Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e32342e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          CFfdyxMhs/KzL8O55dx9J1+/hUlgUOxW/uHvOxPgkK4=
Subject key identifier:   9B:1E:D4:BB:23:B8:4A:2C:95:DC:3F:09:F0:22:E9:B8:A3:51:BB:BF
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       1AC580C7BF773AAB7016D6A079EB56D6A2A09F69
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:36 +0000
ROA not before:           Tue 04 Feb 2025 18:46:36 +0000
ROA not after:            Tue 03 Feb 2026 18:51:36 +0000
asID:                     263783
IP address blocks:        190.57.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c5:80:c7:bf:77:3a:ab:70:16:d6:a0:79:eb:56:d6:a2:a0:9f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:36 2025 GMT
            Not After : Feb  3 18:51:36 2026 GMT
        Subject: CN=9B1ED4BB23B84A2C95DC3F09F022E9B8A351BBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:dd:f4:c3:ac:2c:a0:68:43:44:30:02:12:
                    f5:4e:91:81:af:05:10:13:b0:83:f6:9c:8d:c5:a8:
                    9f:58:ab:db:be:e0:24:32:0e:bc:c3:45:b1:f1:3b:
                    8c:9f:36:26:2c:d7:85:ad:84:02:ab:cb:c2:a7:cd:
                    62:79:6f:b3:34:c4:52:92:dd:98:30:94:91:3e:a5:
                    5d:96:30:b8:02:ea:67:4f:d7:85:a8:ff:b7:d7:eb:
                    26:6e:d4:9a:15:9a:05:4e:08:87:0b:d0:35:dc:af:
                    e9:78:92:e9:ad:d4:df:e8:bb:f0:a4:87:f5:78:c5:
                    8d:f3:1c:15:a2:45:20:40:ca:5e:22:49:a5:c4:8c:
                    c1:8a:41:04:c0:34:ea:08:21:10:98:16:22:2c:cc:
                    4d:84:88:68:ab:a3:06:80:bf:ef:d9:47:01:43:cc:
                    0a:22:97:49:fc:f7:de:3a:be:8f:5b:85:59:e7:cc:
                    68:e4:45:22:34:3e:9e:f4:69:77:7a:79:9a:29:2c:
                    b9:c5:cd:ba:22:f0:19:e1:09:72:47:b6:15:53:7f:
                    ee:7e:7e:95:11:07:a9:67:af:51:cc:d4:55:7e:ce:
                    6c:3b:9d:54:24:85:52:58:a5:39:cd:b5:97:9b:0e:
                    dd:b6:4f:77:ff:be:73:02:b9:18:fc:4f:4f:be:52:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1E:D4:BB:23:B8:4A:2C:95:DC:3F:09:F0:22:E9:B8:A3:51:BB:BF
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32342e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1f:cc:17:8a:35:91:3c:5c:e1:ae:d3:60:b7:a2:a7:cd:78:
         c8:7a:5e:29:e9:1b:62:cc:11:2c:5a:2d:d7:75:c7:8c:7e:7f:
         e1:db:6b:e4:86:bf:81:01:81:5b:4a:a2:01:cc:35:79:cd:47:
         d9:be:e9:a0:5c:11:55:69:fb:45:4c:b8:e0:cc:d6:18:06:b1:
         c3:db:f9:e8:f6:39:f3:fa:b2:1c:50:92:ba:55:a4:10:4a:1d:
         59:2c:fb:10:fa:02:b1:c2:74:b6:3e:9a:e2:71:1b:da:fe:6d:
         04:51:38:41:1d:be:df:ec:80:0d:02:02:8b:10:a7:e0:1c:c0:
         32:bb:61:e3:28:c5:11:08:20:34:6f:3d:47:ac:b1:5d:1e:92:
         d8:95:85:19:f7:e7:c1:73:48:08:90:e6:8c:e8:1c:ca:1f:53:
         77:95:d0:5b:7d:54:6f:f2:39:54:42:d7:51:dc:cb:07:b3:f0:
         74:14:80:a9:16:04:40:12:48:9b:dc:7e:0a:56:cf:3a:09:86:
         cd:68:03:24:32:0e:5a:2d:07:a9:3f:e2:f8:64:dc:60:ed:10:
         31:58:d1:bc:cc:6b:a1:b8:b8:db:25:59:9b:6d:50:e9:7d:f9:
         ea:71:aa:46:50:3e:6b:f3:08:95:9a:7f:f5:a7:2e:d8:74:f7:
         0b:2d:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:27 2025 by rpki-client