Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32382e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32382e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          FBUWEzMLBQH3bM4aulr8l5q/6Yvxix+i7TiAmhpTQlg=
Subject key identifier:   D7:B5:1A:A3:77:E6:6F:F7:BA:F8:91:B8:00:68:F5:30:A1:7A:AA:C0
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       775E74A018F7889F1422C7537A8C46A7CCC20FE7
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32382e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 27 May 2025 13:05:01 +0000
ROA not before:           Tue 27 May 2025 13:00:01 +0000
ROA not after:            Tue 26 May 2026 13:05:01 +0000
asID:                     12127
IP address blocks:        190.57.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5e:74:a0:18:f7:88:9f:14:22:c7:53:7a:8c:46:a7:cc:c2:0f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: May 27 13:00:01 2025 GMT
            Not After : May 26 13:05:01 2026 GMT
        Subject: CN=D7B51AA377E66FF7BAF891B80068F530A17AAAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:dd:de:32:a5:7a:33:38:a5:73:9d:83:f9:
                    c5:d5:6a:e2:81:17:ea:82:ed:d5:ec:ed:6a:2d:e1:
                    87:0b:2e:7b:7e:4c:26:c8:f8:e8:ef:c4:a8:11:40:
                    e6:d1:d9:c7:18:d8:84:3b:e5:be:24:50:64:ad:b9:
                    0c:2b:0b:81:06:aa:ed:81:43:07:c7:03:4f:8b:d1:
                    4f:6c:b2:61:ef:e4:e9:23:7c:2a:67:51:96:ea:19:
                    49:c9:76:df:df:dc:42:6a:54:3e:95:e6:f9:de:91:
                    5a:b6:25:3d:04:33:e6:e4:4a:2e:8d:e7:cc:0b:24:
                    57:91:c8:af:3c:34:10:1c:d3:49:97:e8:35:06:4e:
                    3b:20:af:db:b2:99:b4:ed:21:e7:52:c0:99:eb:12:
                    81:85:f7:96:41:ab:f9:8f:0a:aa:6f:c6:b6:4d:4f:
                    df:d2:64:d1:cc:61:92:25:0a:b4:dd:8a:92:58:9f:
                    b8:53:49:68:94:0c:f0:91:ca:7d:b9:f1:e9:3b:a9:
                    67:a5:7d:1d:76:ed:89:a4:74:f2:b9:16:85:9d:5a:
                    dd:4b:c2:d7:37:af:f9:08:12:6e:98:c5:f9:fb:bc:
                    0c:7a:85:ec:8c:b0:9a:9e:98:74:6a:3d:00:77:6a:
                    f1:f0:69:54:68:26:78:cf:27:da:01:c4:c8:c7:8b:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B5:1A:A3:77:E6:6F:F7:BA:F8:91:B8:00:68:F5:30:A1:7A:AA:C0
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32382e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:60:11:58:e1:36:b9:da:ab:70:9a:8a:e1:76:6f:31:65:
         24:25:c5:f2:88:4c:f0:5a:1d:18:3f:d2:ea:34:78:30:67:40:
         af:59:d0:fe:da:bf:62:3f:b1:6c:d3:89:10:75:90:8f:b8:43:
         16:89:d6:e4:14:42:54:1a:4d:e2:35:4f:d3:62:13:85:c3:60:
         cf:9a:42:b5:b1:70:ee:ec:29:9e:42:7c:4f:6b:9c:a5:e5:02:
         c4:c8:02:7a:96:dc:7a:7e:e2:c2:c0:57:07:3e:a4:fb:78:2c:
         1f:b7:13:d3:ed:80:6f:90:73:3e:6c:de:88:24:e3:45:03:76:
         81:51:02:01:98:c2:8d:34:46:76:97:40:f3:4b:34:dc:de:4b:
         92:11:15:c9:45:90:4c:84:1a:45:95:bd:b1:f0:69:9f:cc:b6:
         e2:20:22:ca:8c:02:09:53:10:a7:5b:de:87:49:38:2c:42:f2:
         8b:f2:ea:f7:de:f1:19:0d:ce:77:67:bf:80:65:c4:5e:c7:02:
         d4:a0:04:ed:ad:7a:0c:86:66:d3:1e:54:a3:0b:a6:df:7b:53:
         64:9c:1d:d4:f4:20:3a:cc:d1:40:6a:c1:a8:0b:29:29:44:ef:
         6a:4c:eb:8c:36:db:d2:2d:60:5b:ca:ba:04:6e:26:01:09:ca:
         54:49:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:26:51 2025 by rpki-client