Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e362e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e362e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          YB/9ZwmmwV8GeTkwpsOgrZNbuzfYyCPb3VdYDs/QPa4=
Subject key identifier:   45:F0:34:AA:C0:6E:F6:9D:74:D6:DB:F2:C0:C0:59:0B:F0:97:8D:AD
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       69815774DF1FB832F59B299880E2C91CF9253853
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e362e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:58 +0000
ROA not before:           Tue 05 Mar 2024 18:01:58 +0000
ROA not after:            Tue 04 Mar 2025 18:06:58 +0000
asID:                     263783
IP address blocks:        190.57.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:81:57:74:df:1f:b8:32:f5:9b:29:98:80:e2:c9:1c:f9:25:38:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:58 2024 GMT
            Not After : Mar  4 18:06:58 2025 GMT
        Subject: CN=45F034AAC06EF69D74D6DBF2C0C0590BF0978DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:08:b8:b3:2b:59:f9:21:44:1d:10:98:2c:
                    7e:b9:b0:fe:2d:5d:87:cf:1d:6c:f1:39:11:2d:d8:
                    c3:b4:0d:ed:1e:a7:d8:f9:d3:14:bd:11:a8:7f:22:
                    63:64:a9:5f:46:60:38:8f:85:c5:3b:1d:c1:03:76:
                    dd:31:f3:90:aa:22:ea:87:60:1c:5c:8e:ba:8a:64:
                    85:ee:5e:6d:19:f4:c1:e1:8b:86:60:da:4f:a5:72:
                    91:54:33:cb:f4:3e:94:1e:84:de:56:d9:d6:f0:10:
                    3f:11:9d:e7:be:45:62:a2:93:70:57:ce:d4:68:dd:
                    0f:c7:59:7d:29:c3:3a:37:b6:0d:d2:5e:52:28:12:
                    23:fa:59:52:d8:f3:e1:58:ee:c1:28:c7:6f:20:f8:
                    6e:94:94:99:e1:d3:7b:e8:ca:60:fc:91:29:5b:e6:
                    99:67:ee:dd:f4:68:15:94:5e:ae:59:4f:a5:97:a6:
                    45:47:9f:8e:6b:d1:99:c1:34:89:c5:e6:7f:06:56:
                    52:68:d6:52:c1:4b:63:2a:3a:d8:76:d5:82:64:36:
                    10:d5:7e:41:33:2b:6f:56:d4:80:65:f8:04:c3:b3:
                    98:d7:eb:e3:42:53:53:3a:bf:57:3d:e4:e2:b5:8e:
                    7e:33:15:1c:39:fe:97:5c:15:5e:c0:d3:6e:27:a5:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F0:34:AA:C0:6E:F6:9D:74:D6:DB:F2:C0:C0:59:0B:F0:97:8D:AD
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e362e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:37:d4:69:f9:ec:1b:9d:4c:91:46:41:d4:95:e0:42:9a:52:
         49:db:a2:79:4c:eb:52:bd:5e:4e:bc:9d:d8:ac:dd:a4:0c:38:
         ff:eb:89:80:37:c9:71:17:66:a5:fc:a7:aa:f0:31:b0:c8:96:
         5c:30:7c:48:1a:60:3d:dd:6b:3e:7b:4d:75:32:c2:0b:3b:6a:
         ae:21:e8:e5:3c:cf:fa:81:5f:a7:52:56:d8:b6:a0:78:79:1d:
         70:6c:c1:91:da:b5:12:ea:78:fc:0c:cf:db:d5:6a:24:07:9f:
         fd:a1:68:07:36:9f:c7:34:b7:ae:3d:a3:28:a2:76:47:ef:b1:
         f0:56:32:22:0e:53:31:e2:0f:14:2e:be:3e:0c:b7:cf:5b:1f:
         f9:37:40:bc:32:8a:62:e9:98:0c:69:d2:bb:a4:29:9a:3d:86:
         48:cf:79:c1:9f:b6:8b:01:58:32:1c:7b:b6:c6:0c:41:b4:b7:
         3b:37:e2:c7:9c:f1:96:19:22:62:af:9b:a5:2f:84:55:37:e2:
         b9:7c:ca:b4:0b:78:cb:17:f2:31:54:36:45:41:65:bc:a2:39:
         67:8e:97:34:3d:10:ae:5a:cc:85:55:f4:74:02:da:e8:dc:07:
         51:e0:f3:e6:f9:ec:8d:77:f2:18:4d:8a:0c:1d:bb:40:f5:8d:
         0b:ca:d1:d2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUaYFXdN8fuDL1mymYgOLJHPklOFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNDAzMDUxODAxNThaFw0yNTAzMDQxODA2NThaMDMxMTAvBgNV
BAMTKDQ1RjAzNEFBQzA2RUY2OUQ3NEQ2REJGMkMwQzA1OTBCRjA5NzhEQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwegi4sytZ+SFEHRCYLH65sP4t
XYfPHWzxOREt2MO0De0ep9j50xS9Eah/ImNkqV9GYDiPhcU7HcEDdt0x85CqIuqH
YBxcjrqKZIXuXm0Z9MHhi4Zg2k+lcpFUM8v0PpQehN5W2dbwED8Rnee+RWKik3BX
ztRo3Q/HWX0pwzo3tg3SXlIoEiP6WVLY8+FY7sEox28g+G6UlJnh03voymD8kSlb
5pln7t30aBWUXq5ZT6WXpkVHn45r0ZnBNInF5n8GVlJo1lLBS2MqOth21YJkNhDV
fkEzK29W1IBl+ATDs5jX6+NCU1M6v1c95OK1jn4zFRw5/pdcFV7A024npaKHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQURfA0qsBu9p101tvywMBZC/CXja0wHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+OQYwDQYJ
KoZIhvcNAQELBQADggEBAFM31Gn57BudTJFGQdSV4EKaUknbonlM61K9Xk68ndis
3aQMOP/riYA3yXEXZqX8p6rwMbDIllwwfEgaYD3daz57TXUywgs7aq4h6OU8z/qB
X6dSVti2oHh5HXBswZHatRLqePwMz9vVaiQHn/2haAc2n8c0t649oyiidkfvsfBW
MiIOUzHiDxQuvj4Mt89bH/k3QLwyimLpmAxp0rukKZo9hkjPecGftosBWDIce7bG
DEG0tzs34sec8ZYZImKvm6UvhFU34rl8yrQLeMsX8jFUNkVBZbyiOWeOlzQ9EK5a
zIVV9HQC2ujcB1Hg8+b57I138hhNigwdu0D1jQvK0dI=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org