Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e372e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e372e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          EKkqRVMmq2mf3q0QCiyQ7UXtYXjAYh7lmfPk+50fz4I=
Subject key identifier:   98:52:FE:7D:58:A4:8D:01:92:31:F0:7F:C0:C3:B2:5B:05:35:2A:8A
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       416E8F39C908AC48D4C833605BB5C5B6AD660A3C
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e372e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:38 +0000
ROA not before:           Tue 04 Feb 2025 18:46:38 +0000
ROA not after:            Tue 03 Feb 2026 18:51:38 +0000
asID:                     263783
IP address blocks:        190.57.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6e:8f:39:c9:08:ac:48:d4:c8:33:60:5b:b5:c5:b6:ad:66:0a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:38 2025 GMT
            Not After : Feb  3 18:51:38 2026 GMT
        Subject: CN=9852FE7D58A48D019231F07FC0C3B25B05352A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:2e:71:6d:5a:0c:83:bf:eb:e7:aa:31:4e:
                    c4:fa:b2:be:f3:a3:2e:a0:58:f9:8f:34:38:5a:6c:
                    7b:11:51:53:21:1a:f1:30:ca:d3:8f:b6:58:64:93:
                    73:65:a3:1b:e8:25:76:0f:27:ed:77:c1:b3:4e:1c:
                    7e:b7:c0:e8:cb:06:76:24:a5:71:b8:21:29:5c:a3:
                    ff:92:ec:ba:c2:31:86:89:47:2d:a2:54:e0:d2:b1:
                    55:c4:c6:5e:3c:c7:9d:fd:40:08:16:8d:8d:68:91:
                    2d:d7:bd:eb:06:03:53:f2:25:23:1e:90:d1:bd:9c:
                    ac:7e:a7:83:1c:e9:28:05:1c:34:50:d2:67:1c:58:
                    43:6e:9c:7a:f4:42:c9:91:60:29:37:03:1c:18:ec:
                    cf:d7:6e:8b:ee:27:b2:69:53:2e:3d:f8:68:76:e3:
                    a0:4d:f1:8f:c1:61:4a:65:9b:54:8e:de:6f:91:b4:
                    05:ec:9f:ba:f2:a8:4d:2c:f3:8d:96:0a:bb:42:48:
                    62:36:47:21:c7:82:f9:ce:76:80:31:6d:d3:3d:96:
                    87:36:82:9e:b3:2a:c0:6f:43:c7:7c:15:67:a2:28:
                    5c:cc:ef:26:d7:e0:b9:ab:a9:7e:68:2c:d2:8c:04:
                    68:e6:df:ce:f1:ba:02:fd:80:42:73:a3:3b:67:0b:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:52:FE:7D:58:A4:8D:01:92:31:F0:7F:C0:C3:B2:5B:05:35:2A:8A
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e372e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:db:5b:3c:96:b1:28:26:8c:d0:ae:9c:49:ce:74:fd:83:
         97:65:75:79:d5:63:cf:59:c6:11:4c:6f:5b:01:32:05:c5:fc:
         24:a0:5f:c5:79:b4:84:09:68:33:67:41:03:7a:f0:66:d3:40:
         dc:0c:7c:18:e9:13:63:fe:e7:b2:82:b9:ed:68:82:e3:34:29:
         dc:b4:e5:09:2a:f1:c4:d0:f4:dd:95:5c:11:0b:03:0d:58:ab:
         46:0a:a1:13:c5:0f:ff:91:e6:3d:7b:a5:8e:4b:8f:8f:d2:75:
         d4:53:40:1a:7e:f2:20:db:fa:60:e2:99:5f:8b:fc:e3:10:8b:
         7c:05:a8:80:39:37:b4:7a:00:23:76:b4:e4:36:d6:44:bf:e7:
         42:b2:5a:84:1c:4c:d2:9b:33:db:1e:4f:6c:cb:f1:18:28:f1:
         d3:dd:08:ee:78:55:0f:b4:02:fc:0f:23:9e:7a:09:03:dd:f0:
         b3:55:42:8c:e4:a2:75:97:65:e1:48:3a:f0:01:5f:bc:d3:20:
         7f:3a:9e:6e:23:dc:01:86:82:41:65:d6:15:7b:40:43:a5:c6:
         b6:15:c1:d1:23:cf:b8:97:f5:9e:43:00:64:19:3b:ad:4e:5a:
         ea:f0:ac:9d:0c:1c:93:7a:39:d1:4b:42:72:c7:2e:43:37:b3:
         16:3c:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:57 2025 by rpki-client