Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e32332e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          wEWEF7RQzUtNTfI+vpelRHaF5On3Wp6VNaHLIEkTniQ=
Subject key identifier:   80:2D:6A:58:2C:8D:85:9B:F3:16:F0:EB:E4:E1:DE:8F:1A:1A:F9:C3
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0CB162FA8F51B383936CE451AA718D95F09AEFE5
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:07:00 +0000
ROA not before:           Tue 05 Mar 2024 18:02:00 +0000
ROA not after:            Tue 04 Mar 2025 18:07:00 +0000
asID:                     263783
IP address blocks:        190.57.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b1:62:fa:8f:51:b3:83:93:6c:e4:51:aa:71:8d:95:f0:9a:ef:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:00 2024 GMT
            Not After : Mar  4 18:07:00 2025 GMT
        Subject: CN=802D6A582C8D859BF316F0EBE4E1DE8F1A1AF9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:dd:be:28:48:0c:de:97:ca:04:03:8b:cc:
                    7f:2e:f2:87:2e:38:d4:4b:e3:71:cd:f9:f9:1e:1d:
                    10:5e:70:80:1b:96:9f:dd:9e:50:59:ab:34:01:53:
                    0a:7c:26:d1:f9:cc:10:b8:90:89:5b:cf:af:f3:3d:
                    19:46:38:2c:3d:dc:f7:08:93:dc:0b:f1:57:f8:37:
                    0c:6d:7d:d2:1b:bc:9f:8e:88:cc:bd:67:f7:48:49:
                    c2:f9:eb:e2:46:79:50:b5:db:c1:ea:90:d0:b5:14:
                    3b:66:14:32:f8:ee:c9:c0:41:07:2a:1f:bf:6a:92:
                    89:43:30:57:f9:4b:60:bb:ad:a6:b8:42:59:c2:9a:
                    a7:f5:3b:c3:57:3d:64:02:2a:18:9f:ac:d1:a3:68:
                    06:d2:dc:97:59:44:0c:b2:9c:03:8e:d5:1c:64:4d:
                    ec:82:83:6a:57:09:98:34:b1:7d:b2:97:ce:14:9f:
                    fb:19:81:ff:fd:a1:2f:35:7a:49:8c:c4:10:a2:a2:
                    41:3e:a7:35:29:0e:ec:59:83:62:4a:07:b1:25:51:
                    b1:fa:22:63:b1:5f:39:02:0c:37:8f:86:70:da:45:
                    fa:3f:63:19:44:67:6c:a6:24:13:50:33:d8:10:32:
                    3e:4a:ae:f2:f4:fd:09:f1:fe:77:0f:98:93:60:30:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:6A:58:2C:8D:85:9B:F3:16:F0:EB:E4:E1:DE:8F:1A:1A:F9:C3
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:63:ff:f5:0a:69:bd:11:56:b9:e8:90:dc:a7:50:ce:bf:
         78:6f:e7:e7:89:c8:3f:17:e5:18:c5:98:f4:01:4b:0d:40:0d:
         de:2a:31:14:5f:b9:c7:9d:9e:f1:d2:e1:46:1b:43:07:26:eb:
         92:49:aa:32:6c:6e:3c:c3:4e:8a:c5:dc:80:d4:e6:51:87:b9:
         77:3b:ab:d2:0a:0f:01:f5:45:38:a9:10:6a:af:69:d2:6e:ed:
         4a:2d:da:a8:4d:a8:9a:45:e7:8f:67:77:53:62:38:17:fe:54:
         18:34:b6:30:ee:37:f3:18:68:7e:d2:19:59:61:b3:c8:54:80:
         7d:63:c4:98:67:52:4a:0e:8d:e2:96:26:8f:21:f0:8e:eb:a3:
         05:a6:69:db:bc:bc:e9:41:9c:d6:ae:fc:01:8a:6d:bc:6a:4e:
         d9:dc:2b:25:46:6e:b1:ef:da:c8:3b:c4:bd:ca:fe:ad:4f:f1:
         cf:4e:ae:dc:bf:1a:9c:a9:e0:f5:3a:3c:86:d9:fe:10:2a:60:
         3c:af:87:ee:73:98:21:10:4d:32:44:58:11:b8:a7:bb:23:70:
         cc:05:af:99:0f:b0:32:1f:c8:ef:c2:6f:c1:f7:d3:52:77:18:
         a6:ae:fb:54:ef:8a:62:0b:2d:ba:d4:ee:ff:51:43:3b:13:8d:
         ee:ce:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:08 2024 by rpki-client on console-fra.rpki-client.org