Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35372e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e35372e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Gx7NualqrxMG/wfkyyOPTp/w2gFDPw6EQf15BSjXiAY=
Subject key identifier:   46:42:B7:1A:F0:6D:94:D5:B4:9E:31:E2:95:26:44:F6:35:40:95:A8
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       74D91BD148D8563E7DFD773889FBE3BE4173BF27
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35372e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:56 +0000
ROA not before:           Tue 05 Mar 2024 18:01:56 +0000
ROA not after:            Tue 04 Mar 2025 18:06:56 +0000
asID:                     263783
IP address blocks:        190.57.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d9:1b:d1:48:d8:56:3e:7d:fd:77:38:89:fb:e3:be:41:73:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:56 2024 GMT
            Not After : Mar  4 18:06:56 2025 GMT
        Subject: CN=4642B71AF06D94D5B49E31E2952644F6354095A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:f3:97:e3:bc:66:59:8a:a8:8d:e9:d7:dd:
                    b5:b7:ec:18:92:94:31:7f:bd:1e:c2:7e:cc:a8:8f:
                    72:25:5d:90:63:89:12:67:2b:92:6d:71:ab:13:f2:
                    ea:fc:08:67:39:72:f3:70:07:f5:54:af:ca:d2:40:
                    2b:c8:3f:81:c5:02:e5:46:01:81:37:da:24:7c:f6:
                    09:0e:25:e9:34:52:d9:bb:43:bb:86:e2:e4:94:42:
                    41:60:15:cf:bb:28:11:80:03:ee:66:9d:3d:b5:68:
                    8d:66:d3:25:4c:a3:ac:6d:02:49:c0:54:3a:0b:f8:
                    ee:02:b4:1f:b9:b0:64:1a:cf:93:35:d3:9d:c6:c0:
                    17:68:62:cd:69:c0:0f:b3:84:36:95:c6:56:1d:1e:
                    ff:7e:d4:4b:a7:aa:bc:3a:93:a9:b0:8d:5f:3d:c2:
                    02:10:7e:c0:f9:80:f6:3f:9c:57:40:42:05:1c:90:
                    8e:75:28:78:09:d6:6a:b3:37:a6:a1:43:6b:37:8d:
                    11:24:6d:fa:5e:99:fc:91:28:4b:94:61:36:47:6e:
                    e9:30:9f:87:87:04:32:61:ab:70:ee:2b:16:05:46:
                    6b:01:52:28:98:63:37:66:f3:89:7b:50:03:44:3d:
                    ee:1a:88:eb:7b:8f:c4:04:25:95:84:c6:b6:bb:ca:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:42:B7:1A:F0:6D:94:D5:B4:9E:31:E2:95:26:44:F6:35:40:95:A8
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35372e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:d3:dd:8f:dd:89:dd:62:97:65:36:b1:1c:af:a4:52:f2:7d:
         a8:76:c4:de:d1:bb:2e:b2:6b:de:ad:4e:24:e2:4a:39:f4:9e:
         b7:33:86:a4:9b:f0:0c:59:68:52:3e:2e:40:75:3b:42:ee:c7:
         c8:fa:7f:31:35:e2:19:a2:e2:b6:78:04:d1:8e:c9:19:3f:15:
         e6:6c:39:75:ab:d7:19:c3:29:85:c6:99:16:ab:12:14:0c:cd:
         cc:0f:43:d8:09:3c:05:62:6b:20:3e:15:f2:a9:e4:ff:97:d7:
         e8:e4:67:6a:78:fa:f9:31:51:3f:76:01:88:e9:25:7a:03:f3:
         51:81:76:6d:4e:c4:a1:26:44:38:4b:b6:b2:45:3f:b3:63:16:
         8d:b4:36:a0:30:55:f3:17:2c:4b:26:f0:0d:5a:f3:15:33:22:
         71:31:4f:37:b9:db:f0:b4:e4:36:bc:b0:f9:f5:68:10:19:03:
         9b:c5:16:c3:12:83:af:67:a5:b6:45:fd:32:34:fb:43:41:9b:
         f5:fc:32:1d:90:55:34:b4:44:fe:3c:d3:a7:9d:ef:7f:b9:7b:
         ee:52:e4:67:b8:8d:55:b2:bd:ac:6f:3c:e5:b9:20:89:2b:20:
         a9:9c:9f:78:c4:8c:19:c9:51:ca:69:a5:15:44:76:bb:e3:21:
         77:0a:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org