Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33312e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e33312e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          U9XrWeS1mcsUCLCaP0Qh52h/8b2MzPj14jt9hmsx+qo=
Subject key identifier:   1A:CA:9C:D4:EC:A5:1D:63:1B:E1:13:1D:8E:02:A5:8A:B5:6A:88:0D
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       18F8C2301B2E2DFBFF27706573B9A88F27197969
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33312e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:54 +0000
ROA not before:           Tue 05 Mar 2024 18:01:54 +0000
ROA not after:            Tue 04 Mar 2025 18:06:54 +0000
asID:                     263783
IP address blocks:        190.57.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f8:c2:30:1b:2e:2d:fb:ff:27:70:65:73:b9:a8:8f:27:19:79:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:54 2024 GMT
            Not After : Mar  4 18:06:54 2025 GMT
        Subject: CN=1ACA9CD4ECA51D631BE1131D8E02A58AB56A880D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0d:5c:b2:4a:34:16:2d:ab:82:5d:09:98:bb:
                    48:9b:e6:76:89:23:2d:d2:7d:14:83:57:3c:2b:7d:
                    7a:5e:f2:56:9d:43:5f:ca:71:b0:de:d9:d7:5b:21:
                    80:a5:dc:bc:f8:88:d8:78:90:18:d6:81:cf:a2:24:
                    2f:a4:ab:22:fb:08:2f:ea:cd:85:f3:ad:6a:4c:d6:
                    23:9c:23:0a:39:0f:56:8f:a0:f1:a4:12:1b:c1:70:
                    21:9e:e9:95:f3:b3:78:11:e5:e3:94:46:28:79:57:
                    c5:b2:77:b0:9d:8b:7a:c7:82:cc:1f:34:28:1a:3e:
                    0c:9e:af:37:29:4a:01:8e:9e:0d:fd:aa:d4:68:2b:
                    04:82:4c:69:ac:3a:d5:d8:51:97:c7:75:2c:a8:8b:
                    62:66:d0:52:28:a7:b7:8a:3a:f3:79:69:ef:50:c8:
                    7c:f4:b6:b7:e6:31:7a:5a:b9:92:12:5b:7c:9d:1b:
                    22:85:e1:13:6a:ec:ae:86:de:3d:df:c6:31:e7:2f:
                    7c:e0:43:34:19:02:69:97:de:3e:62:63:36:62:5f:
                    a5:4c:76:61:96:1a:b5:58:07:dc:59:a7:8c:10:11:
                    6a:97:f7:94:73:74:42:15:e3:bc:9a:2c:cd:a8:66:
                    53:52:1f:3d:c8:d2:3a:12:43:ca:18:7c:bd:f3:90:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CA:9C:D4:EC:A5:1D:63:1B:E1:13:1D:8E:02:A5:8A:B5:6A:88:0D
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33312e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:df:b4:5a:94:22:4e:27:5f:ce:a8:4e:87:df:7f:a0:32:0b:
         3c:54:a0:cc:3c:53:be:f0:60:2d:97:94:fc:71:69:92:c2:2d:
         d1:f1:32:44:a6:aa:3b:1f:40:25:f9:ea:1b:48:62:99:ec:04:
         eb:9f:4c:c1:76:96:68:ec:86:a5:c0:16:ab:48:2a:2d:fa:bd:
         d6:02:f4:a3:2e:33:6e:c4:24:5a:3c:bd:d2:49:2c:51:6e:8d:
         28:bd:ba:d2:f2:0a:7b:d3:9e:c7:b5:8c:e0:d6:fa:8f:81:7b:
         94:ee:4f:47:17:a7:f1:c6:60:3f:35:f8:36:a6:99:5d:c4:8f:
         f1:c5:59:c1:42:9d:af:5a:43:80:1e:46:05:80:9d:33:a4:52:
         71:47:c6:d2:0c:d8:63:b6:db:58:1b:3d:61:0a:22:8c:e4:6b:
         8b:11:f8:3e:38:46:6d:7b:55:8b:02:72:c8:77:1b:83:97:62:
         a3:da:99:2b:62:76:30:5d:d3:e4:2d:ff:51:e6:41:81:a2:6a:
         42:98:57:56:47:95:ae:72:79:98:62:3f:f4:53:a3:66:1a:87:
         57:45:1c:93:4b:38:80:e9:76:17:30:d5:81:7b:f4:68:4d:af:
         94:2b:bf:be:1c:75:04:1a:9b:53:41:48:56:23:a6:96:6c:30:
         d0:8f:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:46:22 2024 by rpki-client on console-fra.rpki-client.org