Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e35392e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Lwn1y3PPtoM6vGDb/Knuw9enct78wcdse2DjGbz+r5o=
Subject key identifier:   C5:3F:4A:61:FF:F0:D9:D3:3E:43:84:DA:6B:5C:A2:C7:E0:E8:17:B3
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       1D34F8F3931BABCB3321162F0CA19760EB59B88A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:25 +0000
ROA not before:           Tue 04 Feb 2025 18:46:25 +0000
ROA not after:            Tue 03 Feb 2026 18:51:25 +0000
asID:                     263783
IP address blocks:        190.57.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:34:f8:f3:93:1b:ab:cb:33:21:16:2f:0c:a1:97:60:eb:59:b8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:25 2025 GMT
            Not After : Feb  3 18:51:25 2026 GMT
        Subject: CN=C53F4A61FFF0D9D33E4384DA6B5CA2C7E0E817B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:4e:2b:7d:54:f1:fa:f0:a0:c2:b7:0a:c3:
                    11:45:bd:d4:4d:0c:28:9f:43:8b:32:49:e0:05:53:
                    d2:72:03:15:08:3e:b9:71:76:7d:85:a5:d1:df:93:
                    e4:d4:eb:7c:ed:3f:a4:93:21:fa:84:3d:d2:69:de:
                    25:c4:0c:9e:93:e1:43:7c:d4:ff:98:db:47:37:91:
                    61:99:04:12:2c:6c:9f:ed:35:3f:5a:ee:e0:2a:fa:
                    1e:98:50:44:d3:aa:73:0c:ff:36:48:ce:2a:22:5a:
                    0d:fd:ee:81:93:f0:45:09:bf:a3:c9:06:0e:fa:2f:
                    ee:5c:03:dd:03:c8:f7:8d:00:66:39:9f:22:5e:c4:
                    c9:fc:e5:0c:1d:f2:95:2e:23:ab:fd:ba:de:77:c2:
                    0c:3e:dc:6e:15:9e:48:1b:af:59:60:23:b4:ee:63:
                    1d:3b:1d:12:37:db:43:5e:e6:77:5c:06:ed:66:ce:
                    eb:35:16:f0:8d:2c:f2:86:17:05:89:24:13:c9:89:
                    43:69:9d:f6:d1:3a:25:20:80:bd:51:b7:88:7f:45:
                    49:dc:80:ce:a9:6c:07:b2:55:31:74:a2:8e:1b:3e:
                    5d:88:d0:af:51:28:2a:7b:4c:80:b0:6a:4b:59:59:
                    ac:36:be:18:73:71:80:ea:ab:73:98:ed:ca:ff:59:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:4A:61:FF:F0:D9:D3:3E:43:84:DA:6B:5C:A2:C7:E0:E8:17:B3
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:46:46:0b:e0:b7:d2:04:c9:1d:f0:14:95:f3:34:e1:58:76:
         d1:44:fd:a5:67:ac:9d:9d:6c:28:8e:2f:67:57:98:d7:28:32:
         19:4f:a7:74:93:22:22:cd:3b:1d:f9:cd:69:f3:6e:13:09:70:
         e6:90:ee:0d:2a:73:04:3e:82:19:e4:51:24:c2:4a:d7:61:ec:
         e7:25:86:54:26:be:20:fb:33:19:d3:24:00:b2:e1:a8:0e:bd:
         63:4e:d7:6e:c3:52:d2:1c:33:fe:e5:2b:9c:35:ed:17:21:e8:
         54:86:a2:55:89:14:f9:70:24:fa:9f:95:10:e1:6d:73:d0:c4:
         7f:98:fa:67:bf:75:7b:44:2c:36:72:52:1e:15:ce:71:63:f7:
         3c:2a:b9:82:17:09:01:f3:9c:3a:8c:e6:c7:dd:30:16:a3:67:
         72:da:f0:68:3f:60:d0:f8:f2:fd:d9:14:0c:eb:2b:85:ea:47:
         cc:0d:16:18:dd:2e:c9:1e:a2:76:6b:11:e9:ce:be:b4:d7:ee:
         1c:4c:b8:e3:e7:00:20:3e:f0:7b:81:14:09:fc:33:db:7b:99:
         da:fa:d9:5a:94:a8:5a:8b:57:10:4a:61:7d:63:74:dc:8a:0d:
         aa:86:01:bc:cc:26:8a:c0:8a:c4:16:da:b1:4a:3e:b1:5f:f9:
         7f:df:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:20 2025 by rpki-client