Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e3132302e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          hB/pQdJ3SP+vEFc806YWuhqqeoi8fj+KmmtLpzh/zEk=
Subject key identifier:   FD:47:40:14:E2:8F:74:BA:5A:E5:ED:92:88:9E:4A:9B:AE:89:A1:35
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       7B2224E3245155A0A43E4DACE3D015D8EF4AA040
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:24 +0000
ROA not before:           Tue 04 Feb 2025 18:46:24 +0000
ROA not after:            Tue 03 Feb 2026 18:51:24 +0000
asID:                     12127
IP address blocks:        190.57.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:22:24:e3:24:51:55:a0:a4:3e:4d:ac:e3:d0:15:d8:ef:4a:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:24 2025 GMT
            Not After : Feb  3 18:51:24 2026 GMT
        Subject: CN=FD474014E28F74BA5AE5ED92889E4A9BAE89A135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:9c:29:76:36:f5:20:99:57:fd:4b:e0:c4:
                    14:78:09:3f:9d:e9:ce:97:58:1e:21:8d:b0:00:08:
                    c8:45:8a:71:56:cd:f6:d1:b2:c0:ce:28:a9:4b:b8:
                    36:1f:4c:8d:a6:de:1e:77:b5:47:3c:b9:fa:ec:34:
                    7f:68:f4:aa:90:4e:a3:1b:29:6a:f7:19:ba:b7:bb:
                    42:a6:36:9c:0e:b0:aa:68:9e:b9:b9:9c:cf:07:0f:
                    7a:38:52:05:90:4a:b7:7b:58:e6:5a:fd:57:7f:83:
                    63:a3:6c:11:00:88:9f:a4:d5:f8:fc:e9:91:64:d1:
                    be:10:89:83:26:55:85:b0:e4:b4:a6:d6:17:d3:91:
                    81:07:50:51:09:1d:37:5e:e3:a9:3a:ef:db:98:4a:
                    3e:3a:6e:7e:8d:2f:57:e9:fb:15:fe:c7:6e:d2:59:
                    f5:74:22:22:e9:4a:af:71:63:29:a1:5a:a7:a6:1e:
                    4d:07:65:f0:8c:cc:0e:2a:35:46:2c:d6:da:ab:cc:
                    d5:7e:7f:b9:0b:36:0c:83:d5:f2:7f:8f:2f:e0:25:
                    d8:f0:c3:5d:b9:9d:95:39:70:e9:b1:a8:e5:d7:36:
                    00:d7:61:fc:9a:03:0c:9b:46:4c:b2:4b:eb:7e:f6:
                    dc:df:e3:b6:14:a8:76:90:20:f7:13:95:9e:0a:34:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:47:40:14:E2:8F:74:BA:5A:E5:ED:92:88:9E:4A:9B:AE:89:A1:35
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:c4:ca:af:65:f4:3a:46:13:6c:b5:a4:d3:73:d4:64:e6:
         62:f4:f5:5b:f3:a6:86:b1:bc:bf:74:51:16:48:71:c7:18:5c:
         57:4c:d7:05:8e:f7:02:63:f2:9f:c3:28:b6:4b:cf:38:4c:03:
         ec:6d:3a:d8:5f:24:d9:88:80:64:8f:4d:f2:b0:a8:75:cd:22:
         40:a5:c6:4c:e8:2c:0f:a6:2e:c6:45:cd:c0:6e:c2:f8:8a:b9:
         d6:27:53:19:e3:7e:18:83:bd:11:99:c2:ab:71:41:fa:75:ed:
         c1:99:45:62:02:03:f0:a4:42:a3:6e:b2:c2:c2:23:ee:f8:d5:
         aa:82:e1:c2:33:56:d9:ca:48:61:6b:d2:f9:ac:2d:24:7d:81:
         91:8c:c9:72:b8:0b:96:dc:c1:da:34:38:16:e0:15:05:dc:da:
         f7:ac:ee:9f:56:fa:44:6a:66:94:66:f0:de:19:07:8b:1f:f2:
         94:44:e1:a8:8f:b2:d8:c1:48:71:ff:99:56:dc:d7:f3:69:d2:
         48:fe:39:b7:bf:9e:89:8f:c0:4a:b0:aa:58:78:b7:56:c5:74:
         22:8e:f0:63:98:a6:5d:26:3a:d8:5b:a5:e9:a7:04:18:a1:d0:
         e7:82:9b:14:04:97:79:df:04:3c:a7:93:9c:4e:b2:e4:a0:22:
         65:a1:e6:dd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeyIk4yRRVaCkPk2s49AV2O9KoEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MjRaFw0yNjAyMDMxODUxMjRaMDMxMTAvBgNV
BAMTKEZENDc0MDE0RTI4Rjc0QkE1QUU1RUQ5Mjg4OUU0QTlCQUU4OUExMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+pwpdjb1IJlX/UvgxBR4CT+d
6c6XWB4hjbAACMhFinFWzfbRssDOKKlLuDYfTI2m3h53tUc8ufrsNH9o9KqQTqMb
KWr3Gbq3u0KmNpwOsKponrm5nM8HD3o4UgWQSrd7WOZa/Vd/g2OjbBEAiJ+k1fj8
6ZFk0b4QiYMmVYWw5LSm1hfTkYEHUFEJHTde46k679uYSj46bn6NL1fp+xX+x27S
WfV0IiLpSq9xYymhWqemHk0HZfCMzA4qNUYs1tqrzNV+f7kLNgyD1fJ/jy/gJdjw
w125nZU5cOmxqOXXNgDXYfyaAwybRkyyS+t+9tzf47YUqHaQIPcTlZ4KNCC9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/UdAFOKPdLpa5e2SiJ5Km66JoTUwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr45eDAN
BgkqhkiG9w0BAQsFAAOCAQEAWNbEyq9l9DpGE2y1pNNz1GTmYvT1W/OmhrG8v3RR
FkhxxxhcV0zXBY73AmPyn8MotkvPOEwD7G062F8k2YiAZI9N8rCodc0iQKXGTOgs
D6YuxkXNwG7C+Iq51idTGeN+GIO9EZnCq3FB+nXtwZlFYgID8KRCo26ywsIj7vjV
qoLhwjNW2cpIYWvS+awtJH2BkYzJcrgLltzB2jQ4FuAVBdza96zun1b6RGpmlGbw
3hkHix/ylEThqI+y2MFIcf+ZVtzX82nSSP45t7+eiY/ASrCqWHi3VsV0Io7wY5im
XSY62Ful6acEGKHQ54KbFASXed8EPKeTnE6y5KAiZaHm3Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:37 2025 by rpki-client