Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36302e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e36302e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          jqeiRnJZnHPDqYa2ptKmSjUx2gWwNKRPW1sZMVQOYgw=
Subject key identifier:   A6:C6:4B:45:1F:D0:22:24:27:B8:6C:90:94:56:6C:35:AB:F5:C8:A0
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       448808AEB940CDA3349C122AA5A5C71F6FCA8B03
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36302e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:46 +0000
ROA not before:           Tue 05 Mar 2024 18:01:46 +0000
ROA not after:            Tue 04 Mar 2025 18:06:46 +0000
asID:                     263783
IP address blocks:        190.57.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:88:08:ae:b9:40:cd:a3:34:9c:12:2a:a5:a5:c7:1f:6f:ca:8b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:46 2024 GMT
            Not After : Mar  4 18:06:46 2025 GMT
        Subject: CN=A6C64B451FD0222427B86C9094566C35ABF5C8A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:18:72:05:87:d4:57:e3:bb:62:3c:d7:d6:
                    55:c5:c2:0c:74:1d:ff:e4:fb:ed:94:d2:84:19:8a:
                    aa:55:6d:ac:08:9e:52:31:dc:e0:84:6d:14:5a:2c:
                    94:72:7a:dc:4c:ce:94:cf:3a:b5:4a:0c:42:44:15:
                    65:5c:57:da:8e:4d:5d:cf:bd:1f:db:87:4b:21:fd:
                    05:f3:d9:31:2c:ae:d0:a2:00:16:39:7f:2f:62:95:
                    86:ee:35:e2:ed:f8:df:65:35:33:b9:f0:56:37:98:
                    69:16:65:78:67:ca:27:ae:c0:11:a6:eb:79:83:30:
                    5d:78:0c:17:4a:cc:93:3f:85:2e:05:90:79:22:d3:
                    b9:ea:eb:88:9a:ed:ac:a8:cc:8a:36:5a:c8:1b:e1:
                    e3:3c:b4:72:9a:58:bb:5b:2d:27:86:03:e4:ea:a0:
                    c0:d4:be:e3:3d:36:a6:0a:0b:f9:d6:3e:3a:9b:56:
                    ad:b6:bc:5d:02:e1:04:e2:ae:3c:d4:c4:4b:c6:92:
                    84:66:60:93:24:19:03:c4:e8:4d:77:dd:ca:9a:65:
                    6c:4a:88:4f:1c:09:44:5a:da:5c:2d:d8:6e:8a:2e:
                    25:3e:c3:81:95:13:4f:12:9b:41:33:b3:cd:50:eb:
                    be:1c:d5:84:42:f3:59:b7:6a:d4:a9:0c:3d:ab:5c:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:4B:45:1F:D0:22:24:27:B8:6C:90:94:56:6C:35:AB:F5:C8:A0
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36302e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:04:6b:af:bb:54:9d:14:35:b1:19:3d:de:76:ec:e1:88:b5:
         38:fc:cb:68:6b:a9:9d:c5:94:1b:c6:e7:f9:21:22:ab:0d:13:
         ee:42:fb:1d:1b:14:9a:40:34:38:e6:c3:a8:1f:ad:36:5a:2a:
         9d:75:3e:79:0e:ff:d7:95:0b:7f:fa:85:f5:76:78:5e:82:82:
         3c:8a:c5:aa:23:d9:1d:ab:c9:01:1c:ba:29:57:b0:28:b4:10:
         b9:d7:cc:04:48:5a:43:4b:77:92:63:da:1f:61:a3:89:db:2e:
         a3:07:40:92:39:06:b8:3d:ee:41:30:b6:f4:a9:12:0e:a7:7f:
         03:ee:71:65:23:7f:83:a5:11:15:bf:b9:a0:0b:1c:7f:c2:6b:
         12:ff:95:f3:3a:61:07:42:11:47:86:96:78:5c:2f:6e:fe:7d:
         3a:a5:1b:ec:27:26:73:d7:8b:ad:71:48:bb:ee:9b:15:c9:b2:
         39:a0:4c:2a:ee:56:0e:e0:7a:8d:ed:36:1d:b0:a6:71:8f:5b:
         09:ba:9b:c2:c2:34:5f:6e:dd:36:17:9b:65:96:e6:1a:ca:c6:
         f8:7c:a1:6a:38:8c:b4:67:b2:6f:3c:78:79:2c:99:3d:d2:b4:
         7c:f4:b5:c0:64:53:e2:8d:81:af:a7:b5:ce:7a:29:65:1e:93:
         1b:57:17:15
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURIgIrrlAzaM0nBIqpaXHH2/KiwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNDAzMDUxODAxNDZaFw0yNTAzMDQxODA2NDZaMDMxMTAvBgNV
BAMTKEE2QzY0QjQ1MUZEMDIyMjQyN0I4NkM5MDk0NTY2QzM1QUJGNUM4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmxhyBYfUV+O7YjzX1lXFwgx0
Hf/k++2U0oQZiqpVbawInlIx3OCEbRRaLJRyetxMzpTPOrVKDEJEFWVcV9qOTV3P
vR/bh0sh/QXz2TEsrtCiABY5fy9ilYbuNeLt+N9lNTO58FY3mGkWZXhnyieuwBGm
63mDMF14DBdKzJM/hS4FkHki07nq64ia7ayozIo2Wsgb4eM8tHKaWLtbLSeGA+Tq
oMDUvuM9NqYKC/nWPjqbVq22vF0C4QTirjzUxEvGkoRmYJMkGQPE6E133cqaZWxK
iE8cCURa2lwt2G6KLiU+w4GVE08Sm0Ezs81Q674c1YRC81m3atSpDD2rXB6RAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpsZLRR/QIiQnuGyQlFZsNav1yKAwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzYzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL45PDAN
BgkqhkiG9w0BAQsFAAOCAQEAkgRrr7tUnRQ1sRk93nbs4Yi1OPzLaGupncWUG8bn
+SEiqw0T7kL7HRsUmkA0OObDqB+tNloqnXU+eQ7/15ULf/qF9XZ4XoKCPIrFqiPZ
HavJARy6KVewKLQQudfMBEhaQ0t3kmPaH2GjidsuowdAkjkGuD3uQTC29KkSDqd/
A+5xZSN/g6URFb+5oAscf8JrEv+V8zphB0IRR4aWeFwvbv59OqUb7Ccmc9eLrXFI
u+6bFcmyOaBMKu5WDuB6je02HbCmcY9bCbqbwsI0X27dNhebZZbmGsrG+HyhajiM
tGeybzx4eSyZPdK0fPS1wGRT4o2Br6e1znopZR6TG1cXFQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org