Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131342e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e3131342e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          3Nd+3LoCgMw8dTVkTXOUiyoZJMxdi8V6L72pAkQZSAE=
Subject key identifier:   12:5E:75:E6:0B:82:B0:64:AE:64:BD:F0:37:0A:DE:4A:39:C3:47:36
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       6ED8425DA7B4DC75683DCA562208248595B84D47
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131342e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:07:04 +0000
ROA not before:           Tue 05 Mar 2024 18:02:04 +0000
ROA not after:            Tue 04 Mar 2025 18:07:04 +0000
asID:                     263783
IP address blocks:        190.57.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d8:42:5d:a7:b4:dc:75:68:3d:ca:56:22:08:24:85:95:b8:4d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:04 2024 GMT
            Not After : Mar  4 18:07:04 2025 GMT
        Subject: CN=125E75E60B82B064AE64BDF0370ADE4A39C34736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:f6:19:22:00:eb:f9:7e:21:08:ce:94:60:
                    0e:79:ec:95:af:de:5d:36:46:35:9f:dc:31:85:ae:
                    77:57:54:90:5e:b4:16:78:75:83:e9:12:53:91:07:
                    5d:33:b0:98:ff:6f:a3:ce:f0:66:88:0d:c8:e9:4b:
                    db:37:5d:fb:0f:45:3a:3a:20:c8:5d:25:5d:6d:e7:
                    0b:b4:aa:28:b8:99:1f:57:c4:5e:35:24:c4:0a:12:
                    1f:8b:f7:07:16:cc:6e:8e:79:83:ef:83:51:80:4d:
                    56:55:44:c2:1c:78:33:57:19:74:7c:60:0c:fd:1e:
                    2a:41:02:e9:8a:f9:d4:00:37:11:32:17:79:00:4d:
                    aa:53:33:ba:0c:a9:fd:76:72:4a:ad:23:10:aa:18:
                    5a:05:0e:a7:36:4b:d4:ab:d9:bd:f9:d3:3a:3d:6b:
                    ed:c2:c0:e4:3f:72:9b:9e:f3:ba:7d:d1:bd:04:07:
                    ac:51:73:1f:c7:20:4b:36:e3:d5:23:9d:ea:7e:40:
                    5e:13:97:eb:3a:80:95:84:63:e2:d1:71:dd:a8:ba:
                    b7:1f:8f:e5:94:57:cc:b5:88:45:b5:40:7d:64:0d:
                    0a:06:e9:ef:42:fb:f5:55:5b:2d:2a:47:e0:80:c1:
                    6e:b2:c6:7b:28:1c:c4:6a:90:2a:23:a1:77:a8:b6:
                    8e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5E:75:E6:0B:82:B0:64:AE:64:BD:F0:37:0A:DE:4A:39:C3:47:36
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131342e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:0b:93:fa:28:94:19:a5:6e:94:e7:80:36:49:ab:7e:f0:b2:
         d7:52:c2:19:71:3b:8a:2f:0b:ee:9e:91:03:a9:ef:90:7a:3d:
         ac:d6:78:29:97:cb:66:a3:f9:28:44:c2:38:cd:59:41:df:cc:
         b1:19:da:8c:44:8e:a3:22:e7:9b:8c:dd:52:c2:68:e9:64:a0:
         94:d3:20:b6:67:87:dd:47:4a:58:28:77:eb:9e:20:98:30:c0:
         1b:74:44:3d:39:28:b7:5f:0d:61:c8:d5:0e:e8:aa:ac:ef:0a:
         04:c2:d3:ac:b8:d1:30:ee:ea:d3:d2:4d:8c:13:41:e8:e1:24:
         8c:b7:b3:ff:a6:46:46:29:8e:30:a7:86:f0:f4:f7:88:07:4a:
         78:e4:75:3c:d5:53:fb:eb:2e:c7:cd:05:41:51:12:72:73:fe:
         83:06:c8:4e:af:dd:b6:8d:18:2d:cd:f9:86:aa:10:a2:c2:93:
         75:bb:18:0d:db:b8:5e:c5:57:c7:68:44:1d:6a:a2:5d:25:31:
         6f:b6:69:c5:a6:15:74:bb:8a:be:27:b0:17:0a:9a:53:1e:f5:
         d1:6c:71:97:71:f0:24:20:b9:dc:71:dd:c6:d7:9b:fb:0a:1f:
         6e:9f:e7:5e:76:2f:18:7e:e3:eb:d7:da:99:e7:c1:26:a9:e2:
         0d:95:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:35:37 2024 by rpki-client on console-ams.rpki-client.org