Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e342e302f32332d3234203d3e203132313237.roa
File:                     3139302e35372e342e302f32332d3234203d3e203132313237.roa (raw, json)
Hash identifier:          JXLhsimukdc8lghzTUrxoHMBH3ugj/+I2UHQR0aJ6G8=
Subject key identifier:   AA:87:41:D0:D8:5D:08:D5:42:03:4F:F7:AA:25:B7:14:72:BB:1B:2A
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       6C14845951E02FC2D0D0C4162ADB208D4D4D1AEF
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e342e302f32332d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:28 +0000
ROA not before:           Tue 04 Feb 2025 18:46:28 +0000
ROA not after:            Tue 03 Feb 2026 18:51:28 +0000
asID:                     12127
IP address blocks:        190.57.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:14:84:59:51:e0:2f:c2:d0:d0:c4:16:2a:db:20:8d:4d:4d:1a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:28 2025 GMT
            Not After : Feb  3 18:51:28 2026 GMT
        Subject: CN=AA8741D0D85D08D542034FF7AA25B71472BB1B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:f4:ec:62:ae:cd:7e:77:5f:be:71:f5:f0:
                    06:09:c8:a8:17:e6:a5:bd:8b:31:c8:6e:aa:75:88:
                    00:a6:d6:7c:52:99:32:e7:51:5b:7a:4b:d3:37:4b:
                    af:33:cc:6a:79:b0:2c:cf:ce:77:99:3b:5f:0b:0c:
                    81:28:8d:6c:8d:31:60:19:42:50:7b:92:ab:89:20:
                    04:5d:b9:3c:84:4d:82:dd:18:40:3b:c6:fb:a5:8e:
                    ba:c6:a6:cd:75:bd:b9:a0:ec:f0:27:ce:7f:fc:2a:
                    15:cb:00:f6:3e:8a:4b:e3:19:17:76:97:56:e3:47:
                    b8:27:97:1a:bb:62:19:09:c3:fd:0e:e6:f0:80:c9:
                    b9:09:01:91:5b:00:f0:bd:d7:62:ed:2e:ee:c7:ea:
                    86:90:af:52:12:d1:55:8d:49:27:10:ae:48:8b:92:
                    d1:18:0e:41:bf:86:55:74:84:81:a7:9c:67:de:66:
                    8a:88:a6:7c:b6:74:56:e6:ad:1e:2f:f1:f4:14:25:
                    10:b5:22:24:fe:fd:e4:88:da:7f:ed:c1:66:f9:ba:
                    2d:ef:c8:a5:10:c5:bc:80:21:ac:20:54:65:e7:44:
                    c1:25:b4:f8:53:27:25:8b:d3:45:55:2d:1d:42:5d:
                    21:ba:7f:3c:59:c8:22:1b:06:3d:63:8f:41:2e:29:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:87:41:D0:D8:5D:08:D5:42:03:4F:F7:AA:25:B7:14:72:BB:1B:2A
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e342e302f32332d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:a6:65:54:85:f5:24:4e:e1:38:af:16:78:15:91:f4:64:
         00:a8:5b:27:cb:84:78:9c:6c:fa:0d:54:b1:ce:cd:a1:90:b7:
         a2:93:4b:0e:c5:83:c7:4b:83:4f:8e:b0:24:aa:ac:42:eb:5c:
         81:5f:ef:20:1f:84:84:94:67:77:a3:7b:1f:c4:9d:02:b0:8e:
         2f:f4:ad:c0:c6:49:31:f4:b0:14:a6:af:f2:8d:22:a2:72:3e:
         2f:69:76:d7:ad:16:1b:bf:f0:c5:39:de:93:86:49:29:3b:b1:
         76:3b:40:2a:90:8a:13:99:1f:4e:91:50:65:88:7a:da:e9:12:
         3c:df:01:0e:75:bf:b2:40:f5:7e:f6:d6:41:17:54:ff:03:dc:
         85:f0:5d:93:c9:ad:a8:e4:96:ae:96:e5:e5:38:d9:3a:fe:54:
         b6:00:6b:38:94:d5:83:b6:0d:1d:fc:4c:84:49:13:6a:1d:6a:
         b0:2f:fb:9e:e2:b9:98:ff:93:51:0b:a8:fb:60:6a:da:5b:5b:
         f8:47:cf:ee:ae:4e:0d:7c:61:52:83:90:59:03:79:7c:e3:75:
         78:94:49:83:a0:35:09:7e:78:23:ec:0d:ca:41:26:78:fe:8d:
         da:d6:32:3d:10:3c:fd:8d:85:62:c9:81:e7:1b:08:ad:ae:2f:
         f5:27:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:39 2025 by rpki-client