Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e31362e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e31362e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Rb/ghdZUXo/KRUc4BoM2TQoMVKNXLO1Lw+numFOWhpk=
Subject key identifier:   DF:9D:54:9B:90:41:F2:C2:64:9F:C4:89:A1:4E:84:FE:40:61:69:39
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       160D139734664BC61454F15CD51F93484EAA5C6A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e31362e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:47 +0000
ROA not before:           Tue 05 Mar 2024 18:01:47 +0000
ROA not after:            Tue 04 Mar 2025 18:06:47 +0000
asID:                     263783
IP address blocks:        190.57.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:13:97:34:66:4b:c6:14:54:f1:5c:d5:1f:93:48:4e:aa:5c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:47 2024 GMT
            Not After : Mar  4 18:06:47 2025 GMT
        Subject: CN=DF9D549B9041F2C2649FC489A14E84FE40616939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:c1:11:d1:a2:bd:87:c2:27:88:df:5b:ed:
                    0a:41:ce:6a:ac:f4:43:0e:49:c2:a6:e8:22:f6:3c:
                    f9:7c:97:08:1b:f8:b7:2d:34:67:a4:b2:e6:da:c2:
                    4b:eb:27:0e:c4:4c:2d:d6:82:a5:ca:b3:96:82:7f:
                    b2:10:04:1b:f0:a8:4c:1c:79:ee:ca:d2:0a:5a:30:
                    ae:1f:d7:ba:25:9b:b6:2f:3e:11:dc:31:ea:97:0f:
                    bb:2b:cf:78:c4:b1:9e:94:fc:fd:46:17:9d:31:7e:
                    e9:3a:ca:79:cc:28:bc:c7:68:1d:ad:dc:6a:de:67:
                    0e:8a:4b:03:38:ac:5c:00:bc:7c:75:96:bb:ed:a0:
                    f8:b7:75:4b:cc:14:33:8b:95:7d:fe:6c:72:ac:d0:
                    38:87:0d:2e:3c:fc:26:81:be:19:16:e8:16:74:f0:
                    dc:95:ba:fd:dd:41:ce:85:1b:1b:b6:c4:e3:f8:db:
                    23:93:96:ad:eb:1b:72:8b:2d:88:25:7a:9a:ad:e0:
                    b5:21:ff:1d:cc:15:1b:cd:11:38:6d:e4:0a:40:94:
                    c9:20:fb:b9:60:c1:fb:b8:31:79:e7:63:c2:14:34:
                    5c:6c:4d:cb:17:d0:30:18:a0:7d:db:ab:ba:64:c8:
                    a7:81:e5:ec:61:0b:0e:1a:f3:4b:be:1e:95:e5:1b:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9D:54:9B:90:41:F2:C2:64:9F:C4:89:A1:4E:84:FE:40:61:69:39
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e31362e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:1b:04:60:d6:e1:ad:75:bb:36:85:b6:e7:8a:49:9d:67:
         8f:55:1c:d8:03:b2:1b:90:8d:d5:76:be:a9:35:69:e1:c8:0f:
         80:b1:36:56:c8:ca:3f:1d:35:36:3f:9a:e6:e4:fe:26:ae:02:
         f8:a0:5f:b1:78:e9:86:94:b9:1e:98:1d:86:1f:4d:74:f9:be:
         05:a9:1e:a4:04:e7:1f:3c:50:ab:94:3f:4a:a8:b9:24:de:e6:
         27:f9:b1:11:40:ac:2f:fd:4c:52:ba:52:f7:fb:0a:a6:70:63:
         de:a5:32:f1:88:5b:49:86:94:92:12:f4:6e:b8:0d:45:ab:42:
         e6:e2:ae:cf:14:ee:d1:c2:f5:d9:12:c3:c7:b7:d9:a3:ca:64:
         91:85:ef:13:96:81:81:dc:33:f2:13:9e:b0:f8:7c:27:8a:b1:
         39:1d:70:b8:1c:3f:f0:59:d1:0b:d3:5f:bd:df:10:64:e9:0a:
         54:f7:e1:ff:fa:bd:d7:de:97:a1:3d:b8:38:f5:ec:61:f5:a7:
         02:2f:d4:b1:ba:c5:92:26:d9:fe:20:4b:28:61:71:73:4e:d5:
         ac:b5:f2:f9:56:a6:da:13:5f:77:b4:72:77:05:70:0d:cb:9f:
         6b:e6:73:01:c7:8d:e6:0f:d2:fe:cd:85:6e:64:40:ae:de:fc:
         5c:f5:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:35:37 2024 by rpki-client on console-ams.rpki-client.org