Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa
File:                     3139302e35372e382e302f32312d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          m5J2M28twWmsINAr/W+m7hfGay/ixxHlIewa+dqFkE4=
Subject key identifier:   42:30:0D:C0:7D:3B:B7:92:5D:41:21:34:68:34:6A:46:94:F3:E6:EB
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4FDB79FCE6E175FCEA03B6B0824203D0FA76025F
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:31 +0000
ROA not before:           Tue 04 Feb 2025 18:46:31 +0000
ROA not after:            Tue 03 Feb 2026 18:51:31 +0000
asID:                     263783
IP address blocks:        190.57.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:db:79:fc:e6:e1:75:fc:ea:03:b6:b0:82:42:03:d0:fa:76:02:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:31 2025 GMT
            Not After : Feb  3 18:51:31 2026 GMT
        Subject: CN=42300DC07D3BB7925D41213468346A4694F3E6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:a1:4b:f6:52:cf:05:4b:d8:e4:22:46:30:
                    16:d4:f8:38:9c:10:a0:14:4a:3f:02:37:97:9c:37:
                    e5:fb:29:2f:60:42:dc:31:29:e9:d0:e0:a1:8f:1d:
                    b3:6b:5f:49:d0:b6:a4:61:11:75:ef:f6:cb:41:22:
                    be:58:87:47:0e:1a:fd:35:78:b9:61:40:a3:5a:d6:
                    d9:62:0b:1b:78:4b:51:90:01:57:b6:25:53:ec:a0:
                    03:ca:c8:3d:37:1a:cc:db:8b:37:66:7b:22:6a:1a:
                    97:66:dc:7b:95:de:57:d8:62:2e:10:22:80:cf:a0:
                    9a:bd:96:a1:1d:fe:8a:b0:2b:a0:09:f0:22:14:dc:
                    47:63:c2:22:ec:aa:9b:fd:ca:5e:d3:34:52:e7:e4:
                    af:0b:9c:27:23:19:cf:f3:14:c1:ab:c0:3e:26:df:
                    41:3d:ea:13:32:4d:7a:84:67:3c:30:d6:58:80:21:
                    53:51:9c:ea:ac:84:e4:64:d7:5b:c5:bf:88:dd:84:
                    71:8c:31:75:47:06:74:86:d8:77:97:c0:dc:68:93:
                    5f:fc:bd:b6:3c:9c:ea:9e:8f:ef:40:5e:27:82:e2:
                    45:e7:f1:54:06:19:1c:39:19:63:e3:42:b8:74:e0:
                    99:c7:1c:f4:42:34:42:4a:7a:fb:16:bb:a1:68:ea:
                    a8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:30:0D:C0:7D:3B:B7:92:5D:41:21:34:68:34:6A:46:94:F3:E6:EB
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:23:eb:dc:85:54:50:33:24:cb:42:3e:2a:60:f9:b6:b7:
         79:06:0e:b7:a0:1a:d3:26:ca:95:80:17:0d:a2:a0:16:49:e6:
         b6:59:4b:3f:46:d1:53:0f:94:7b:79:e8:47:20:56:4d:e4:24:
         4a:35:3e:5a:39:04:f9:8e:f8:d9:16:62:8f:5d:7b:f0:d1:72:
         55:15:25:6e:e6:35:05:eb:1f:79:2c:1b:31:4f:86:64:b1:c9:
         ec:bd:13:75:6c:42:c8:f4:2b:ed:24:e1:4a:49:ce:b5:59:be:
         f1:d2:1a:d6:56:1e:9a:0d:80:80:ba:f5:0c:f6:0b:5b:5e:dc:
         47:8a:ff:d9:84:3c:b6:ca:4b:69:3a:7f:55:67:98:d3:fd:2d:
         0b:20:49:35:81:de:a2:41:be:4f:4a:c1:97:0c:38:38:4b:a5:
         1b:4c:fb:38:e3:3f:15:df:e0:68:fc:7d:da:cf:d8:cb:e3:31:
         4e:ce:74:d5:9d:87:e0:6a:d8:aa:ff:91:7b:ef:c0:c6:cc:60:
         00:5a:d4:7e:a1:37:3b:2d:54:0f:e7:62:6e:2d:c7:48:45:45:
         de:41:e1:c4:f3:af:ad:47:8b:14:67:2b:59:c7:55:40:c8:cb:
         c2:de:a9:5d:0b:c2:ed:78:0c:64:d3:b8:47:f5:39:bf:16:48:
         6f:4e:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:28 2025 by rpki-client