Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32312d3231203d3e203132313237.roa
File:                     3139302e35372e35362e302f32312d3231203d3e203132313237.roa (raw, json)
Hash identifier:          W6v3nzRdddxBaNwzVQ7cV5yj79TWWX4SJpMnUjkzKd4=
Subject key identifier:   08:D7:FA:E7:87:B5:33:25:E5:FD:E1:59:F5:F5:DE:AD:13:D7:7A:C5
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4895A7472DFBD64C5D0276B3F685BB1D9D4A282A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32312d3231203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:37 +0000
ROA not before:           Tue 04 Feb 2025 18:46:37 +0000
ROA not after:            Tue 03 Feb 2026 18:51:37 +0000
asID:                     12127
IP address blocks:        190.57.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:95:a7:47:2d:fb:d6:4c:5d:02:76:b3:f6:85:bb:1d:9d:4a:28:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:37 2025 GMT
            Not After : Feb  3 18:51:37 2026 GMT
        Subject: CN=08D7FAE787B53325E5FDE159F5F5DEAD13D77AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:93:12:71:58:28:5e:88:84:c9:a5:02:ea:
                    02:54:44:c9:15:87:65:16:22:49:13:22:76:d0:22:
                    d6:88:55:31:e3:35:14:7c:ac:5f:fb:d8:38:ed:00:
                    e4:b5:70:40:ad:62:66:72:9d:ee:e1:b1:f0:29:20:
                    9e:fc:5f:35:cd:e9:57:67:ad:54:67:ef:55:b3:ba:
                    e7:51:14:c2:28:b6:0d:e2:2a:57:81:cc:d3:52:15:
                    72:35:d5:72:a5:ca:b9:73:47:ab:ac:2c:94:a1:ea:
                    55:d7:02:33:24:dd:86:57:00:7f:6f:19:ac:ef:88:
                    a0:af:51:d2:45:64:29:49:37:c7:fe:be:f7:d7:07:
                    97:0d:dd:d8:2b:fe:f2:d2:fd:ce:18:28:81:b0:27:
                    36:fb:09:75:7f:43:f1:35:23:10:8d:29:94:08:00:
                    0e:d9:3c:85:78:aa:43:aa:9c:a0:78:56:f1:cd:6e:
                    c8:24:f2:f2:03:81:bb:8e:e3:be:6e:33:cd:b4:f4:
                    84:78:d9:c2:49:6e:23:08:63:41:0d:d8:37:a4:59:
                    63:87:fb:52:7a:7b:a8:a6:f2:d1:67:aa:38:b3:5d:
                    df:30:6a:1a:97:b5:17:87:69:3d:35:ca:da:cf:5f:
                    c3:eb:5a:d9:0a:fa:da:08:7a:71:18:f5:c1:d4:62:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D7:FA:E7:87:B5:33:25:E5:FD:E1:59:F5:F5:DE:AD:13:D7:7A:C5
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32312d3231203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:85:ac:eb:bd:b1:30:7b:b1:c9:d6:d7:7a:5e:2f:e6:ff:48:
         56:1f:b5:4b:3c:d0:70:bb:12:ca:83:3a:f6:41:79:87:bd:9b:
         4d:52:5c:86:52:8d:05:51:74:e7:b7:0e:da:9b:8b:af:65:4e:
         72:a6:59:e2:e1:05:ec:1b:4d:72:bb:e4:fb:1c:cc:ca:5d:06:
         7a:5f:1a:a0:f5:3c:a2:d3:21:4b:bb:8a:d3:64:d8:06:84:5b:
         0e:3c:be:78:f7:d3:1a:8a:00:57:bc:a2:60:73:0e:61:cf:fe:
         41:0d:47:c4:b1:9e:bc:15:9f:4a:03:c3:93:84:8a:2d:ab:7c:
         1d:80:40:b5:fd:8d:bb:64:5c:44:4e:72:8e:27:36:1a:56:79:
         c3:ea:64:9d:70:f7:01:a4:ac:40:1a:e1:3b:f3:58:4f:3f:a1:
         e0:8a:5b:2d:58:5c:24:a9:62:24:05:31:61:3a:9f:c3:f5:26:
         6a:62:b8:2d:2a:ab:f8:ca:af:24:84:71:21:9d:87:46:be:6d:
         b0:fc:a2:92:3f:20:47:c3:a4:a4:dc:68:93:de:d4:db:2a:9f:
         6d:3a:eb:d6:89:7c:11:eb:b6:5b:b2:9c:40:90:04:4b:ad:0f:
         19:c4:48:94:05:50:dd:54:35:65:9a:2a:1b:17:47:97:af:49:
         10:7e:11:72
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSJWnRy371kxdAnaz9oW7HZ1KKCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MzdaFw0yNjAyMDMxODUxMzdaMDMxMTAvBgNV
BAMTKDA4RDdGQUU3ODdCNTMzMjVFNUZERTE1OUY1RjVERUFEMTNENzdBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlJMScVgoXoiEyaUC6gJURMkV
h2UWIkkTInbQItaIVTHjNRR8rF/72DjtAOS1cECtYmZyne7hsfApIJ78XzXN6Vdn
rVRn71WzuudRFMIotg3iKleBzNNSFXI11XKlyrlzR6usLJSh6lXXAjMk3YZXAH9v
GazviKCvUdJFZClJN8f+vvfXB5cN3dgr/vLS/c4YKIGwJzb7CXV/Q/E1IxCNKZQI
AA7ZPIV4qkOqnKB4VvHNbsgk8vIDgbuO475uM8209IR42cJJbiMIY0EN2DekWWOH
+1J6e6im8tFnqjizXd8wahqXtReHaT01ytrPX8PrWtkK+toIenEY9cHUYj7bAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUCNf654e1MyXl/eFZ9fXerRPXesUwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzUzNjJlMzAy
ZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzIzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+OTgwDQYJ
KoZIhvcNAQELBQADggEBACmFrOu9sTB7scnW13peL+b/SFYftUs80HC7EsqDOvZB
eYe9m01SXIZSjQVRdOe3Dtqbi69lTnKmWeLhBewbTXK75PsczMpdBnpfGqD1PKLT
IUu7itNk2AaEWw48vnj30xqKAFe8omBzDmHP/kENR8SxnrwVn0oDw5OEii2rfB2A
QLX9jbtkXEROco4nNhpWecPqZJ1w9wGkrEAa4TvzWE8/oeCKWy1YXCSpYiQFMWE6
n8P1JmpiuC0qq/jKrySEcSGdh0a+bbD8opI/IEfDpKTcaJPe1Nsqn20669aJfBHr
tluynECQBEutDxnESJQFUN1UNWWaKhsXR5evSRB+EXI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:43 2025 by rpki-client