Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36352e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e36352e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          PtZWEvJB2DmU0mhqf8uiOVwV6mQinHgn0sDTEu0RjeA=
Subject key identifier:   D8:8E:BF:2F:33:34:55:D4:A3:3C:0C:5D:52:83:42:1C:B3:4C:11:88
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       2827296E7E1552FD8F7EE8637EF0D3B2497E6EA3
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36352e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:58 +0000
ROA not before:           Tue 05 Mar 2024 18:01:58 +0000
ROA not after:            Tue 04 Mar 2025 18:06:58 +0000
asID:                     12127
IP address blocks:        190.57.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:27:29:6e:7e:15:52:fd:8f:7e:e8:63:7e:f0:d3:b2:49:7e:6e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:58 2024 GMT
            Not After : Mar  4 18:06:58 2025 GMT
        Subject: CN=D88EBF2F333455D4A33C0C5D5283421CB34C1188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:bd:fe:f9:87:cc:33:81:e6:43:24:df:0a:
                    f8:50:83:fe:ad:dd:52:ba:53:37:6e:0c:ac:95:b7:
                    58:bd:c9:f2:1e:70:0b:9c:e0:51:7f:a8:d7:9f:b3:
                    78:bf:b0:4c:20:8e:48:fc:50:7b:8c:fb:6f:e2:db:
                    89:0f:02:f5:4d:e4:a6:d5:d7:97:26:1e:7b:f1:3a:
                    0a:a9:c0:ac:87:85:89:52:92:8c:de:ad:ce:19:4e:
                    46:1a:b6:d2:48:4e:e3:80:9b:60:e0:80:d7:55:88:
                    35:8a:42:eb:01:01:4c:23:90:3b:29:8b:be:4c:d6:
                    75:f2:65:b9:83:d7:2b:af:bb:c7:9a:37:bd:2d:a7:
                    0e:a0:33:dc:4e:6a:4d:74:fe:6d:e6:95:0a:62:af:
                    59:1d:db:dc:3c:41:58:cd:c8:70:da:70:44:5d:c1:
                    f4:ca:ce:40:01:ea:a7:54:96:ad:b0:1c:4d:84:80:
                    b9:41:00:dc:f7:5b:28:37:d0:a2:b1:60:84:d5:25:
                    00:29:42:f1:ad:aa:70:bc:8d:97:56:d8:55:48:1d:
                    9f:af:4c:bb:74:7b:f7:98:6a:ff:c5:3c:78:e8:e5:
                    2a:fd:81:9e:a6:12:a9:41:c2:c4:b9:2d:fb:c4:e3:
                    fe:f2:d4:31:e4:99:22:55:f1:2e:54:b7:a5:44:55:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8E:BF:2F:33:34:55:D4:A3:3C:0C:5D:52:83:42:1C:B3:4C:11:88
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36352e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:2f:a8:3e:89:23:fe:8d:a6:fe:60:b1:fa:f9:df:13:be:
         b8:e4:be:ca:96:46:8b:b9:a3:f1:5b:51:a3:c6:e8:57:05:11:
         f4:ac:bb:85:6a:df:26:a6:1d:f7:c9:ee:b3:e5:54:0c:61:63:
         51:11:ac:81:de:a5:a9:92:5b:f6:70:e4:da:d8:70:f1:3c:91:
         91:66:a1:29:d6:60:6e:fe:e9:08:11:86:9d:0f:a7:75:02:3e:
         f4:be:ce:ec:7b:fc:37:3f:a6:33:38:94:0c:08:b7:6c:c6:ff:
         55:97:98:d3:a5:c8:56:88:3a:1a:90:97:7e:9b:03:16:6a:90:
         7e:0f:e6:c3:6e:18:13:3e:16:7e:8c:ed:3f:81:8e:fd:c7:0c:
         b5:20:0d:62:04:34:31:26:02:96:d6:1b:52:be:0c:d7:3a:b7:
         5f:bb:82:95:82:55:52:4e:05:ab:ef:1e:e6:32:42:99:88:76:
         2d:d3:ef:97:f7:ec:bd:0b:24:48:7f:ff:4a:c9:77:17:fb:7c:
         e8:02:eb:91:c4:49:57:8b:5f:2a:31:8e:be:12:06:85:e0:96:
         9b:e6:7d:b5:7e:c0:8c:a2:6e:c3:38:c2:b8:ae:21:94:0f:f2:
         ce:03:ae:ca:9c:97:fb:4e:fa:6a:80:08:e7:58:0b:5b:46:28:
         11:0d:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 00:27:51 2024 by rpki-client on console-ams.rpki-client.org