Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa
File:                     3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          opSNiuNHoYN5LbwS0CFfZJul0yTL/AUuO+4R6W8wV/8=
Subject key identifier:   83:44:78:59:C7:39:03:40:E7:8F:6B:0C:66:0C:AB:73:BE:BC:CC:94
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0B1FB23688DA47B4B670421EEBBB56FAED9783B0
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:26 +0000
ROA not before:           Tue 04 Feb 2025 18:46:26 +0000
ROA not after:            Tue 03 Feb 2026 18:51:26 +0000
asID:                     263783
IP address blocks:        190.57.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:b2:36:88:da:47:b4:b6:70:42:1e:eb:bb:56:fa:ed:97:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:26 2025 GMT
            Not After : Feb  3 18:51:26 2026 GMT
        Subject: CN=83447859C7390340E78F6B0C660CAB73BEBCCC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:0b:fa:39:f8:bf:15:38:ad:96:8b:ab:ea:
                    c2:45:ee:90:78:b0:a2:a2:7e:2a:23:ae:fd:31:b9:
                    38:4e:75:44:aa:66:c4:68:ab:b7:98:14:e4:9a:58:
                    89:a9:4d:1c:dd:38:c0:98:79:45:eb:3e:c0:d2:e1:
                    0b:b4:31:b9:65:79:8a:31:5e:c7:7a:5a:2d:ff:52:
                    1f:1e:21:36:06:c0:7a:92:c5:de:55:bc:a7:c3:a7:
                    30:21:0e:d3:e0:dc:7e:31:33:7e:00:d9:6b:a8:17:
                    27:e3:e6:c2:8f:d8:c1:59:bc:63:97:b9:c4:fe:91:
                    ae:a8:6d:e3:13:cf:f5:12:86:94:d2:f6:b7:aa:c5:
                    51:ee:86:86:16:42:b8:1a:74:d6:45:78:31:53:6d:
                    53:66:c3:75:f2:2d:58:0b:d7:33:d4:48:55:6c:54:
                    9f:a7:c1:d6:5d:62:96:c3:68:9a:9a:c0:11:08:ee:
                    8e:61:b5:5a:49:28:dc:c5:21:16:ae:be:c4:00:4d:
                    54:9a:20:9b:97:a8:e2:52:8c:a0:5a:c1:31:6a:9d:
                    b3:e3:dd:87:72:e8:cd:35:4d:23:8b:45:9c:15:0c:
                    b2:47:d9:21:6c:bb:8d:91:a2:97:ab:7c:e4:b3:e9:
                    37:a0:04:db:5d:df:db:78:a2:26:67:14:98:82:8d:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:44:78:59:C7:39:03:40:E7:8F:6B:0C:66:0C:AB:73:BE:BC:CC:94
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131362e302f32332d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:d6:c4:be:4f:41:dc:04:df:d1:90:33:43:97:35:6d:1a:48:
         5f:ea:75:12:f5:8d:74:6c:58:f6:82:2d:56:4a:91:8b:f3:a6:
         12:98:e4:d5:c7:27:7f:ff:ba:6c:c5:ad:ff:a1:a8:7b:eb:0e:
         a6:0c:b7:e2:75:1e:0e:39:92:09:0a:5a:1a:ca:f9:9f:d2:35:
         5c:28:bf:fa:d9:d7:38:fd:cf:fd:9a:96:2f:04:81:2e:b3:d4:
         b2:89:b5:7e:32:ef:92:55:d1:4c:40:a9:62:24:9d:37:81:32:
         11:3e:1f:d1:44:0c:7e:bc:ed:eb:6a:76:54:ac:12:9d:97:53:
         1f:36:9d:dc:8d:63:5b:e2:0c:ef:41:74:c4:86:0e:0d:1e:ed:
         c9:90:e9:81:84:79:85:ae:01:c2:6a:17:2a:c9:02:8e:e2:81:
         b5:a5:1b:4a:11:a1:61:30:b6:25:78:4e:30:4a:4c:2f:27:9d:
         12:b2:10:b8:cb:36:ab:3f:e4:07:f2:ba:5b:9d:36:09:c0:d8:
         d9:1d:7b:15:a3:92:ff:d1:b9:68:ae:35:4a:be:6b:ff:51:ec:
         27:e9:6d:3f:a9:56:a8:43:e6:cb:0b:38:ff:8e:18:3a:3b:95:
         02:9a:b5:8c:88:20:16:4f:de:d1:d0:e3:33:6a:de:2e:07:cb:
         ec:34:71:d7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCx+yNojaR7S2cEIe67tW+u2Xg7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MjZaFw0yNjAyMDMxODUxMjZaMDMxMTAvBgNV
BAMTKDgzNDQ3ODU5QzczOTAzNDBFNzhGNkIwQzY2MENBQjczQkVCQ0NDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCangv6Ofi/FTitlour6sJF7pB4
sKKifiojrv0xuThOdUSqZsRoq7eYFOSaWImpTRzdOMCYeUXrPsDS4Qu0MblleYox
Xsd6Wi3/Uh8eITYGwHqSxd5VvKfDpzAhDtPg3H4xM34A2WuoFyfj5sKP2MFZvGOX
ucT+ka6obeMTz/UShpTS9reqxVHuhoYWQrgadNZFeDFTbVNmw3XyLVgL1zPUSFVs
VJ+nwdZdYpbDaJqawBEI7o5htVpJKNzFIRauvsQATVSaIJuXqOJSjKBawTFqnbPj
3Ydy6M01TSOLRZwVDLJH2SFsu42RoperfOSz6TegBNtd39t4oiZnFJiCja6jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUg0R4Wcc5A0Dnj2sMZgyrc768zJQwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMzMzczODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvjl0
MA0GCSqGSIb3DQEBCwUAA4IBAQC31sS+T0HcBN/RkDNDlzVtGkhf6nUS9Y10bFj2
gi1WSpGL86YSmOTVxyd//7psxa3/oah76w6mDLfidR4OOZIJCloayvmf0jVcKL/6
2dc4/c/9mpYvBIEus9SyibV+Mu+SVdFMQKliJJ03gTIRPh/RRAx+vO3ranZUrBKd
l1MfNp3cjWNb4gzvQXTEhg4NHu3JkOmBhHmFrgHCahcqyQKO4oG1pRtKEaFhMLYl
eE4wSkwvJ50SshC4yzarP+QH8rpbnTYJwNjZHXsVo5L/0blorjVKvmv/Uewn6W0/
qVaoQ+bLCzj/jhg6O5UCmrWMiCAWT97R0OMzat4uB8vsNHHX
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:08 2025 by rpki-client