Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32342e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          UqW3A8Mtz0UWkihxcK1oxi3WBjTIM1gtshT/etejdic=
Subject key identifier:   63:0B:2B:57:56:3B:66:6A:72:8E:EF:12:A6:C8:20:49:DC:AD:93:6B
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       056E951F429881E4F33F09FAA0232B37F991C763
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:46 +0000
ROA not before:           Tue 05 Mar 2024 18:01:46 +0000
ROA not after:            Tue 04 Mar 2025 18:06:46 +0000
asID:                     12127
IP address blocks:        190.57.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6e:95:1f:42:98:81:e4:f3:3f:09:fa:a0:23:2b:37:f9:91:c7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:46 2024 GMT
            Not After : Mar  4 18:06:46 2025 GMT
        Subject: CN=630B2B57563B666A728EEF12A6C82049DCAD936B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:4f:44:38:f0:81:09:07:d2:02:12:a1:3c:
                    8a:0e:b4:7a:a8:d6:09:64:f8:b2:73:88:d4:ea:73:
                    3b:f9:43:f0:60:4d:e2:70:b0:b6:17:81:28:90:62:
                    84:4e:32:80:2c:b0:f9:0b:c8:88:97:0e:50:9f:f1:
                    e0:9e:13:94:b7:05:1d:0d:51:3a:46:db:f6:16:c1:
                    90:40:5c:77:d1:98:21:24:22:ca:85:46:9a:75:91:
                    78:82:ec:27:d5:71:17:e4:b0:8b:2c:82:66:1c:bc:
                    04:2a:2e:74:4f:4d:07:fa:8e:cc:31:24:73:13:b9:
                    40:89:88:f2:9f:e8:3c:3e:cb:50:a1:88:f1:4f:5d:
                    68:68:f3:a0:14:9b:50:05:4e:c6:82:17:f1:fa:53:
                    13:5b:24:d7:6f:20:f2:54:e7:82:55:0a:53:f4:67:
                    d3:3b:19:f5:25:7d:b7:8b:19:b9:c8:a2:3c:d8:b6:
                    50:12:5e:e1:fe:62:09:c9:2e:e2:65:c4:d5:3c:27:
                    a8:c5:cf:bd:b2:75:5b:68:76:1a:50:4e:dd:7a:50:
                    07:d4:30:eb:70:ee:61:a7:1c:b0:b2:6c:49:a4:e0:
                    24:a8:cd:ea:29:f7:3d:7a:a7:a5:24:ed:1b:9f:a3:
                    4e:37:35:75:eb:85:ca:28:55:df:17:33:aa:31:50:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:2B:57:56:3B:66:6A:72:8E:EF:12:A6:C8:20:49:DC:AD:93:6B
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:ad:7b:a2:18:41:18:5a:94:13:61:61:73:67:05:27:36:
         86:2c:19:5f:2b:a2:94:30:e2:ab:3c:39:d5:0c:a1:70:b9:53:
         12:ea:ce:34:46:5c:ef:96:64:cf:c7:b5:e0:1f:2d:bd:d2:18:
         8b:07:68:b1:4e:d5:1e:94:58:71:2d:18:a1:31:0e:b7:b6:28:
         9a:1d:4d:06:d2:0f:b5:7f:e4:fc:52:e8:e1:0b:2f:3e:20:a7:
         c9:b8:de:ac:31:78:56:27:08:dc:f0:43:65:74:11:22:61:dd:
         a4:9d:ff:dc:8a:c8:9a:b0:6d:f3:4e:64:4f:2b:3e:92:7f:cd:
         fd:aa:8c:cd:b6:12:fa:c8:b2:8b:bd:11:97:dd:69:2b:66:8b:
         0a:cf:db:be:a8:e8:eb:0c:18:19:b6:95:b8:a3:50:2f:bc:73:
         eb:9e:c4:f5:70:70:23:30:4f:f4:a8:13:3e:04:8b:cb:f5:6e:
         e5:45:de:f5:04:6f:9b:d3:57:b4:fd:5e:85:f2:6a:5e:eb:fb:
         d8:d3:9c:a4:b0:d4:7b:c4:a9:af:98:dc:21:48:ce:3a:63:0c:
         05:5f:ea:e0:e2:3f:ce:06:6e:ae:5d:5c:06:81:a8:92:96:d1:
         5f:ec:0e:4a:5a:89:57:69:b7:94:cf:54:9c:b0:0f:9a:f8:2a:
         56:91:b3:5f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBW6VH0KYgeTzPwn6oCMrN/mRx2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNDAzMDUxODAxNDZaFw0yNTAzMDQxODA2NDZaMDMxMTAvBgNV
BAMTKDYzMEIyQjU3NTYzQjY2NkE3MjhFRUYxMkE2QzgyMDQ5RENBRDkzNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeE9EOPCBCQfSAhKhPIoOtHqo
1glk+LJziNTqczv5Q/BgTeJwsLYXgSiQYoROMoAssPkLyIiXDlCf8eCeE5S3BR0N
UTpG2/YWwZBAXHfRmCEkIsqFRpp1kXiC7CfVcRfksIssgmYcvAQqLnRPTQf6jswx
JHMTuUCJiPKf6Dw+y1ChiPFPXWho86AUm1AFTsaCF/H6UxNbJNdvIPJU54JVClP0
Z9M7GfUlfbeLGbnIojzYtlASXuH+YgnJLuJlxNU8J6jFz72ydVtodhpQTt16UAfU
MOtw7mGnHLCybEmk4CSozeop9z16p6Uk7Rufo043NXXrhcooVd8XM6oxUJjHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUYwsrV1Y7Zmpyju8SpsggSdytk2swHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzIzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzIzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+ORgwDQYJ
KoZIhvcNAQELBQADggEBAJjurXuiGEEYWpQTYWFzZwUnNoYsGV8ropQw4qs8OdUM
oXC5UxLqzjRGXO+WZM/HteAfLb3SGIsHaLFO1R6UWHEtGKExDre2KJodTQbSD7V/
5PxS6OELLz4gp8m43qwxeFYnCNzwQ2V0ESJh3aSd/9yKyJqwbfNOZE8rPpJ/zf2q
jM22EvrIsou9EZfdaStmiwrP276o6OsMGBm2lbijUC+8c+uexPVwcCMwT/SoEz4E
i8v1buVF3vUEb5vTV7T9XoXyal7r+9jTnKSw1HvEqa+Y3CFIzjpjDAVf6uDiP84G
bq5dXAaBqJKW0V/sDkpaiVdpt5TPVJywD5r4KlaRs18=
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:33 2024 by rpki-client on console-fra.rpki-client.org