Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e20323633373833.roa
File:                     3139302e35372e3132302e302f32322d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          UfUPf+cJfjgMzk/h+zuO+/1Yoo8gMRcSk20xrwV9ep4=
Subject key identifier:   C9:59:3A:AD:F7:EB:4A:92:24:0A:C7:5A:C0:2E:20:EE:0C:57:1B:0E
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       2CCFD5C3B6BAB17884EB22DE0F0333BFDCAF2A9A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:54 +0000
ROA not before:           Tue 05 Mar 2024 18:01:54 +0000
ROA not after:            Tue 04 Mar 2025 18:06:54 +0000
asID:                     263783
IP address blocks:        190.57.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cf:d5:c3:b6:ba:b1:78:84:eb:22:de:0f:03:33:bf:dc:af:2a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:54 2024 GMT
            Not After : Mar  4 18:06:54 2025 GMT
        Subject: CN=C9593AADF7EB4A92240AC75AC02E20EE0C571B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:c9:de:45:41:f7:a5:c6:b8:f9:df:7b:9d:
                    8f:4e:21:22:04:0a:d6:d2:e3:ed:81:04:d4:c1:44:
                    7a:1d:3b:3d:1e:e0:81:6b:3a:cd:b8:79:4d:1a:04:
                    84:7a:c6:91:44:25:e8:3c:30:ee:88:a7:1e:2c:07:
                    4f:0f:38:fa:29:f8:6c:8c:47:ad:e3:2e:d8:5c:92:
                    19:f0:38:8e:99:0b:d8:6e:c5:81:19:14:2f:28:3b:
                    b5:9d:18:42:c8:dc:e4:2e:68:56:82:16:3c:f4:42:
                    b5:b2:08:f6:46:70:2b:d8:cc:68:a6:25:75:51:1d:
                    90:40:86:1d:fe:4b:32:cd:87:11:d5:67:ec:f5:01:
                    71:55:a6:69:59:c5:4a:53:95:e8:45:f3:d0:16:92:
                    72:18:55:cb:23:a6:e4:7b:5f:fd:c5:d6:db:d7:ee:
                    ed:7d:7b:25:17:d5:aa:54:39:42:59:63:28:cc:73:
                    9c:55:24:d4:f5:2b:dd:7e:17:1c:eb:10:7c:a5:3d:
                    e8:a7:85:09:ee:23:65:f8:cf:85:b3:ec:b0:37:64:
                    13:59:9a:f7:29:70:78:b1:00:22:ae:b6:b7:0a:d4:
                    d3:e9:22:11:bb:3d:e2:27:36:80:a9:ea:8e:13:be:
                    32:6e:0d:06:1b:b5:37:f7:f9:e5:cb:ae:51:20:78:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:3A:AD:F7:EB:4A:92:24:0A:C7:5A:C0:2E:20:EE:0C:57:1B:0E
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:37:3d:19:1b:08:75:4a:bf:04:83:4b:3e:4f:bc:dc:bb:0d:
         94:0a:7a:8c:95:46:f8:76:52:94:3c:72:f9:51:8b:14:0d:6e:
         4b:df:21:e2:42:3c:e1:93:0b:a9:de:60:23:c9:f3:31:40:e0:
         1a:c6:34:66:8c:8c:a7:bc:eb:db:88:b1:ba:30:d1:36:8e:e5:
         bb:fa:f4:d8:1f:67:50:31:b2:88:36:44:85:b9:29:15:a5:16:
         dd:dd:ae:80:30:19:b9:10:fe:fd:01:4e:67:86:47:07:37:05:
         aa:5f:af:d0:93:73:4a:4d:02:6f:ab:cc:98:68:dd:2c:7e:0f:
         53:17:20:06:00:3b:7a:d2:a7:19:70:51:5c:ba:b0:bc:62:83:
         3a:63:65:e8:f6:64:8c:e0:71:35:8f:7b:a4:f9:65:ef:bd:ba:
         2c:94:18:86:92:6c:23:e1:6f:34:c8:e7:33:eb:e9:b7:df:05:
         f1:49:1f:45:c4:40:dc:0f:25:d8:58:0f:49:21:e0:4d:74:6d:
         2c:fe:16:bf:d1:7e:9f:db:d8:5b:7d:68:44:f9:38:2f:96:1a:
         86:24:61:b8:59:2d:4d:3a:fd:31:1c:06:25:af:a6:1c:79:38:
         95:38:d5:40:a9:23:c5:c4:08:c8:c8:1f:4d:4a:f5:d1:34:5b:
         64:0a:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:08 2024 by rpki-client on console-fra.rpki-client.org