Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36332e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e36332e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          bjtbffBg1xnoiynD52HTwyt0oI+gdzHJpM67ETmjoe8=
Subject key identifier:   BC:FD:D0:18:F5:31:8A:E1:5E:F0:CC:63:F1:1B:4E:38:ED:AA:20:3A
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       1CAD69266AE6E8D5E44C3AD821A70AF706E149A9
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36332e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:07:02 +0000
ROA not before:           Tue 05 Mar 2024 18:02:02 +0000
ROA not after:            Tue 04 Mar 2025 18:07:02 +0000
asID:                     12127
IP address blocks:        190.57.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ad:69:26:6a:e6:e8:d5:e4:4c:3a:d8:21:a7:0a:f7:06:e1:49:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:02 2024 GMT
            Not After : Mar  4 18:07:02 2025 GMT
        Subject: CN=BCFDD018F5318AE15EF0CC63F11B4E38EDAA203A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:e6:75:2e:89:c0:02:1a:07:50:3b:20:cc:
                    f6:9e:78:92:d7:d8:f4:fc:c1:ce:23:11:1c:46:38:
                    27:a6:81:12:d6:23:dd:ac:dc:a0:5d:95:f6:29:b1:
                    cc:7f:a6:2e:a1:99:cc:25:67:ca:5a:bb:43:9c:78:
                    53:6c:06:4b:4d:4e:f3:2c:be:2b:f5:f5:dc:c1:b9:
                    af:07:44:94:53:1f:2c:71:92:fd:00:1d:c4:1b:51:
                    9a:ac:e1:9e:2e:05:52:9f:a3:ba:7c:76:a3:6e:38:
                    d9:1e:b3:6d:62:0b:db:12:a1:e3:89:a8:76:25:41:
                    50:33:5a:ca:41:f2:86:6f:75:99:54:13:a6:9c:44:
                    ef:a1:e7:ae:6f:38:36:3f:c0:32:07:0d:12:bf:f8:
                    7a:34:1e:44:72:5c:d4:92:f0:1f:d4:5e:3d:c5:04:
                    1a:27:9e:b9:e8:cc:cb:ec:f7:42:5e:70:d1:c9:99:
                    14:51:34:2a:5c:3f:55:cb:d8:e4:88:f8:c2:3f:4c:
                    33:3b:83:64:95:6a:92:5f:1b:11:81:ac:15:7d:6e:
                    a9:f6:3f:af:5c:bc:7c:08:8e:01:41:85:45:35:92:
                    42:c9:9f:ce:68:cd:8b:c3:7c:87:de:13:77:24:fa:
                    42:1d:a0:45:ed:46:74:f0:da:79:b8:27:87:0a:bf:
                    f5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:D0:18:F5:31:8A:E1:5E:F0:CC:63:F1:1B:4E:38:ED:AA:20:3A
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36332e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c2:75:50:95:5a:f9:1a:b9:50:fe:14:fa:33:3f:e0:43:bf:
         79:80:4c:13:75:1b:e1:20:90:b1:c7:d4:25:f1:ab:03:35:bb:
         5f:1d:fa:61:43:0f:77:d3:0e:a6:ba:69:34:4d:3c:ab:17:af:
         58:78:b5:12:87:88:bb:bd:bd:d8:c2:fb:b1:b8:53:e9:7c:68:
         33:36:9f:62:8d:34:32:11:dd:0b:a2:98:14:ee:d8:6d:ac:f6:
         67:9c:27:53:09:5d:fe:95:39:4c:dc:41:eb:3b:ff:04:12:bb:
         9f:14:f0:c7:cc:76:f0:bc:49:76:c3:0e:6c:03:dd:3c:c4:8a:
         e7:49:f6:9f:e6:03:4f:59:e5:a7:18:d6:13:9f:8a:0a:2b:f7:
         18:69:1f:d6:c5:ef:b7:5b:cf:f4:63:76:1b:f0:ec:c1:4c:bc:
         09:93:bb:5c:fd:92:76:fa:cc:24:95:b5:df:a6:16:94:3e:b4:
         1a:7f:7c:8f:f3:88:6b:0e:63:ac:ea:c4:26:31:92:9a:3a:ee:
         f7:3d:dc:d1:24:ec:68:e1:d2:92:ee:df:0b:7b:e1:28:13:39:
         ee:c6:a1:c0:72:e8:16:ce:23:a0:db:b5:f8:d5:a1:1a:5a:0f:
         49:8b:b5:49:12:e5:1d:e9:66:b3:5b:c8:6b:4c:93:5b:90:50:
         08:a3:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:33 2024 by rpki-client on console-fra.rpki-client.org