Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33302e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e33302e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          BhRl5hvSIWvFJktY4wi844DS9POoC6Ef9UKSblAK7UM=
Subject key identifier:   19:6A:3F:BF:BF:13:6D:E5:2C:3D:D4:44:BE:5C:A6:86:8D:AC:AD:D2
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       665E7E8DC039E2CBEB82993FDE50103C9376E099
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33302e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:51 +0000
ROA not before:           Tue 05 Mar 2024 18:01:51 +0000
ROA not after:            Tue 04 Mar 2025 18:06:51 +0000
asID:                     263783
IP address blocks:        190.57.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:7e:8d:c0:39:e2:cb:eb:82:99:3f:de:50:10:3c:93:76:e0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:51 2024 GMT
            Not After : Mar  4 18:06:51 2025 GMT
        Subject: CN=196A3FBFBF136DE52C3DD444BE5CA6868DACADD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:fd:ab:e3:ca:c0:f2:01:bf:a1:3c:5f:3d:
                    9a:ce:5c:65:c3:c9:82:31:ae:8a:e0:af:a9:65:1c:
                    c7:cf:7a:d2:aa:a9:06:07:11:b6:a4:fd:90:1b:7b:
                    5c:f8:1e:bb:b6:82:18:28:b4:7f:68:7c:24:5c:e4:
                    19:2a:5b:aa:42:7d:de:7b:94:5c:fc:69:e9:ff:de:
                    13:6f:68:fa:7f:2f:a0:b8:33:09:28:39:15:ea:83:
                    48:0f:aa:62:00:94:ae:40:21:0b:53:3d:79:8d:d6:
                    13:ea:a7:ec:5e:f4:ca:bb:01:b9:64:12:48:38:f2:
                    97:15:25:f2:08:a6:b3:14:ff:05:d7:20:1f:66:6c:
                    c5:09:df:f2:84:0c:5f:99:f9:1b:d4:c5:d8:ea:d3:
                    8e:d1:9e:0a:e5:e0:25:56:43:97:e9:e1:a8:f7:cf:
                    f6:ad:87:a0:32:a3:13:71:e1:ee:24:a2:aa:9e:dd:
                    2b:c5:12:e3:98:1b:0a:1e:70:c4:70:a5:16:5f:7d:
                    bc:f9:34:35:93:46:dc:e3:93:6a:53:73:3d:fe:4b:
                    83:80:19:4e:f7:f0:20:4f:9f:5a:17:30:f3:de:d0:
                    4c:0f:83:c5:37:56:c3:32:95:40:53:e3:d9:b6:35:
                    38:d5:c1:9b:17:67:0f:8a:fb:c7:6b:35:cb:9f:dd:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6A:3F:BF:BF:13:6D:E5:2C:3D:D4:44:BE:5C:A6:86:8D:AC:AD:D2
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33302e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:fd:66:06:11:81:de:e2:66:64:b6:c4:34:d7:e7:92:5d:6e:
         d1:78:ff:ea:af:39:52:2b:9d:56:31:f5:10:f4:9c:9f:6b:7b:
         1e:2a:f3:60:43:1b:98:7c:98:1b:51:02:1d:53:89:09:d0:05:
         23:c6:0b:d9:1d:3e:0b:4f:9f:c4:86:36:6e:a3:fb:c4:9c:9d:
         f6:f0:1f:02:ce:3f:b0:56:59:19:14:79:d5:de:86:b7:a8:65:
         aa:1e:87:11:d2:62:57:d3:8e:01:8e:cd:a8:8f:95:8c:31:32:
         23:16:3f:e8:08:be:3b:42:88:ce:3e:13:b9:a6:80:ad:57:f5:
         fc:1c:47:a0:48:7c:d0:85:34:9b:25:aa:b2:f7:1c:b5:e8:d5:
         3a:7e:bb:ee:c2:9a:43:f4:da:dc:02:85:2c:f5:4b:df:22:8a:
         85:37:de:7e:44:ca:56:78:3e:b1:8d:93:82:6e:1e:ed:48:82:
         56:7d:31:fa:91:3f:d2:b5:20:ec:f2:23:e6:b3:44:38:0a:c1:
         73:28:44:0e:46:94:c9:b1:c7:5e:76:a4:de:68:bd:f7:a8:68:
         19:3e:f2:9e:e1:d4:8e:98:fc:4d:05:aa:31:64:e9:36:0e:c4:
         d8:38:97:c6:24:50:2b:60:12:d7:cb:65:c7:33:31:e5:f3:50:
         d5:3c:37:0b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZl5+jcA54svrgpk/3lAQPJN24JkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNDAzMDUxODAxNTFaFw0yNTAzMDQxODA2NTFaMDMxMTAvBgNV
BAMTKDE5NkEzRkJGQkYxMzZERTUyQzNERDQ0NEJFNUNBNjg2OERBQ0FERDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2P2r48rA8gG/oTxfPZrOXGXD
yYIxrorgr6llHMfPetKqqQYHEbak/ZAbe1z4Hru2ghgotH9ofCRc5BkqW6pCfd57
lFz8aen/3hNvaPp/L6C4MwkoORXqg0gPqmIAlK5AIQtTPXmN1hPqp+xe9Mq7Ablk
Ekg48pcVJfIIprMU/wXXIB9mbMUJ3/KEDF+Z+RvUxdjq047Rngrl4CVWQ5fp4aj3
z/ath6AyoxNx4e4koqqe3SvFEuOYGwoecMRwpRZffbz5NDWTRtzjk2pTcz3+S4OA
GU738CBPn1oXMPPe0EwPg8U3VsMylUBT49m2NTjVwZsXZw+K+8drNcuf3T/jAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGWo/v78TbeUsPdREvlymho2srdIwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzMzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL45HjAN
BgkqhkiG9w0BAQsFAAOCAQEAxP1mBhGB3uJmZLbENNfnkl1u0Xj/6q85UiudVjH1
EPScn2t7HirzYEMbmHyYG1ECHVOJCdAFI8YL2R0+C0+fxIY2bqP7xJyd9vAfAs4/
sFZZGRR51d6Gt6hlqh6HEdJiV9OOAY7NqI+VjDEyIxY/6Ai+O0KIzj4TuaaArVf1
/BxHoEh80IU0myWqsvcctejVOn677sKaQ/Ta3AKFLPVL3yKKhTfefkTKVng+sY2T
gm4e7UiCVn0x+pE/0rUg7PIj5rNEOArBcyhEDkaUybHHXnak3mi996hoGT7ynuHU
jpj8TQWqMWTpNg7E2DiXxiRQK2AS18tlxzMx5fNQ1Tw3Cw==
-----END CERTIFICATE-----
Generated at Tue May 7 21:35:37 2024 by rpki-client on console-ams.rpki-client.org