Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37312e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e37312e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          TPI22hnagv/nk5rl4SVZmShvRsFCYAGkv1aU6c792t4=
Subject key identifier:   68:43:B2:83:8A:96:EF:5F:F6:E0:97:82:CD:B2:2F:7F:F3:6C:71:87
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0E3D70221E2AB9691DEF69D9D01DB4491C27C478
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37312e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:31 +0000
ROA not before:           Tue 04 Feb 2025 18:46:31 +0000
ROA not after:            Tue 03 Feb 2026 18:51:31 +0000
asID:                     12127
IP address blocks:        190.57.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3d:70:22:1e:2a:b9:69:1d:ef:69:d9:d0:1d:b4:49:1c:27:c4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:31 2025 GMT
            Not After : Feb  3 18:51:31 2026 GMT
        Subject: CN=6843B2838A96EF5FF6E09782CDB22F7FF36C7187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:9c:b7:25:0d:ea:75:d0:e1:ba:5a:99:bf:
                    ca:df:cf:a0:3b:0c:45:5e:3a:31:7b:87:5e:16:9a:
                    7a:b8:85:6c:6a:cb:e8:74:06:12:25:45:7d:e7:51:
                    72:22:37:ea:b8:ef:ab:32:cc:4a:9a:bd:7b:08:67:
                    3f:46:29:ba:95:bc:e5:dd:d4:7a:e8:86:8f:a6:4b:
                    73:dc:b2:2c:4d:bf:78:f3:81:41:9b:2e:b5:4d:03:
                    c8:ae:9e:d2:54:68:3d:62:58:c0:cc:17:0e:79:46:
                    4e:a6:e3:23:d6:ca:4c:1d:4a:f1:63:c1:c7:84:30:
                    d5:38:f4:cc:79:b6:fe:5c:28:04:70:0c:73:c6:2f:
                    22:a4:af:09:6d:4e:81:73:04:81:79:1a:f6:06:2c:
                    7f:e1:e3:d7:c0:7a:5a:cd:14:bd:62:b7:77:e1:41:
                    88:32:a5:c0:65:47:90:37:88:6c:e9:b0:dc:37:c3:
                    3f:19:aa:61:36:41:f7:dc:b4:fc:18:f9:ae:ec:5b:
                    7f:d6:46:12:d7:5d:95:21:fc:96:64:a3:d9:42:74:
                    cc:19:e3:4f:5a:0a:9e:55:e9:b2:a8:18:7b:bb:f1:
                    58:13:f1:65:af:c0:93:ff:0e:d7:ad:ef:7c:67:db:
                    0b:b7:37:15:ab:77:37:84:96:6b:c0:fb:2c:96:2e:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:43:B2:83:8A:96:EF:5F:F6:E0:97:82:CD:B2:2F:7F:F3:6C:71:87
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37312e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:89:30:45:2d:e3:20:cb:39:63:aa:d7:13:a3:f4:ba:c5:8e:
         63:a4:a9:c0:37:71:9c:40:a1:c4:7a:65:a1:67:2e:6c:b2:80:
         1b:37:e0:b7:6b:c4:6c:7c:bc:66:85:97:df:6a:67:53:49:6f:
         23:4d:d6:4c:c6:ed:91:7d:16:2e:1d:8b:9b:34:c0:43:8f:52:
         09:e9:05:07:8d:95:19:20:47:73:fa:aa:26:23:36:f8:d5:c8:
         00:93:ee:ae:b8:63:f9:25:3c:cf:25:ac:e4:a2:26:3c:fd:4a:
         e0:a9:83:9a:03:6f:24:82:b6:4f:a9:2b:18:6e:53:65:11:34:
         75:6f:6b:20:d1:a0:d1:7e:4f:e3:77:20:c6:44:59:68:a1:6c:
         93:14:3b:ce:91:01:bc:80:ff:72:9f:05:54:de:b4:c8:ae:22:
         94:d2:29:11:db:d1:d6:cc:c9:04:54:5c:a8:4c:71:fc:83:85:
         58:ed:06:5a:5d:cc:8c:39:f9:f6:5c:9e:ea:85:0d:33:ac:41:
         07:a1:64:c3:12:6c:19:0a:99:a9:a9:29:81:f8:5c:00:f1:ca:
         3f:09:21:b4:98:90:54:bf:0f:0c:24:7d:59:04:01:83:51:28:
         8f:2c:b0:ca:9e:e3:b8:76:6c:15:dd:a3:ff:f0:ab:14:05:3f:
         73:bb:0c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:39 2025 by rpki-client