Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32372e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32372e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          JkNp/zy9n4359Ke4lgWU+j0lboF74yV1sA7/JU2itjo=
Subject key identifier:   D4:96:01:3E:42:36:41:E0:5D:FB:C9:50:22:CE:12:78:69:DB:56:30
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       5B751AA8A2CF1D70D79C5151A49EF3C9036B23DD
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32372e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:48 +0000
ROA not before:           Tue 05 Mar 2024 18:01:48 +0000
ROA not after:            Tue 04 Mar 2025 18:06:48 +0000
asID:                     12127
IP address blocks:        190.57.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:75:1a:a8:a2:cf:1d:70:d7:9c:51:51:a4:9e:f3:c9:03:6b:23:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:48 2024 GMT
            Not After : Mar  4 18:06:48 2025 GMT
        Subject: CN=D496013E423641E05DFBC95022CE127869DB5630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:5a:80:97:90:d8:91:43:7c:a9:5c:b9:b2:
                    40:bf:3a:a5:65:27:c1:68:6d:ba:d6:78:d8:5a:33:
                    89:c9:35:db:a3:8e:97:37:bf:db:e3:62:10:43:b8:
                    ad:8f:9b:5d:e2:6f:fe:57:73:02:03:29:81:2f:7c:
                    d8:0b:08:27:bc:da:3e:fe:fd:4b:1b:23:2d:82:8c:
                    35:45:68:cd:13:48:d0:62:b7:c3:fe:9d:a8:76:18:
                    e5:36:3e:fb:25:f7:bd:ed:2e:6d:5e:bb:8c:df:17:
                    9c:a5:e4:e8:6a:3e:a2:95:eb:c9:53:92:05:96:93:
                    3a:2b:96:48:1e:9b:7a:88:48:d7:9f:7e:27:14:c7:
                    fa:49:48:5f:15:3c:46:38:62:70:84:50:a9:02:1f:
                    cc:3b:ec:4c:41:16:e1:37:5f:0a:39:99:ae:39:f6:
                    78:ea:e0:94:0e:78:76:00:24:1e:11:f9:b2:06:f3:
                    c7:53:85:2f:0d:e2:9e:78:10:bf:7f:86:72:c5:14:
                    23:5a:75:5f:0d:4a:87:46:c8:f0:7d:80:2b:73:78:
                    63:88:46:0f:6e:49:0f:bf:ff:d3:48:bf:45:14:b8:
                    f2:28:ec:89:fc:4f:1b:74:81:ac:4a:4a:87:6e:75:
                    bd:1f:d7:bc:3a:4a:79:2c:e3:f3:19:c1:c3:04:90:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:01:3E:42:36:41:E0:5D:FB:C9:50:22:CE:12:78:69:DB:56:30
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32372e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:08:28:9e:a7:3a:82:75:e2:e2:ac:10:af:8b:12:d9:44:
         b9:ff:aa:4f:06:a4:5a:00:9c:c3:7a:71:cb:c9:a4:30:12:9d:
         ac:2b:15:56:d2:ba:00:16:c1:94:0e:86:45:8a:d1:a8:46:25:
         50:5e:78:a5:fb:b2:6d:76:3f:2b:0f:6d:b7:05:01:c8:c9:7c:
         9a:cc:c4:cf:26:e9:b9:bd:68:dc:54:1c:a8:1a:89:1b:52:a9:
         d3:3b:51:bf:f9:8d:91:2d:cc:a1:92:52:ad:70:b8:c7:f3:14:
         bc:32:4e:dc:39:a8:ae:df:65:12:03:44:ba:e4:54:d1:f2:c2:
         44:d6:a5:75:c8:c4:a5:6c:6d:80:37:4e:62:2d:90:2c:f2:8e:
         3c:df:df:f0:ef:d4:21:bc:93:eb:37:13:0e:31:6d:41:52:26:
         c8:b2:3a:19:5c:8e:8d:eb:1e:9a:1e:6d:ea:dc:08:d5:74:4f:
         35:bd:d5:a0:e9:9f:3c:27:d4:66:cf:b8:8e:d0:c9:59:6e:a4:
         8a:4b:22:b1:c4:00:26:53:30:b0:bf:f4:90:9c:05:ff:fb:eb:
         00:e5:8c:ba:dd:57:a8:79:b5:a2:2c:8a:5c:8d:d2:ca:2f:60:
         21:d9:ea:1c:d1:1b:42:9c:08:35:44:3b:58:ca:52:42:6b:03:
         25:b5:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org