Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36382e302f32332d3234203d3e20323633373833.roa
File:                     3139302e35372e36382e302f32332d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          aJr6GqgQ+8xuao1/g77b2cRyJuTeRdHt4fiC7QZ3FrM=
Subject key identifier:   32:4B:73:0E:19:53:43:4A:4A:8A:FF:2E:70:3E:30:87:CB:B9:07:38
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       69E530EA555F69688D09FB689C32FE144D25C602
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36382e302f32332d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:25 +0000
ROA not before:           Tue 04 Feb 2025 18:46:25 +0000
ROA not after:            Tue 03 Feb 2026 18:51:25 +0000
asID:                     263783
IP address blocks:        190.57.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e5:30:ea:55:5f:69:68:8d:09:fb:68:9c:32:fe:14:4d:25:c6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:25 2025 GMT
            Not After : Feb  3 18:51:25 2026 GMT
        Subject: CN=324B730E1953434A4A8AFF2E703E3087CBB90738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:a3:70:22:39:91:bf:d1:73:8e:e9:f0:37:
                    7c:1a:a0:9d:60:e0:00:1c:b4:90:17:5f:ec:ca:18:
                    df:e9:39:c9:c1:22:25:3d:ef:a5:a7:2a:d0:58:ab:
                    f9:5d:7f:a2:1d:99:4f:9f:12:75:a6:2c:e4:37:45:
                    e9:7a:df:8a:22:2a:b7:be:03:06:b6:b4:1f:7a:4e:
                    c0:08:a1:df:ed:b9:3a:41:ad:14:c5:65:7c:c4:cb:
                    84:6c:6f:fa:b5:dc:32:43:9a:5a:4d:e6:fd:13:22:
                    b0:5b:13:d3:31:9d:52:75:36:9e:12:e7:d2:0b:91:
                    52:78:a7:e8:6f:9f:9a:14:59:4c:18:62:31:59:62:
                    69:14:1a:ad:11:37:d6:e8:0b:6a:ef:a9:df:c9:06:
                    69:d8:ca:42:28:bd:d9:65:f0:08:72:e5:54:79:b5:
                    10:03:66:81:a4:af:08:70:2e:65:e3:27:1a:06:26:
                    00:8d:74:05:34:89:a5:73:ba:02:05:fb:e6:48:d9:
                    66:e8:49:8c:b5:60:22:f0:cc:88:bd:cb:5b:94:e4:
                    3c:6a:e8:ce:fe:f1:55:8e:f4:e5:4c:01:e0:12:7a:
                    da:b7:8e:6a:10:5c:3f:9b:11:e4:84:a2:4a:e0:7f:
                    7e:f8:5a:c7:6d:a7:e0:61:49:c1:3d:fd:d9:2c:2d:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:73:0E:19:53:43:4A:4A:8A:FF:2E:70:3E:30:87:CB:B9:07:38
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36382e302f32332d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:8e:2c:7e:20:e0:11:4f:30:8b:3d:9c:61:6a:35:57:74:
         52:08:f9:2c:3c:d6:a7:af:36:d5:d1:38:72:42:3f:4a:4d:a6:
         0d:d8:09:6f:76:e0:22:ed:a6:8f:01:68:78:c8:55:1f:70:ae:
         49:69:ea:99:e3:3a:15:5f:e3:16:4f:a8:a8:e7:e7:81:62:fa:
         2f:cc:23:ed:27:8a:e1:33:57:31:a7:e0:a4:d8:e8:a9:52:df:
         93:00:26:ff:ce:c4:da:94:54:c1:18:e3:23:e9:34:63:65:39:
         23:44:dc:df:b9:db:5b:bd:10:0a:0c:46:bf:a9:90:73:54:b0:
         e8:9f:a5:76:88:26:40:2c:b8:45:f3:56:85:2f:e2:fa:5a:d9:
         50:2a:65:16:0a:33:b8:21:e6:da:38:af:75:28:ff:65:ba:36:
         55:ff:b8:3b:23:da:48:5e:5e:03:b8:52:50:32:4e:27:fc:fa:
         2f:1c:71:c2:f3:b9:76:d2:29:dd:3d:cd:5e:19:53:85:43:81:
         ec:cb:1f:e2:9e:62:c0:45:9b:0e:3d:a6:f0:e3:c3:1c:65:90:
         6d:e2:0e:8f:ed:79:1c:2d:65:fe:10:53:f7:6d:5e:2b:79:83:
         90:e6:b0:79:3c:05:57:d9:86:93:59:a0:d4:3f:b7:02:01:07:
         6a:41:fe:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:14 2025 by rpki-client