Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e203132313237.roa
File:                     3139302e35372e382e302f32312d3234203d3e203132313237.roa (raw, json)
Hash identifier:          dW666FTaUFO+nT7xJrDh+G3LXYTZfXxnz+dnmUdJPXI=
Subject key identifier:   12:51:3B:DB:2B:6F:B4:0B:26:3D:EE:2F:90:F9:F4:C0:EB:A4:1C:0C
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       45E271358E3D8CB920DD9888867692091020DF98
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:36 +0000
ROA not before:           Tue 04 Feb 2025 18:46:36 +0000
ROA not after:            Tue 03 Feb 2026 18:51:36 +0000
asID:                     12127
IP address blocks:        190.57.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:71:35:8e:3d:8c:b9:20:dd:98:88:86:76:92:09:10:20:df:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:36 2025 GMT
            Not After : Feb  3 18:51:36 2026 GMT
        Subject: CN=12513BDB2B6FB40B263DEE2F90F9F4C0EBA41C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:f1:92:43:6b:2b:4c:cf:33:1d:ef:43:ce:
                    a6:80:e6:47:97:6a:f8:2d:4b:93:45:62:b1:61:29:
                    79:01:80:37:fe:b8:6e:11:df:ce:56:ff:ff:85:b2:
                    45:03:9f:04:15:f4:6c:fc:2d:49:4d:9a:bf:bf:9c:
                    34:1f:cd:eb:ff:f7:db:57:59:a7:86:41:b6:0b:7c:
                    f3:58:b9:ee:f2:ad:fe:31:23:6a:b3:60:9c:4f:9e:
                    39:c8:f7:0c:3a:13:cd:1d:ef:00:85:cc:52:8f:4d:
                    4b:c0:61:66:c7:62:8b:1e:2f:22:22:3e:45:24:10:
                    47:97:52:a2:62:07:f1:11:8f:fe:e1:f9:cd:2f:04:
                    0b:bf:46:4c:57:47:e8:bc:af:5e:94:c8:d7:4e:81:
                    12:08:9a:c0:2d:bd:76:98:f4:92:d3:5f:21:01:df:
                    22:6b:c9:91:d7:ea:55:e7:30:d7:04:da:07:5d:60:
                    51:7b:f4:12:74:43:18:fe:cb:f4:3a:c2:18:31:5a:
                    6b:9e:78:55:61:ef:16:00:a8:f8:72:de:d1:dd:27:
                    0e:c4:10:9b:90:15:a2:96:e1:e9:2d:ee:ab:61:9b:
                    2b:54:1c:35:ab:d9:0e:c6:9d:96:b4:c1:d8:32:b6:
                    48:2a:93:7a:95:4c:00:8c:ea:b0:1f:d3:78:6b:7a:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:51:3B:DB:2B:6F:B4:0B:26:3D:EE:2F:90:F9:F4:C0:EB:A4:1C:0C
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:1c:7e:5c:b7:f9:27:e6:1c:03:e3:1c:2e:0b:d8:79:ad:
         98:f7:b1:df:15:4a:a2:fa:ee:5d:af:b6:64:2d:53:00:d2:64:
         3a:d2:c8:e8:05:e8:2a:a2:0f:92:9c:a1:81:f7:fe:6f:3f:54:
         47:b1:61:8f:e5:19:6c:1a:36:5c:b2:ec:1c:da:c3:81:e7:30:
         4c:df:39:54:6a:ce:5a:d8:cf:71:3d:d0:64:9f:c7:97:5e:61:
         fe:70:8b:f8:19:93:48:60:4c:ec:0c:c3:2a:5b:aa:72:c8:92:
         34:32:95:43:e9:fe:95:07:24:c6:29:d5:20:0b:a4:f7:46:30:
         cb:a3:e3:89:1b:4b:94:37:6b:2b:d2:40:bf:a3:59:e0:87:92:
         f9:c5:35:db:66:be:58:dc:ee:c6:92:fa:14:53:8f:40:65:a9:
         b0:25:7b:96:bc:fe:d2:09:2c:8e:11:ae:9a:ec:47:5c:12:f7:
         17:bc:19:a3:e1:3b:bb:84:3c:8c:d1:cf:59:0b:e4:5a:88:80:
         69:2d:55:fe:25:0f:49:fb:05:3b:dd:74:19:61:0e:93:b5:8d:
         31:01:a4:3e:f6:1b:48:fe:82:1e:a8:68:18:0a:03:ac:e1:93:
         e1:98:37:4a:e2:e6:14:52:aa:ec:e9:fd:e1:58:11:2f:74:12:
         d4:6c:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:18 2025 by rpki-client