Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36342e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e36342e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          H/QAOwpne0r5M03QGk8lDTQPJPMr8+iPTcyRTNOs730=
Subject key identifier:   CD:5E:04:EF:F2:FA:13:CF:8F:F0:F4:5C:A4:84:20:5F:BC:77:25:05
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       61442164EB8A5FC64A7BBEB8D4CBF42E215175B8
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36342e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:35 +0000
ROA not before:           Tue 04 Feb 2025 18:46:35 +0000
ROA not after:            Tue 03 Feb 2026 18:51:35 +0000
asID:                     263783
IP address blocks:        190.57.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:44:21:64:eb:8a:5f:c6:4a:7b:be:b8:d4:cb:f4:2e:21:51:75:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:35 2025 GMT
            Not After : Feb  3 18:51:35 2026 GMT
        Subject: CN=CD5E04EFF2FA13CF8FF0F45CA484205FBC772505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:ec:fe:41:04:05:69:27:f1:80:95:6e:6a:
                    82:fe:26:17:b7:a8:5d:89:8b:e7:fb:72:52:68:dc:
                    c0:d3:5d:10:52:e8:3b:42:14:c1:7c:ff:b6:66:63:
                    f4:9b:4f:12:e6:56:86:f8:0a:23:32:59:d5:68:d2:
                    1d:79:20:b5:85:d9:86:7d:0d:8f:ea:a7:53:f4:75:
                    a0:f6:60:60:07:59:99:87:13:51:a8:8c:ac:dc:73:
                    43:e3:58:60:a5:62:ed:fc:dc:ee:64:5d:31:93:d8:
                    1d:6c:e6:4c:95:8c:dc:ee:e1:5a:46:54:cb:4e:52:
                    7f:fc:11:51:9a:9a:b1:21:e2:00:87:10:8a:3a:43:
                    e0:10:9b:e9:6d:36:f4:91:01:4d:3d:8b:fd:6a:66:
                    55:d0:b4:0e:38:c4:8e:70:29:b5:57:04:aa:08:80:
                    ad:aa:26:db:f1:d4:9e:19:cd:a2:19:0d:8a:80:33:
                    a6:07:25:46:46:dc:5c:fb:23:26:46:11:37:c6:77:
                    73:d9:b2:dd:f6:9e:89:c4:eb:30:85:c4:00:35:53:
                    8b:b9:21:92:94:b2:6f:34:fa:0b:ca:ec:9d:46:96:
                    40:ae:1a:99:03:04:bd:22:29:70:20:db:30:25:12:
                    09:53:8e:29:cd:0c:c2:39:37:56:0a:0b:a1:e4:d9:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5E:04:EF:F2:FA:13:CF:8F:F0:F4:5C:A4:84:20:5F:BC:77:25:05
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36342e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:17:ca:50:53:01:92:88:85:78:62:0d:e3:b0:59:f5:06:
         50:56:5d:b1:84:25:43:e2:e0:31:34:10:a6:d4:85:50:ca:3d:
         b7:37:d2:00:c1:b1:2a:58:1a:27:ab:2a:fb:0d:c5:34:e3:cc:
         78:c8:df:03:3e:a5:7e:44:c8:f6:4b:a6:38:b8:cc:80:22:6c:
         e9:2a:44:11:3b:fa:7b:1e:39:f9:91:63:61:4d:60:c1:52:45:
         e0:37:e8:94:8c:05:89:e7:ae:8c:e9:f9:ff:15:6e:6a:ef:9e:
         b2:b6:de:de:ed:00:0d:c1:60:f1:7d:bd:27:b1:a4:57:8d:d0:
         58:6a:38:a3:d2:2e:38:7f:91:7d:58:52:2d:ac:4d:fe:71:b7:
         1e:92:ce:be:cd:89:aa:f6:6d:30:b3:28:db:d3:ba:a0:8c:dc:
         9d:67:df:16:7a:bc:cc:30:ab:6c:2f:46:7a:eb:55:5a:27:ab:
         21:f7:28:db:ff:47:ac:67:90:6e:08:4d:77:ab:91:2a:13:47:
         4f:30:dd:fa:7f:c8:83:41:7c:8f:29:53:ef:34:d3:54:79:f4:
         28:13:46:69:e4:8a:ae:f2:a5:63:ad:4f:f7:f5:69:56:b9:fd:
         2f:66:11:e6:42:e0:67:59:5a:d3:9b:72:fe:72:58:ba:04:65:
         2b:97:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:02 2025 by rpki-client