Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e362e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e362e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          kjiUDc9mREvVeB/V3h85y89TJ5Y2K87n+fR7Dfg8FZ4=
Subject key identifier:   D3:2A:B2:CE:13:10:26:CB:AC:75:0F:B7:8A:97:01:4A:DE:76:4B:44
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       6D1C4FF6B9B23CEA3D288A92F6C94E181B203F6A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e362e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:07:05 +0000
ROA not before:           Tue 05 Mar 2024 18:02:05 +0000
ROA not after:            Tue 04 Mar 2025 18:07:05 +0000
asID:                     12127
IP address blocks:        190.57.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1c:4f:f6:b9:b2:3c:ea:3d:28:8a:92:f6:c9:4e:18:1b:20:3f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:05 2024 GMT
            Not After : Mar  4 18:07:05 2025 GMT
        Subject: CN=D32AB2CE131026CBAC750FB78A97014ADE764B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:9c:70:df:fd:bb:f1:42:ec:97:75:18:90:
                    f2:54:e4:be:23:0d:1d:f2:1a:f9:b7:99:b3:58:d5:
                    fa:1e:ac:09:4b:16:9e:60:3e:13:b9:fd:ac:ee:d9:
                    39:70:ea:c8:1f:de:39:0b:60:3b:01:d5:78:6f:f8:
                    89:e9:8a:cf:1b:12:05:15:4f:88:90:17:42:6c:6d:
                    49:50:be:46:2b:b8:78:35:d8:a9:6c:17:2c:ae:51:
                    a3:b8:18:9c:b7:e5:1a:66:78:05:4c:60:2a:20:67:
                    25:30:ef:e4:42:90:bf:a3:e6:92:6a:68:68:b1:c7:
                    c3:17:a2:e1:af:03:a4:6b:11:b2:89:9d:f3:14:70:
                    a0:73:c4:e6:9a:8a:c1:e7:68:74:a9:ba:6f:77:9f:
                    0c:0f:90:f0:d3:70:ce:93:e8:f7:6b:a3:7d:14:fa:
                    0a:74:f2:09:70:e8:07:82:b9:0f:ee:3b:82:45:63:
                    56:80:a4:e1:09:ab:e8:29:24:18:71:54:cd:5b:c3:
                    2a:f5:fc:75:b1:d3:a1:97:51:c8:c0:46:39:f5:36:
                    5b:94:46:f3:40:98:0f:30:0c:d2:f5:a2:20:90:64:
                    26:0b:03:59:dd:e9:af:5d:66:e0:55:c0:9d:0d:ed:
                    73:e2:1a:da:99:cd:71:fe:96:9f:16:f9:fd:3e:8b:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2A:B2:CE:13:10:26:CB:AC:75:0F:B7:8A:97:01:4A:DE:76:4B:44
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e362e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:8e:aa:e2:e8:47:a8:60:20:26:d8:45:76:94:fd:3a:d2:c4:
         f7:b9:b4:67:50:b4:d1:c8:8d:f3:08:dd:4d:05:58:07:71:fd:
         22:6f:ba:c8:d0:99:64:02:6c:58:6c:fb:19:23:80:db:61:3e:
         42:4e:56:16:f2:84:6f:dd:ff:d8:58:4e:21:c6:b2:d1:e1:08:
         e6:33:93:00:f6:ed:ac:d8:61:13:f5:ed:bf:18:1d:41:a9:8d:
         ec:2a:04:9e:93:0f:72:30:23:21:f0:cc:5b:11:bf:b7:44:b9:
         2d:c5:10:17:34:cf:3e:2b:f7:43:e9:0c:ac:40:4b:32:72:98:
         de:bf:b2:74:7f:e6:a7:6d:36:ef:ab:a8:4b:89:98:31:ab:71:
         74:77:dd:e3:8d:14:06:49:45:4f:72:5a:54:01:4d:c1:f3:5b:
         f9:df:04:81:42:36:d4:9b:48:fa:b1:7e:05:12:3e:44:a2:3d:
         00:f1:ae:6c:4c:16:4b:93:fc:64:a7:cb:3b:52:23:88:79:84:
         d8:97:67:76:b7:58:2d:64:e3:c7:2c:5e:c9:41:68:4e:2b:78:
         97:0e:07:0f:b1:09:a0:8e:f6:d0:6f:75:38:b4:6e:64:5a:e4:
         c8:6e:4a:61:f1:a9:5c:2f:23:d3:6b:2f:cb:8f:82:8a:bc:90:
         a6:83:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:33 2024 by rpki-client on console-fra.rpki-client.org