Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36312e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e36312e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          pDNrmi5S82ZutJMsMZqtjnbssqv/FgUlivUPb3p4nDQ=
Subject key identifier:   FD:FA:64:EB:B4:E2:A0:F3:8C:4D:70:BA:8A:0D:D3:3A:45:A4:8A:11
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4AFFD147C88E437FD29C3063571D7851BE2AE015
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36312e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:29 +0000
ROA not before:           Tue 04 Feb 2025 18:46:29 +0000
ROA not after:            Tue 03 Feb 2026 18:51:29 +0000
asID:                     263783
IP address blocks:        190.57.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ff:d1:47:c8:8e:43:7f:d2:9c:30:63:57:1d:78:51:be:2a:e0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:29 2025 GMT
            Not After : Feb  3 18:51:29 2026 GMT
        Subject: CN=FDFA64EBB4E2A0F38C4D70BA8A0DD33A45A48A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:6f:3b:37:45:6b:6e:4a:15:86:df:7b:10:
                    b4:75:9a:f0:36:fb:2e:ad:de:59:15:ab:15:90:fc:
                    fa:1e:d9:f7:3d:85:71:cf:25:9b:be:9f:e9:46:4e:
                    f4:d9:93:d9:90:48:5d:3c:c5:ca:7e:6a:54:3d:6c:
                    bc:cc:ac:45:c6:26:90:81:87:db:40:88:39:50:32:
                    12:45:e2:4b:d8:4b:ac:1b:12:69:36:93:7e:1f:8b:
                    48:cc:de:dd:17:43:0e:3e:15:99:a5:05:78:bc:bb:
                    0c:39:a4:f7:dc:93:d2:85:d9:07:9b:04:15:32:62:
                    b5:46:f2:ef:a6:ab:80:2f:27:f6:cd:cd:c8:aa:a6:
                    35:3a:40:c4:67:a4:63:f7:06:e6:a2:6a:d3:51:5f:
                    6c:4e:10:d2:2f:e6:bb:a6:d8:9e:c8:8e:0f:69:c8:
                    56:bd:12:77:76:64:d7:a1:22:c4:d9:5f:59:fc:52:
                    35:d1:24:57:d1:b8:bf:0b:11:a5:b9:c5:3d:c0:df:
                    51:f5:75:c6:5b:48:47:a4:b0:fa:a3:bb:05:0e:e4:
                    4b:e2:4f:00:dd:e8:39:c0:d1:f5:08:6c:f4:c1:83:
                    16:92:2a:d7:58:cf:d4:3f:82:83:62:be:d6:b8:b1:
                    e1:c1:57:fb:72:26:a0:69:5b:60:89:4b:1a:b2:dc:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:64:EB:B4:E2:A0:F3:8C:4D:70:BA:8A:0D:D3:3A:45:A4:8A:11
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36312e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:cf:0a:db:10:5a:e8:17:5e:2b:24:f1:2f:38:52:36:a7:75:
         5a:d8:2d:4b:64:23:32:26:b4:8c:e1:6c:64:a7:dc:dd:28:eb:
         4d:d5:3e:2b:ed:9d:2f:dc:09:4f:9e:f5:fe:82:66:57:02:23:
         5d:dc:df:20:5f:45:d5:cd:f6:32:d9:2f:7f:a3:66:e4:05:ab:
         be:53:d3:dc:96:1e:ab:f2:0a:f9:21:25:b9:65:23:d9:8c:70:
         d5:93:ec:a8:9c:b3:c6:df:b8:b9:87:62:f2:ed:9f:ad:28:f4:
         e8:6c:27:fa:a9:b5:73:c4:9f:aa:b7:f5:23:74:8a:e2:59:9f:
         db:0c:74:b8:fc:ab:f8:2e:28:46:c0:aa:e5:5c:49:da:c6:43:
         00:47:e8:17:a9:b9:da:e9:a6:e1:f8:6b:f6:a6:5f:d0:8f:3a:
         5f:8d:d8:b5:e7:c1:17:97:5a:b4:c9:88:fd:66:70:bc:5d:70:
         99:24:8a:c5:22:d6:3c:b8:4b:01:23:c3:cd:00:db:e2:52:f6:
         e0:6e:46:da:c2:41:99:7d:cf:a9:7c:34:19:3b:7c:ad:29:22:
         0c:e8:49:19:55:dd:95:3f:60:25:f0:cc:e0:6c:6b:ab:69:af:
         db:1c:f8:f6:c8:22:11:eb:af:0f:17:e1:db:f9:d6:3c:6d:9e:
         df:89:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:19 2025 by rpki-client