Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e37322e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          hHaNBnqzoash+c9bNyJQoeNgYFkjIvU1O6fEg1FD7bA=
Subject key identifier:   51:DF:68:5A:C2:20:4C:E7:A0:1A:D9:51:1D:22:18:6F:B4:32:F7:8F
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       66DAEE4C89C30C12FB1C6552817F5F4F57692515
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:29 +0000
ROA not before:           Tue 04 Feb 2025 18:46:29 +0000
ROA not after:            Tue 03 Feb 2026 18:51:29 +0000
asID:                     12127
IP address blocks:        190.57.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:da:ee:4c:89:c3:0c:12:fb:1c:65:52:81:7f:5f:4f:57:69:25:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:29 2025 GMT
            Not After : Feb  3 18:51:29 2026 GMT
        Subject: CN=51DF685AC2204CE7A01AD9511D22186FB432F78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:79:21:70:7b:31:c1:f6:11:73:ce:d0:fc:
                    d7:fb:f7:0a:9a:6a:18:38:7c:d7:1d:b3:ba:ca:80:
                    5a:d5:16:98:43:6b:63:f8:3a:c3:93:1a:85:3b:d0:
                    43:39:51:fc:94:b7:5f:9e:1b:f3:8d:05:60:32:5c:
                    3e:f5:76:9f:55:b1:ea:ec:b4:73:ef:47:39:09:19:
                    78:40:16:a5:4c:08:aa:bb:a3:85:73:5e:05:53:3f:
                    58:5f:a7:fe:b0:c4:a5:46:06:56:c1:d8:1a:ec:fd:
                    e3:10:20:8c:ae:f7:80:d8:3a:c9:ca:1b:ed:46:c0:
                    b8:4a:70:da:05:a7:08:dd:89:47:a5:c4:e3:89:af:
                    bf:d4:5a:9e:52:d6:36:a3:a0:bc:0e:ab:37:e2:fe:
                    45:c0:f2:7a:83:e7:de:8e:f2:84:49:11:7a:61:f4:
                    0b:56:2c:07:28:df:2f:84:9c:91:78:5d:a9:20:20:
                    4b:d2:f9:3d:7d:67:ef:ef:9c:94:ff:1e:a3:f2:21:
                    ad:dd:91:e5:72:7d:8e:21:e2:da:34:1b:d0:77:da:
                    5a:34:87:4e:8c:78:98:21:da:46:7c:e6:49:4c:d1:
                    d8:b5:62:b3:8d:72:1b:9d:ef:d5:f7:04:67:d6:7c:
                    87:a7:eb:05:6d:a4:26:79:4a:cc:f8:bf:e5:db:bd:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DF:68:5A:C2:20:4C:E7:A0:1A:D9:51:1D:22:18:6F:B4:32:F7:8F
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:e2:26:9b:ad:09:a2:84:5c:4c:b1:24:7d:53:b1:30:7e:
         0a:b4:5c:6b:b2:c3:cd:48:32:c4:ec:d1:b6:94:70:b1:5e:ca:
         b8:7a:e2:27:d7:00:8a:e6:f9:cd:a7:c0:98:81:bf:d4:a8:cf:
         1c:59:dc:87:7e:33:26:14:23:52:92:ce:45:1f:40:5d:27:06:
         c8:b2:88:a5:66:27:de:b7:17:fe:6b:bd:73:9f:59:4f:d1:4f:
         1d:f9:b9:2b:27:ea:a4:3f:24:66:2e:8e:02:e1:db:6e:20:98:
         46:07:15:d2:7f:47:77:c2:6d:d7:a7:15:d0:12:ec:c6:af:62:
         7c:4e:b0:48:9f:96:7f:e5:f1:98:bb:3c:44:5d:0f:bb:b4:8e:
         2f:c1:bf:4d:63:fb:37:72:35:40:8f:0d:e6:40:79:73:06:28:
         56:7d:4b:75:5b:b9:5e:e0:e4:6b:23:fc:d4:4b:93:04:4f:47:
         7d:1a:0b:6b:89:98:94:99:9f:b0:9a:7c:d8:43:52:20:50:d5:
         90:e8:39:eb:72:01:54:ad:40:a2:5c:49:b6:eb:23:38:70:55:
         76:1e:71:0b:6d:f3:13:8c:60:2c:3f:6d:9a:cd:e2:a8:dc:eb:
         44:b3:9c:4f:b6:e5:4e:33:fb:b4:e9:86:41:e6:d2:7a:3f:e7:
         81:30:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:04 2025 by rpki-client