Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32342e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          IQg+1ME2BKntDvoZYfMD05eSGviijglx2BtDIvK1aFc=
Subject key identifier:   07:07:76:F8:12:9D:AA:81:15:E8:16:2A:8C:16:14:42:CE:88:FC:A7
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       3495D7E20593B435BED7124C9A71F266E32AFAB0
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:25 +0000
ROA not before:           Tue 04 Feb 2025 18:46:25 +0000
ROA not after:            Tue 03 Feb 2026 18:51:25 +0000
asID:                     12127
IP address blocks:        190.57.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:95:d7:e2:05:93:b4:35:be:d7:12:4c:9a:71:f2:66:e3:2a:fa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:25 2025 GMT
            Not After : Feb  3 18:51:25 2026 GMT
        Subject: CN=070776F8129DAA8115E8162A8C161442CE88FCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:41:27:ce:97:6b:78:46:da:13:48:06:31:
                    30:6e:5c:cb:7c:a1:f1:d3:8a:d1:b9:ec:76:9d:57:
                    1a:8c:95:e2:aa:6f:ed:01:56:fb:10:77:08:de:16:
                    41:07:87:8b:f6:dc:9f:29:f0:29:4b:65:7d:66:87:
                    ee:a8:0e:77:6a:c1:e3:16:41:3f:b3:ae:f7:24:4f:
                    a5:6d:42:03:c6:c5:15:d2:84:96:2b:18:f0:cf:e5:
                    84:04:d4:bd:7c:0e:4b:c8:ba:6b:f4:20:f5:05:ea:
                    b9:ac:50:78:41:81:b2:d7:18:d1:29:cf:a7:90:59:
                    16:fd:76:a5:4a:e8:61:23:fc:6c:d8:f0:b4:8d:1a:
                    fb:29:23:4d:5a:c2:63:a4:04:14:f5:f2:b9:5f:c3:
                    7d:f4:e1:8a:1c:4d:1d:b9:6c:f6:03:a6:b8:aa:74:
                    b6:20:dc:9c:c1:7c:13:67:66:69:3e:1a:72:69:e0:
                    f3:7d:b8:44:55:8a:ee:0b:a9:39:9a:ee:28:c5:a9:
                    6a:c5:9d:b0:24:06:d8:57:14:41:6a:8b:aa:f6:de:
                    ae:44:f1:b9:e7:d5:ec:25:91:8e:16:ac:4e:f7:7b:
                    68:1d:92:62:8f:f8:25:18:3a:73:03:87:19:6c:fe:
                    35:a0:aa:fb:db:40:94:2d:61:51:d0:a4:6f:15:35:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:76:F8:12:9D:AA:81:15:E8:16:2A:8C:16:14:42:CE:88:FC:A7
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:60:16:53:5d:ab:3b:19:7e:e8:7d:c8:34:8d:a7:b4:a9:3e:
         e3:6a:f9:a0:bb:8d:8e:61:2c:9d:5e:fc:f1:af:ac:47:0f:76:
         71:2c:f5:54:ae:82:79:b0:fa:4f:4e:eb:50:a2:c4:1c:7c:31:
         94:40:46:72:e8:4c:7b:a6:b3:c2:2a:b0:95:c5:4e:44:fd:18:
         19:30:65:32:0d:3b:3e:d9:f4:5d:20:ea:6c:8f:c1:6d:12:ca:
         44:24:de:39:60:7c:f0:ce:25:9d:99:cb:e7:6b:79:b5:6d:af:
         43:d0:fe:a5:61:3c:1a:b6:74:9e:61:d0:42:f2:44:7e:f5:1d:
         35:77:e8:15:85:e6:57:89:6d:55:d2:29:49:c8:dd:bb:19:b2:
         08:3c:6c:92:72:64:65:42:28:75:50:35:94:37:86:dc:23:43:
         b5:af:88:3e:e3:91:87:3b:0d:46:cc:e0:d6:d9:15:44:c7:3c:
         46:aa:d4:87:cc:01:04:d3:7e:8b:e0:0d:11:89:3c:d7:5c:a8:
         7e:fa:79:2b:56:2b:a0:c9:a1:58:f4:8c:d7:3a:ca:c1:40:8c:
         2d:be:50:e2:64:63:61:8c:cc:d3:a8:91:28:cd:8c:f2:a2:8f:
         66:01:ee:10:30:10:97:05:e5:91:a2:35:d8:30:cc:83:1c:32:
         fd:51:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:13 2025 by rpki-client