Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa
File:                     3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          +MWFVYzjqQRRXl7QH7xmzHtEtYzSAypqKylEeWnLIKg=
Subject key identifier:   FE:FD:0A:FA:05:D3:B2:4A:35:F8:DE:D9:98:1B:CB:53:60:32:24:CE
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       7E8F41D16368621A04687139F9401F63B94D5A20
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:07:03 +0000
ROA not before:           Tue 05 Mar 2024 18:02:03 +0000
ROA not after:            Tue 04 Mar 2025 18:07:03 +0000
asID:                     263783
IP address blocks:        190.57.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8f:41:d1:63:68:62:1a:04:68:71:39:f9:40:1f:63:b9:4d:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:03 2024 GMT
            Not After : Mar  4 18:07:03 2025 GMT
        Subject: CN=FEFD0AFA05D3B24A35F8DED9981BCB53603224CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:f1:a4:c4:f3:0a:26:55:ff:aa:ed:d6:17:
                    5d:1b:4c:86:d4:78:96:9a:a5:d7:3e:f1:06:56:ce:
                    1e:4a:e1:1d:64:57:ea:18:83:f5:f0:24:bc:bb:7d:
                    f5:98:6a:16:b0:93:f1:2a:20:9b:ae:c0:9e:e4:94:
                    ff:64:2d:35:c8:ea:78:b0:04:49:b2:5a:f4:16:aa:
                    6c:01:0c:ad:2d:23:1e:2d:41:69:a1:42:86:16:76:
                    72:80:4b:22:b5:5f:e3:dd:71:52:b0:94:f0:51:66:
                    fc:e3:d7:27:25:25:b7:d6:90:48:5c:c6:a7:d3:0c:
                    6c:c4:60:65:15:70:8d:bf:15:42:86:d6:15:f1:4d:
                    89:67:f1:69:23:b7:fe:07:e0:84:37:5f:f0:e2:c6:
                    f7:28:d2:71:e6:c3:db:7b:15:0a:8b:e4:45:c0:5e:
                    fe:62:f1:b0:9a:9e:66:ba:9e:56:ed:90:a2:d4:0f:
                    77:af:58:7e:1c:93:b3:eb:08:b6:6c:8c:21:b4:e8:
                    56:4b:81:cf:81:32:f9:9d:17:6a:c5:f3:19:02:d3:
                    06:93:95:ab:ef:5b:28:3c:e8:ac:29:30:01:b7:c9:
                    60:73:a9:6e:50:08:d2:15:b4:40:28:29:38:2c:b6:
                    e7:dd:c9:52:77:7b:c2:5f:af:e2:c7:91:db:20:f4:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:0A:FA:05:D3:B2:4A:35:F8:DE:D9:98:1B:CB:53:60:32:24:CE
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:0d:bf:90:bc:6d:e3:1e:eb:e1:0b:33:62:33:8b:63:23:
         d6:be:f5:a2:bb:15:f9:98:5b:28:7c:85:70:a5:8c:83:41:39:
         79:a1:9a:94:ca:c4:c3:57:98:b1:55:44:d5:4f:d4:22:c1:f5:
         75:b1:db:14:b1:92:91:df:7e:f3:fa:16:4c:38:45:4c:ae:ab:
         66:84:6b:2e:50:03:33:08:bc:ef:e1:76:bc:61:fb:db:bf:a5:
         e4:94:71:a8:6b:87:7b:ce:5a:b6:bc:bd:b3:d8:f3:2e:d9:4b:
         d8:ce:6c:37:88:74:28:bb:8e:4e:ba:a5:15:e1:a1:8a:d4:7d:
         20:9c:82:62:5f:62:7c:3e:75:10:75:a3:41:c5:7e:c1:b2:20:
         14:65:14:57:5c:a2:75:c7:e3:a8:90:77:a1:7f:9f:5f:2c:34:
         b2:d0:91:d5:6d:fd:7c:1e:62:7f:e8:f1:a8:df:e9:37:36:72:
         2b:df:92:69:b2:b3:9f:ce:45:ca:87:de:55:2f:39:48:91:b8:
         8b:1e:9d:35:cc:aa:f8:2c:14:56:77:0f:34:41:de:28:1f:f7:
         8a:83:2f:5b:01:5b:7f:10:63:c8:f9:94:5c:3b:ba:83:ea:8c:
         1f:0a:bb:4b:89:61:cf:63:fb:39:be:9c:ea:2f:c2:80:ff:e5:
         76:5b:05:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfo9B0WNoYhoEaHE5+UAfY7lNWiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNDAzMDUxODAyMDNaFw0yNTAzMDQxODA3MDNaMDMxMTAvBgNV
BAMTKEZFRkQwQUZBMDVEM0IyNEEzNUY4REVEOTk4MUJDQjUzNjAzMjI0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbfGkxPMKJlX/qu3WF10bTIbU
eJaapdc+8QZWzh5K4R1kV+oYg/XwJLy7ffWYahawk/EqIJuuwJ7klP9kLTXI6niw
BEmyWvQWqmwBDK0tIx4tQWmhQoYWdnKASyK1X+PdcVKwlPBRZvzj1yclJbfWkEhc
xqfTDGzEYGUVcI2/FUKG1hXxTYln8Wkjt/4H4IQ3X/Dixvco0nHmw9t7FQqL5EXA
Xv5i8bCanma6nlbtkKLUD3evWH4ck7PrCLZsjCG06FZLgc+BMvmdF2rF8xkC0waT
lavvWyg86KwpMAG3yWBzqW5QCNIVtEAoKTgstufdyVJ3e8Jfr+LHkdsg9Ly5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/v0K+gXTsko1+N7ZmBvLU2AyJM4wHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMzMzczODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvjl0
MA0GCSqGSIb3DQEBCwUAA4IBAQA8sA2/kLxt4x7r4QszYjOLYyPWvvWiuxX5mFso
fIVwpYyDQTl5oZqUysTDV5ixVUTVT9QiwfV1sdsUsZKR337z+hZMOEVMrqtmhGsu
UAMzCLzv4Xa8Yfvbv6XklHGoa4d7zlq2vL2z2PMu2UvYzmw3iHQou45OuqUV4aGK
1H0gnIJiX2J8PnUQdaNBxX7BsiAUZRRXXKJ1x+OokHehf59fLDSy0JHVbf18HmJ/
6PGo3+k3NnIr35JpsrOfzkXKh95VLzlIkbiLHp01zKr4LBRWdw80Qd4oH/eKgy9b
AVt/EGPI+ZRcO7qD6owfCrtLiWHPY/s5vpzqL8KA/+V2WwWA
-----END CERTIFICATE-----
Generated at Mon May 6 05:55:17 2024 by rpki-client on console-ams.rpki-client.org