Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e35382e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          6dPEPeic1kfmlaIcDx7EJeFPR5WD/A6n40vRcWajASc=
Subject key identifier:   FA:2A:1B:CF:E3:90:99:4E:4F:91:91:E0:2B:54:71:C0:30:87:F2:D7
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       2281CF9BAA9636A142552A4DD40DF2FAA5FD4FC3
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:07:01 +0000
ROA not before:           Tue 05 Mar 2024 18:02:01 +0000
ROA not after:            Tue 04 Mar 2025 18:07:01 +0000
asID:                     12127
IP address blocks:        190.57.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:81:cf:9b:aa:96:36:a1:42:55:2a:4d:d4:0d:f2:fa:a5:fd:4f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:01 2024 GMT
            Not After : Mar  4 18:07:01 2025 GMT
        Subject: CN=FA2A1BCFE390994E4F9191E02B5471C03087F2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:52:f7:92:3f:df:69:0d:82:8b:22:cd:82:
                    73:ff:3b:f3:5b:65:38:28:0a:d3:6d:31:7e:88:3b:
                    4d:d5:dc:30:3f:b4:db:1f:1b:ff:9c:c4:99:81:41:
                    7d:87:d7:8f:8e:b5:48:b2:42:91:49:32:97:7f:a8:
                    14:5e:80:91:c4:29:1b:56:d1:07:0a:cf:c7:8e:2e:
                    7f:eb:fb:45:6e:7b:70:20:da:fb:fe:04:f4:89:13:
                    4c:c9:70:06:19:2b:c5:f4:b3:13:a1:7c:80:7c:7a:
                    fb:22:d5:dc:de:dc:0f:d1:7d:3a:86:81:5a:6c:0b:
                    ae:ff:e0:b6:c0:82:6f:65:dd:ce:d0:65:47:cf:f9:
                    2d:45:a2:01:6d:4b:63:7e:0c:cd:cb:e0:48:93:2f:
                    f7:45:ee:bd:54:bb:f2:ec:fe:43:f2:3e:27:be:88:
                    fb:46:a0:6f:b8:f2:ef:47:98:cf:9b:0a:63:e1:2a:
                    35:ba:fd:25:67:c5:06:79:23:82:f0:27:46:cd:9a:
                    8e:bf:09:5c:61:f4:34:a4:84:0b:33:a9:be:2d:a3:
                    d1:df:ed:7b:43:68:ac:6b:4d:cf:f0:7c:fa:22:54:
                    bc:3d:ec:71:ca:94:3d:66:f4:32:b4:da:87:fa:41:
                    5c:f5:0b:bf:b6:99:d2:0e:61:57:69:33:d0:ab:26:
                    a4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2A:1B:CF:E3:90:99:4E:4F:91:91:E0:2B:54:71:C0:30:87:F2:D7
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:68:b4:66:bc:4a:81:28:ee:44:93:ac:9f:27:15:df:c5:
         60:0e:6b:f3:ad:08:ca:bd:dc:57:a5:e3:11:7c:d3:42:5a:4e:
         5c:e4:10:ee:55:4a:98:e5:3b:f3:52:31:30:e4:3a:d8:58:14:
         de:51:87:f8:80:49:fc:f4:35:e1:c8:69:26:99:a1:a9:5b:d1:
         29:9f:5d:9d:5f:0e:9f:de:0f:de:1b:04:0c:ac:dd:5a:1d:df:
         f3:6b:dd:a8:a4:9d:1d:45:be:22:f4:52:47:60:77:cb:9c:fc:
         5b:48:d1:f6:a1:8b:f4:9f:6f:54:3a:c9:ae:51:34:1b:5a:3c:
         98:d5:f9:24:ce:a0:fb:d0:59:52:ce:ce:b6:f2:d3:ed:bb:d5:
         83:37:76:9f:ec:99:e4:60:5d:15:ce:6b:42:75:54:c4:d4:b5:
         ab:73:6d:96:cb:27:9f:7f:ad:e4:60:2a:f6:7c:49:37:f7:7b:
         3a:c1:2c:6d:03:5b:39:47:fb:1d:c5:94:ae:a0:8b:79:7d:1b:
         71:42:54:c9:b8:bf:48:9d:15:81:36:7d:38:e5:59:3a:ce:b1:
         56:27:c3:e5:ea:db:4c:d8:1a:45:99:af:bd:e4:3c:88:84:e2:
         f0:21:fb:f5:9a:52:d5:16:c0:c5:aa:33:89:3d:ec:60:2a:32:
         99:46:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org