Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32312e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          Vm1DlNhdXzNkmDy3MnT98H8DMZ5FKQK2t8IemaFlbcY=
Subject key identifier:   93:C5:D9:50:4C:D1:75:32:02:BF:0D:60:BB:17:68:57:67:85:C8:E6
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4272AE0032A3F0DE029457A5F2DF83DD7A69BA94
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:52 +0000
ROA not before:           Tue 05 Mar 2024 18:01:52 +0000
ROA not after:            Tue 04 Mar 2025 18:06:52 +0000
asID:                     12127
IP address blocks:        190.57.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:ae:00:32:a3:f0:de:02:94:57:a5:f2:df:83:dd:7a:69:ba:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:52 2024 GMT
            Not After : Mar  4 18:06:52 2025 GMT
        Subject: CN=93C5D9504CD1753202BF0D60BB1768576785C8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:08:ae:5d:66:e9:0b:a7:59:7b:84:65:67:
                    5d:f2:b3:ee:cf:95:42:6d:6e:7e:54:fd:cb:fd:43:
                    6a:0d:a7:bd:f6:9e:76:69:72:61:f0:5e:79:39:42:
                    ef:d5:be:fe:ca:36:e7:a2:3c:bc:30:ef:c9:c1:ee:
                    4d:52:3f:9d:01:10:ee:59:9d:ea:c5:73:fd:01:2f:
                    6d:ee:41:39:10:db:84:8b:2d:77:a7:a8:94:a0:dc:
                    89:02:45:43:5b:a3:2b:bc:c3:c1:f3:84:80:2b:16:
                    f6:9e:70:af:fd:08:64:d8:81:c4:60:57:02:ed:2a:
                    17:3d:d1:c3:ce:10:6d:17:24:a5:84:06:66:a3:87:
                    05:55:99:d2:24:f1:da:1d:ad:30:44:74:9c:77:a6:
                    4e:a7:f4:fd:69:61:dd:22:6a:b7:8c:33:a5:23:97:
                    79:80:6a:61:7c:42:81:c3:11:04:b4:be:d9:18:e8:
                    b6:08:1d:e1:76:23:03:76:8f:32:81:19:6d:eb:46:
                    40:2f:b8:ba:ca:a1:f4:92:1b:19:61:03:80:70:f9:
                    de:fa:3d:eb:23:1c:2d:a3:32:54:ca:42:91:50:3b:
                    6c:ea:75:1e:1a:b0:f9:43:8b:a1:ba:16:79:15:e4:
                    a5:50:9a:1e:97:c5:7d:cf:9e:b2:f8:8a:88:87:98:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C5:D9:50:4C:D1:75:32:02:BF:0D:60:BB:17:68:57:67:85:C8:E6
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:7b:91:fe:eb:46:67:32:03:07:99:6e:06:5d:cc:62:d3:4e:
         00:5c:04:25:82:21:65:e0:6a:77:ff:2c:ef:c5:08:5d:ca:d9:
         2b:a6:84:3b:c1:be:fd:a3:6a:aa:09:08:3a:d0:f3:03:6a:14:
         50:32:90:6e:5d:bd:71:52:a1:50:25:b1:06:41:63:a5:b8:e5:
         d9:d2:71:6f:95:f1:f9:9e:03:79:4a:fa:77:b3:91:e6:52:41:
         cb:8c:00:61:09:81:44:1d:92:51:f0:6b:ac:d9:cc:f8:82:45:
         58:91:9f:f8:9b:10:4d:2d:e6:86:68:f1:5b:77:cc:a8:4c:45:
         07:03:45:89:9c:d7:8a:75:0c:b2:dd:86:af:be:13:37:54:22:
         0b:d7:4b:fb:b6:88:26:52:98:42:b2:1e:1d:3d:5e:0e:e0:14:
         29:66:a4:e6:fa:11:3d:31:cd:40:f6:57:05:c5:0d:44:37:bb:
         49:79:b3:96:e6:31:78:0e:ec:87:d1:d4:44:bd:a0:3c:3c:f2:
         c3:2d:dd:f3:50:21:24:7a:bf:d1:d0:e8:aa:18:84:f1:49:37:
         c4:f9:4f:23:70:e0:b4:ab:fb:bc:90:3b:df:05:12:19:84:a6:
         39:58:f7:ed:5b:2c:ca:e8:28:4d:bc:91:27:01:00:3f:1b:4b:
         0a:86:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org