Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e35392e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          MXw3HUcAyFcPNjYcRdNm1EwzzxKOWb2ZwKS4uPYQXIo=
Subject key identifier:   42:36:B1:B9:13:F3:F0:73:72:87:33:B9:97:6F:C1:E4:78:6E:5B:C2
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       1C6348A07C4CD3B2CBEC122B0531EC5DBB6A8E46
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:40 +0000
ROA not before:           Tue 04 Feb 2025 18:46:40 +0000
ROA not after:            Tue 03 Feb 2026 18:51:40 +0000
asID:                     12127
IP address blocks:        190.57.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:48:a0:7c:4c:d3:b2:cb:ec:12:2b:05:31:ec:5d:bb:6a:8e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:40 2025 GMT
            Not After : Feb  3 18:51:40 2026 GMT
        Subject: CN=4236B1B913F3F073728733B9976FC1E4786E5BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:b3:dc:f6:74:31:73:36:2f:cb:68:be:59:
                    3c:18:c1:1c:a1:5f:69:ea:9a:f0:52:d3:ea:20:97:
                    42:78:c5:1c:48:7c:a5:a8:30:66:61:e1:15:4f:8e:
                    c2:38:56:bc:6a:87:d2:f8:dc:c6:9e:50:f6:75:99:
                    cd:f7:4b:0c:d2:d6:2c:fd:af:18:0f:ad:66:54:de:
                    32:08:67:68:b6:4e:36:10:a9:d1:fe:1e:a5:33:0c:
                    54:5a:54:49:c9:4c:7d:dc:7e:30:26:e8:f0:dc:6c:
                    08:a7:15:a0:b4:e5:ab:af:29:cf:7c:a4:e2:34:cd:
                    70:fa:7c:f2:a7:56:d2:f6:96:56:0d:2d:a1:01:4b:
                    79:be:8e:54:4f:42:d5:ef:b8:ac:1c:76:dd:3e:a1:
                    b9:8d:80:4c:a9:a6:01:58:68:27:d8:31:bf:49:78:
                    0f:5a:1d:93:20:61:89:cb:57:7c:b3:29:fa:06:16:
                    48:79:08:c3:da:bd:53:08:c8:96:f5:0e:f1:6c:6a:
                    45:49:13:66:55:b6:a8:54:ff:e9:0a:74:b2:74:df:
                    64:d4:92:3a:43:0a:8f:1c:b4:27:07:66:cf:86:bf:
                    8c:a1:3a:3a:72:6e:bb:f9:25:99:27:23:68:66:52:
                    cf:ba:ae:de:50:c3:aa:92:96:d3:6c:84:89:aa:e9:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:36:B1:B9:13:F3:F0:73:72:87:33:B9:97:6F:C1:E4:78:6E:5B:C2
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:9c:6d:86:11:c4:9b:57:f0:4d:1a:c0:2a:de:dd:09:73:
         d5:f3:c5:20:a8:f5:f8:43:54:16:f5:81:7e:30:cc:29:93:3d:
         ef:df:4d:75:75:72:79:7a:c1:98:76:24:e9:82:75:e7:59:2f:
         38:06:38:cb:e0:61:fe:dc:c2:d8:7c:d6:f2:a6:49:bb:ad:30:
         13:a0:3e:af:d2:ae:97:f8:95:20:46:24:18:35:59:88:60:70:
         3e:a6:d6:fa:c1:b8:2e:9d:fe:31:63:bb:13:3a:a5:01:53:08:
         ec:d7:9d:0e:55:90:f9:ed:94:3b:14:5f:73:1a:32:43:74:77:
         60:84:12:e7:12:f2:54:6d:46:51:98:1f:f9:3a:71:63:a7:6c:
         77:42:74:4d:f5:7d:3a:ce:aa:e9:62:0b:b6:94:85:55:77:c0:
         c3:6f:c7:f9:a9:40:bd:34:ce:9c:a2:88:74:d7:1f:4c:bc:7b:
         c5:9b:19:2b:87:2b:69:1d:b9:b9:b6:24:4e:f6:82:5c:a7:46:
         8f:a5:b1:fe:b6:3d:1b:8d:32:62:ca:7e:ee:d5:1c:7b:ef:2d:
         16:ee:c4:3e:14:e9:bd:ff:93:7c:ca:54:5e:50:84:d5:1e:9d:
         a8:33:ed:2b:e9:05:14:17:fe:ad:ff:1f:3c:65:43:86:1e:56:
         bb:ba:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:12 2025 by rpki-client