:51:ad:1b:12:2e:f9:9f:52:d3:4f:d4:63:ba:ec:b7:8d:c2:
         5f:4f:bd:66:c2:c5:95:61:26:54:ba:98:f6:ac:a2:84:cc:2f:
         49:a0:8b:2b:07:b8:e0:ac:16:a6:52:31:c5:17:9b:ed:b5:4a:
         09:59:e3:d8:2a:57:c4:58:44:d5:de:e5:ab:f4:f1:aa:88:16:
         75:3b:f6:b3:de:5f:d7:a3:56:95:af:56:97:b2:e8:84:e7:01:
         c8:88:1c:48:f6:43:69:05:19:65:7a:c5:16:9e:32:af:3a:bf:
         5a:c7:71:91:e5:59:75:7b:9f:43:c6:51:b0:04:08:7d:a4:d0:
         e9:b1:68:aa:c3:db:c8:bd:f6:45:76:31:94:ce:ee:5a:11:79:
         12:13:0f:13:c8:78:4e:e0:e1:0f:e9:c3:22:5b:64:c5:1a:44:
         e2:6b:43:a2:8d:2b:44:21:7d:e3:df:2a:36:b4:10:3a:2d:dc:
         34:3b:4d:45:ea:27:49:6b:eb:1d:4a:3a:a3:e8:c9:2c:0d:65:
         70:fc:a0:b6:f2:36:ed:b4:f3:96:f1:8a:17:8f:6a:ba:d9:c3:
         01:bc:0b:ed:68:b7:bb:3c:25:ec:55:95:c5:73:c1:bd:4d:9c:
         b0:92:f3:8c:eb:55:ca:3f:ab:d6:cc:53:87:dd:0c:b5:ca:19:
         41:08:e7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:08 2024 by rpki-client on console-fra.rpki-client.org