Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e35362e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          rRUxVY8Q6EtP22mq+RSNsQL1rjn8tIUu8IKnIoZphms=
Subject key identifier:   02:C6:C3:76:37:74:AE:CD:E6:6F:C6:16:76:80:86:20:0A:D3:A3:A9
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       03F6CE396F67C824D543E0CBBF9A0DD5A4AE0BAA
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:30 +0000
ROA not before:           Tue 04 Feb 2025 18:46:30 +0000
ROA not after:            Tue 03 Feb 2026 18:51:30 +0000
asID:                     263783
IP address blocks:        190.57.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f6:ce:39:6f:67:c8:24:d5:43:e0:cb:bf:9a:0d:d5:a4:ae:0b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:30 2025 GMT
            Not After : Feb  3 18:51:30 2026 GMT
        Subject: CN=02C6C3763774AECDE66FC616768086200AD3A3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:f3:81:4b:1b:e6:af:8e:0f:8d:58:07:ce:
                    e0:81:5a:07:fc:c8:02:23:01:98:a9:da:5d:2e:39:
                    1f:94:d4:3e:f8:3f:34:25:01:84:fa:23:aa:bc:5b:
                    4a:73:d2:9d:59:3f:3f:93:d0:20:ad:ba:f5:93:9a:
                    4a:ce:51:ec:63:2e:91:07:ee:8f:1c:a0:49:ad:2c:
                    b8:c4:5b:a0:db:ef:91:da:9d:8b:f6:d2:68:98:9c:
                    cb:fb:87:c2:fd:bf:4f:ee:a5:e3:66:39:4b:9c:09:
                    22:79:80:73:a3:0d:64:dd:ec:83:a7:bb:c5:ef:4f:
                    54:8f:33:07:62:dd:06:66:4f:aa:c1:8b:28:d2:7b:
                    8b:50:32:7e:a5:45:9a:2d:e2:18:36:e6:d0:86:31:
                    8c:cc:06:63:c1:4f:86:d6:b9:c5:1a:02:4b:04:be:
                    66:de:22:46:b6:95:2a:0d:45:37:77:81:95:d2:8d:
                    fb:aa:0c:fb:3c:fe:c4:39:e6:ab:e5:5e:96:95:6a:
                    f2:e2:09:43:33:ef:70:f7:e4:a7:dd:90:fb:1c:63:
                    5c:0f:a1:9d:3a:df:c3:9b:f4:10:44:8e:7a:06:c3:
                    df:fa:66:5f:91:48:41:bf:eb:c9:90:ed:51:80:31:
                    82:c5:eb:0a:cd:77:ad:e9:b2:4f:43:63:f2:0c:c2:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C6:C3:76:37:74:AE:CD:E6:6F:C6:16:76:80:86:20:0A:D3:A3:A9
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:41:6d:d8:ac:cf:2d:a8:7b:56:39:58:ef:35:f1:10:55:
         25:eb:15:2b:88:9e:cf:e7:9c:40:3f:34:20:0f:6e:f6:2c:19:
         5e:70:54:cd:f5:0f:f9:52:8b:b0:5e:b6:51:46:54:20:c9:49:
         a3:fd:1d:16:34:fa:8f:04:e4:cc:5c:19:0f:41:6c:c4:60:34:
         b4:26:fd:bd:d5:ee:6c:3c:9f:bf:6f:ee:d5:53:7c:8e:f4:48:
         3f:b4:1c:15:9a:98:d2:ac:12:f6:0c:0f:0a:af:c3:f1:11:ba:
         a6:20:d2:36:c6:91:1d:37:73:f6:d9:24:d6:d2:6a:a0:22:a3:
         24:27:a5:65:b0:2d:45:9f:a1:ae:8f:29:99:68:f6:67:97:4a:
         24:d6:aa:7a:d2:6f:31:c5:46:7d:84:08:f0:d3:28:cf:42:11:
         6b:fa:02:11:ff:13:f4:28:da:6d:4b:30:0e:90:8d:8f:5a:8b:
         d6:44:70:42:5a:fe:c5:66:bf:fd:cc:9f:71:0e:3a:8f:1c:18:
         30:29:e2:be:fe:76:39:63:08:30:00:05:a7:79:3d:b7:b5:5b:
         3b:ee:f1:28:f0:66:f4:54:1f:21:6e:d9:d4:ac:b7:fa:94:25:
         24:7b:ba:6d:8f:ed:69:21:a4:55:3c:08:5d:10:f4:3d:11:19:
         0d:82:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:13 2025 by rpki-client