Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e35382e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          nYAF5E5xutvyetf4yBULnoV4GKvl5Sj9l+NPoV3JqVs=
Subject key identifier:   F2:21:10:AA:36:21:F6:5B:52:7F:DD:ED:85:BF:0F:B8:0F:DF:77:8C
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       653080FEEA9ADDD84C1CB8BA24EAE1A0876A6351
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:57 +0000
ROA not before:           Tue 05 Mar 2024 18:01:57 +0000
ROA not after:            Tue 04 Mar 2025 18:06:57 +0000
asID:                     263783
IP address blocks:        190.57.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:30:80:fe:ea:9a:dd:d8:4c:1c:b8:ba:24:ea:e1:a0:87:6a:63:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:57 2024 GMT
            Not After : Mar  4 18:06:57 2025 GMT
        Subject: CN=F22110AA3621F65B527FDDED85BF0FB80FDF778C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:dc:0f:95:58:39:47:70:86:7e:b3:04:b4:
                    af:a9:30:9e:05:96:c2:88:00:cc:7a:a9:06:25:83:
                    3c:8d:7b:79:bd:c6:f0:9b:bb:f9:58:8d:3d:2a:34:
                    0b:6f:5a:48:03:cf:76:31:35:ff:35:da:e2:0c:cf:
                    7e:f1:f9:b8:3b:b8:7f:11:1f:4e:f7:eb:38:d0:dc:
                    55:c2:42:94:2b:a9:8d:29:97:0a:ea:42:14:83:93:
                    50:d7:ba:1a:47:fd:24:1b:e1:6c:34:32:09:2a:91:
                    b6:e3:5b:17:13:8c:6e:89:0d:9f:61:54:d9:0f:da:
                    68:75:15:0a:36:dd:ed:9b:10:1a:e1:f3:fa:50:fd:
                    22:8f:d7:d4:2c:ae:7b:b9:6f:88:bc:10:c9:92:d7:
                    17:ca:bd:49:8b:c2:5f:ea:b9:85:b9:fb:9b:25:c9:
                    17:d2:c8:8e:11:b0:31:fb:27:76:2e:4e:ad:5c:2b:
                    b2:18:83:17:87:e1:a9:c6:e3:b6:8a:f6:77:4d:c0:
                    d9:4e:61:db:cf:af:7e:3f:eb:01:11:7f:e4:ad:fc:
                    86:2a:11:5d:00:6c:4e:4e:2e:bc:56:af:e9:bf:91:
                    cc:cb:ed:fa:f8:c0:f3:c5:87:49:40:58:ca:0d:e9:
                    7a:88:44:d4:55:21:69:1d:cb:c4:55:86:3d:d9:d2:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:10:AA:36:21:F6:5B:52:7F:DD:ED:85:BF:0F:B8:0F:DF:77:8C
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:5a:0d:c1:09:fc:18:02:fb:d7:d9:22:73:66:26:41:8a:
         2b:45:04:46:c0:6b:4a:db:4e:42:17:c6:3c:ae:7f:bc:97:79:
         86:3d:68:6c:51:f2:10:c7:e2:f8:6b:56:23:5c:8a:43:2c:87:
         bc:34:df:6e:9c:34:91:44:99:95:f4:6e:d4:b0:a1:98:55:63:
         72:83:87:b1:5e:9b:47:56:0b:d2:1a:3e:cc:ed:33:13:06:e5:
         bc:f8:01:fd:e2:1b:2c:a8:75:40:3b:9f:d6:ea:58:53:83:69:
         e7:b0:67:f2:0d:94:13:ae:9d:65:83:b0:e8:75:63:49:ac:91:
         de:51:04:69:28:9f:e7:a8:74:5a:43:d9:51:b9:e4:34:72:c0:
         57:06:70:e9:65:b1:00:58:52:5c:ab:ca:e2:80:bb:b1:61:11:
         11:0c:aa:fc:91:a4:5f:8a:39:ef:b8:87:7a:38:e4:e4:c2:84:
         7d:ce:45:04:ba:37:ee:9b:b4:63:02:28:76:cc:f8:54:cb:bf:
         8f:6b:9d:eb:54:5b:81:a7:fd:de:d6:aa:e0:a6:85:cf:72:50:
         c8:28:50:c0:94:6a:28:62:2b:da:42:0e:2f:f3:64:c0:04:e2:
         56:6a:4e:88:b8:7d:7c:bb:a5:36:5e:1c:d1:ec:0d:5d:e7:7b:
         32:5c:d8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org