Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37392e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e37392e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Rc/IAHBzr1kJ0XGGp51lzHd5TNl8cKOclyzfyqAXANw=
Subject key identifier:   35:B6:EC:E2:5B:BD:BA:79:B8:D8:95:72:F5:B3:D9:B1:35:A0:9B:1C
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       18E1A0FBACA78EF13BD12A38C8775AAC42A8309A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37392e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:07:04 +0000
ROA not before:           Tue 05 Mar 2024 18:02:04 +0000
ROA not after:            Tue 04 Mar 2025 18:07:04 +0000
asID:                     263783
IP address blocks:        190.57.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e1:a0:fb:ac:a7:8e:f1:3b:d1:2a:38:c8:77:5a:ac:42:a8:30:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:04 2024 GMT
            Not After : Mar  4 18:07:04 2025 GMT
        Subject: CN=35B6ECE25BBDBA79B8D89572F5B3D9B135A09B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:91:7a:31:52:18:b4:8e:64:9f:85:1c:c2:
                    c8:f6:9c:57:c3:19:db:51:3e:8e:dc:7f:cc:7c:37:
                    07:38:99:ce:25:fa:be:1a:81:db:ab:0e:48:e8:26:
                    13:5a:2d:b4:bc:a8:93:7d:e8:79:81:84:ff:95:f5:
                    fc:18:ef:07:77:16:1d:4c:3e:c1:bf:b5:f6:60:e4:
                    30:28:68:99:d2:ee:6b:50:6b:4c:29:fb:fd:fe:69:
                    40:94:e2:41:5a:8a:c3:b9:e2:41:c6:94:79:88:0e:
                    87:8f:d1:42:db:4d:5d:59:be:35:c9:5e:44:21:1a:
                    7c:5c:ef:72:60:ee:ba:6a:ef:34:8d:94:22:b2:0b:
                    0e:a1:71:2a:a7:e6:ea:e1:1e:d1:49:5e:fc:0d:15:
                    59:ab:a2:a4:4d:e3:3c:19:ff:10:87:58:27:c3:b1:
                    8a:fc:0a:87:9b:29:e0:61:6a:3f:56:f3:0f:37:40:
                    6f:a8:81:f5:fa:74:f1:2a:90:d2:fc:2c:08:c8:a9:
                    80:37:ac:e0:3d:11:47:9e:08:d3:7c:de:9c:9f:02:
                    b8:ed:db:e7:2d:b5:26:6e:7e:c6:12:80:80:2b:d4:
                    2a:53:f7:1d:fa:de:97:01:ac:28:13:2e:0a:45:0d:
                    bc:e0:ed:a1:fe:48:80:cc:06:aa:22:ce:3b:4c:83:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B6:EC:E2:5B:BD:BA:79:B8:D8:95:72:F5:B3:D9:B1:35:A0:9B:1C
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37392e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:54:55:1f:f3:f4:f9:ed:84:e7:7c:e7:59:f4:c6:3d:6a:1a:
         28:52:43:23:d1:84:fd:99:68:e1:22:39:33:54:ae:3b:c4:d5:
         92:34:ff:87:0d:4f:c5:e6:2e:69:ce:89:ad:b3:a2:ce:f7:c0:
         4e:dc:4d:b6:77:ca:68:91:81:a0:6b:0f:95:08:b0:43:7b:38:
         43:b2:b4:3b:28:29:47:d9:29:9b:12:d3:04:83:c1:ac:d1:97:
         14:0d:5f:c2:84:a1:a2:d9:a9:cc:74:aa:e5:31:02:e6:9f:04:
         e8:e8:4d:a3:86:73:ed:64:b1:96:b6:a1:5a:91:6d:7d:b8:4d:
         14:aa:4b:88:a4:db:14:cc:03:7e:61:eb:cd:f8:fa:9d:e2:af:
         38:e2:3e:41:cd:ca:45:e4:ca:81:26:05:da:22:4f:a0:88:fc:
         80:64:8e:89:c7:c4:b5:cd:a2:74:34:5d:6d:ed:9b:fd:2b:f6:
         1f:5c:2f:34:fd:a3:ba:46:c5:58:33:4d:69:e6:24:5a:0b:07:
         5e:5a:6a:38:42:5c:52:21:96:bc:99:69:8c:af:7e:7a:bc:49:
         db:a2:5d:98:48:65:19:b3:41:61:7a:92:39:d6:c1:4f:58:a6:
         9c:1f:8b:2c:f8:d0:91:62:bb:2b:e5:9c:c4:49:3e:a9:ce:79:
         db:32:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:08 2024 by rpki-client on console-fra.rpki-client.org