Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37372e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e37372e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          4r68qOkrd1jFSUsZIE7ndtEd9YCYtOPUB0qGe7GWULk=
Subject key identifier:   0E:2C:AB:D8:FB:55:5C:92:73:8B:24:0F:52:69:64:3E:8B:8A:85:70
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0315F756A011877B0D3B43E25988AAC9F3305483
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37372e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:35 +0000
ROA not before:           Tue 04 Feb 2025 18:46:35 +0000
ROA not after:            Tue 03 Feb 2026 18:51:35 +0000
asID:                     12127
IP address blocks:        190.57.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 09:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:15:f7:56:a0:11:87:7b:0d:3b:43:e2:59:88:aa:c9:f3:30:54:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:35 2025 GMT
            Not After : Feb  3 18:51:35 2026 GMT
        Subject: CN=0E2CABD8FB555C92738B240F5269643E8B8A8570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:22:79:8e:c8:b0:4d:4d:3c:95:a1:bf:58:
                    f8:b9:82:c5:ef:0f:bd:c4:b1:c1:1e:e3:d4:c1:f0:
                    dc:13:82:06:d3:7b:e6:69:b5:66:92:db:c4:ea:ba:
                    2a:1a:47:d8:8d:df:c5:db:57:fb:94:36:44:97:d1:
                    8d:3c:49:bc:27:ef:ab:d8:11:e7:0a:e6:10:a3:25:
                    b5:3a:f1:13:29:45:fb:a5:d1:21:a7:bc:25:15:df:
                    50:49:82:7d:6f:ff:4d:9c:42:5a:ba:d3:99:75:18:
                    f7:4c:8b:aa:20:75:24:08:ef:1b:13:3b:0f:72:50:
                    a0:25:6f:99:b1:27:c9:2b:7b:27:e1:5f:2b:2a:ef:
                    1c:d6:9b:16:c5:2b:79:32:55:01:65:ac:e2:a4:7c:
                    79:64:29:0a:e8:01:d9:29:1c:a7:4c:a7:1d:e2:9d:
                    dd:06:c2:81:5a:11:ed:42:89:21:11:83:35:72:4b:
                    08:a1:16:8d:27:c9:9f:7c:b3:0e:ef:4d:93:e1:52:
                    49:ae:81:89:2e:08:8c:d9:35:61:a6:b2:55:68:e4:
                    f5:6e:b4:59:a6:d1:67:b4:d7:77:b9:ab:b8:0f:42:
                    64:12:22:04:c7:0a:2f:79:25:89:2c:5f:8b:27:88:
                    3c:c2:d7:12:fc:a3:f5:4b:22:8d:c8:6b:88:e4:a4:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2C:AB:D8:FB:55:5C:92:73:8B:24:0F:52:69:64:3E:8B:8A:85:70
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37372e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:c1:97:61:14:71:25:a3:84:d8:74:ec:5e:18:3f:72:84:
         07:0a:cf:3e:da:92:81:2d:3a:0b:d7:63:da:3b:ee:11:73:81:
         d5:6f:49:00:66:7b:5d:ad:94:47:25:51:f3:7b:30:af:9b:47:
         74:92:91:bc:3a:f6:2b:ca:b3:96:d8:8f:8f:3f:72:01:db:1f:
         a4:00:b6:7f:7f:f7:a3:83:8a:c6:5a:e1:90:e7:19:40:41:ca:
         36:a7:c5:d6:94:66:bd:5f:2b:82:7d:ca:ff:87:40:e1:75:ab:
         89:fa:81:03:81:6f:bc:64:b0:ea:7a:30:33:92:7a:71:bc:77:
         a9:37:19:0e:ef:43:f5:41:64:1b:00:5c:30:67:45:f8:74:1c:
         dc:2c:34:ca:db:fe:3d:dd:5b:86:da:b8:51:d8:ad:29:67:7b:
         d2:49:ae:69:ea:18:48:6f:8e:f8:f4:fb:e8:cc:1b:e1:b6:db:
         1f:a5:a0:8c:dd:91:a2:30:e2:e5:51:5e:42:c1:91:28:ce:79:
         8b:e2:33:92:25:21:5c:bb:48:d8:53:d6:f7:fa:1d:8b:71:41:
         8d:05:12:35:d4:70:6b:16:70:5f:36:84:61:6d:c5:2b:45:3d:
         ec:73:ff:b7:c3:b8:f7:2d:9d:37:04:76:31:2b:14:9f:0c:96:
         36:11:65:cb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUAxX3VqARh3sNO0PiWYiqyfMwVIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MzVaFw0yNjAyMDMxODUxMzVaMDMxMTAvBgNV
BAMTKDBFMkNBQkQ4RkI1NTVDOTI3MzhCMjQwRjUyNjk2NDNFOEI4QTg1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqSJ5jsiwTU08laG/WPi5gsXv
D73EscEe49TB8NwTggbTe+ZptWaS28TquioaR9iN38XbV/uUNkSX0Y08Sbwn76vY
EecK5hCjJbU68RMpRful0SGnvCUV31BJgn1v/02cQlq605l1GPdMi6ogdSQI7xsT
Ow9yUKAlb5mxJ8kreyfhXysq7xzWmxbFK3kyVQFlrOKkfHlkKQroAdkpHKdMpx3i
nd0GwoFaEe1CiSERgzVySwihFo0nyZ98sw7vTZPhUkmugYkuCIzZNWGmslVo5PVu
tFmm0We013e5q7gPQmQSIgTHCi95JYksX4sniDzC1xL8o/VLIo3Ia4jkpN3tAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUDiyr2PtVXJJziyQPUmlkPouKhXAwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzczNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzIzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+OU0wDQYJ
KoZIhvcNAQELBQADggEBAJf/wZdhFHElo4TYdOxeGD9yhAcKzz7akoEtOgvXY9o7
7hFzgdVvSQBme12tlEclUfN7MK+bR3SSkbw69ivKs5bYj48/cgHbH6QAtn9/96OD
isZa4ZDnGUBByjanxdaUZr1fK4J9yv+HQOF1q4n6gQOBb7xksOp6MDOSenG8d6k3
GQ7vQ/VBZBsAXDBnRfh0HNwsNMrb/j3dW4bauFHYrSlne9JJrmnqGEhvjvj0++jM
G+G22x+loIzdkaIw4uVRXkLBkSjOeYviM5IlIVy7SNhT1vf6HYtxQY0FEjXUcGsW
cF82hGFtxStFPexz/7fDuPctnTcEdjErFJ8MljYRZcs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 10:29:14 2025 by rpki-client