Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e35392e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          /WzltTA2i8loofWN9EfQzIYghSMwtPBDwWv0L9Q4qIU=
Subject key identifier:   F0:6E:F1:D2:E5:C5:6D:02:92:68:51:50:4B:26:DB:69:4D:0A:4D:1A
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       77685CC671E1959DA00FE1880AD94E23A85F1CF8
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:53 +0000
ROA not before:           Tue 05 Mar 2024 18:01:53 +0000
ROA not after:            Tue 04 Mar 2025 18:06:53 +0000
asID:                     12127
IP address blocks:        190.57.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Jun 2024 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:68:5c:c6:71:e1:95:9d:a0:0f:e1:88:0a:d9:4e:23:a8:5f:1c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:53 2024 GMT
            Not After : Mar  4 18:06:53 2025 GMT
        Subject: CN=F06EF1D2E5C56D02926851504B26DB694D0A4D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:66:f8:51:6f:ee:51:a2:a5:bb:87:00:58:
                    7e:e8:92:8a:15:10:da:a8:38:61:8d:49:46:9f:3a:
                    e7:57:17:c2:33:f2:54:98:be:e4:6e:78:18:0e:d2:
                    9d:30:4f:59:17:f0:bd:95:0d:ea:53:8a:c6:50:8d:
                    a7:47:1d:77:90:5c:b2:b8:5e:56:9a:2d:3e:04:fb:
                    53:d2:d0:dc:4c:e3:0a:0e:33:f9:5d:8a:ca:2d:6c:
                    2b:1c:e1:25:e6:4a:f3:58:2b:cd:b7:96:34:99:51:
                    5c:6a:41:f1:2a:b4:e8:e3:c6:d9:b1:3a:a5:3b:fe:
                    e2:bc:57:d0:07:9a:31:c3:b6:c2:04:94:6b:5b:56:
                    35:c0:17:a6:96:97:e3:e4:49:10:d1:20:2f:4c:d5:
                    a9:70:c7:ce:4b:5e:05:9f:f8:9f:9d:f5:92:c0:7e:
                    bc:06:c6:40:39:7f:fa:35:79:a8:7d:4d:43:ec:3a:
                    6d:00:9c:af:c4:47:45:9f:14:e1:e5:2d:11:48:cb:
                    77:e0:ec:38:b4:84:09:01:2c:1b:ad:28:9d:c4:f1:
                    f3:b2:5b:c6:74:17:bf:70:a5:11:57:73:14:9e:bc:
                    fa:b1:e0:ed:7d:82:a7:23:27:b4:b0:06:eb:fc:c9:
                    63:ed:71:5f:f4:97:7e:c5:3b:21:7e:e3:71:02:0b:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:F1:D2:E5:C5:6D:02:92:68:51:50:4B:26:DB:69:4D:0A:4D:1A
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:53:40:55:ad:d5:17:8d:51:3f:65:8c:43:a2:11:4c:99:ac:
         4d:60:8e:86:2c:94:9b:0c:74:d0:21:45:14:d6:89:a7:be:09:
         30:d7:c6:78:a6:51:13:44:bb:3d:cd:d8:fb:02:7f:39:0d:05:
         8d:d9:58:25:f7:8e:de:9f:00:d7:00:e5:8a:36:5e:4c:7f:38:
         c6:f7:a9:80:82:da:5a:c2:b2:d9:8d:3d:1f:c2:68:96:40:25:
         6a:c7:ed:d3:80:b8:d0:3d:93:65:ac:e6:ea:8d:7a:1f:87:43:
         87:05:c0:a7:cf:25:da:27:e1:7a:f3:ed:3f:51:3f:06:de:fd:
         eb:89:c0:5f:c9:96:5b:a9:92:09:4f:2c:67:7e:74:27:88:8f:
         2a:bb:87:a4:ef:38:b2:e1:11:c1:2c:b7:ce:15:ac:d2:2c:fb:
         e5:18:60:1b:56:00:c4:bc:05:c6:e2:39:cb:0b:90:9c:a1:22:
         e7:1c:7c:d9:af:69:06:d6:89:3b:70:a7:18:1c:95:d1:1f:e5:
         79:4d:47:11:c2:c5:43:27:bd:66:0c:07:70:c0:c7:ce:8b:2b:
         aa:65:d8:0e:31:a0:a5:6a:84:de:6e:88:51:f5:0b:37:90:27:
         c5:5d:23:ba:c9:ca:2d:a0:e3:1b:9a:14:85:22:6d:ed:e3:8e:
         74:63:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:53:53 2024 by rpki-client on console-fra.rpki-client.org