Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37302e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e37302e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          9zqnWO9fg+8fbiBblja4L7a/yRHLDIg37s5lHUa9ddg=
Subject key identifier:   78:25:D4:39:8B:D8:8C:21:9A:C1:B6:3E:64:60:10:9F:93:4D:B4:84
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       740A06F99054FB3001B103351EFDBCDA2F3131BD
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37302e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:39 +0000
ROA not before:           Tue 04 Feb 2025 18:46:39 +0000
ROA not after:            Tue 03 Feb 2026 18:51:39 +0000
asID:                     263783
IP address blocks:        190.57.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0a:06:f9:90:54:fb:30:01:b1:03:35:1e:fd:bc:da:2f:31:31:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:39 2025 GMT
            Not After : Feb  3 18:51:39 2026 GMT
        Subject: CN=7825D4398BD88C219AC1B63E6460109F934DB484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:77:8c:04:e2:52:1a:9f:09:5b:35:26:55:
                    5c:ed:6c:1f:78:8c:20:61:2b:ff:5c:d9:e6:cf:b5:
                    55:8a:7a:2e:d1:32:a8:b2:0c:0a:18:b2:67:27:d6:
                    33:6b:2b:48:fd:d3:3c:b4:ca:a6:57:c2:6b:f1:dd:
                    d3:c8:5d:96:8b:b1:2b:3a:fa:e7:8f:fa:0e:98:8b:
                    7c:23:e1:42:b7:af:f5:24:4c:93:31:58:63:68:19:
                    e0:18:28:91:db:ee:5f:b7:a8:60:3b:29:16:52:c8:
                    7e:f0:e7:d1:9d:03:d0:4d:19:fe:f8:60:85:26:97:
                    30:88:d6:1a:03:2b:f4:86:11:4f:de:7e:fc:40:26:
                    ab:07:f6:8b:30:de:ae:fb:ff:36:64:64:46:87:fe:
                    0e:d1:81:1b:8b:ae:77:08:9b:02:97:61:c4:9e:7d:
                    dc:4b:63:6c:55:37:d8:5a:83:a2:3b:d8:7d:40:be:
                    1a:68:44:80:8c:a3:b4:3b:98:f6:11:7b:cb:8f:3c:
                    ba:98:40:37:2f:a4:51:a9:cb:17:8f:6e:9f:b9:15:
                    2d:11:02:8d:e0:8b:87:56:82:39:21:ec:40:5d:10:
                    86:fb:58:c8:35:87:65:24:13:5f:b2:64:e1:f0:1a:
                    82:48:53:cb:9b:c3:63:99:37:30:d2:f4:df:78:14:
                    e1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:D4:39:8B:D8:8C:21:9A:C1:B6:3E:64:60:10:9F:93:4D:B4:84
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37302e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:2e:96:3f:cd:0a:32:65:09:0e:84:58:18:eb:6a:10:57:ef:
         e2:4a:71:3f:92:6f:2b:04:e6:cc:ce:d3:fb:97:91:64:a2:6f:
         f9:24:db:b9:27:6b:f4:9c:78:dc:05:d3:b3:4c:ac:f7:d9:ce:
         08:79:6d:76:17:36:c5:b4:cc:5b:fd:b0:ef:50:86:fb:81:85:
         56:6d:3b:d9:37:60:4e:af:2a:55:ca:b6:7e:fd:7c:cd:75:48:
         d1:36:0a:b1:a1:4e:a2:77:30:70:22:fb:02:50:8a:32:0b:ed:
         8b:78:e3:5f:cf:a6:20:f9:40:50:89:f9:54:68:2e:d4:d6:f1:
         71:ea:c9:e5:cf:b4:d2:28:c9:48:ea:89:10:fe:0a:ea:39:df:
         7e:9e:29:b8:6b:23:10:d9:b2:be:e5:26:2b:a8:53:49:71:9a:
         4a:af:ec:4a:f1:16:0f:01:62:37:16:7e:13:cb:16:47:44:7b:
         c5:45:42:87:77:a9:33:2b:63:b0:3e:9d:ba:24:e5:3d:c1:22:
         87:28:07:7e:0f:dc:68:ce:7e:4c:37:ff:f0:4e:80:3b:9e:c3:
         b1:02:07:97:6e:6c:25:c6:21:52:3c:fc:55:14:9f:e3:bd:a5:
         89:09:55:7b:7c:df:0a:f7:8b:40:6d:8b:ff:12:74:56:0b:74:
         df:36:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:31 2025 by rpki-client