Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa
File:                     3139302e35372e382e302f32312d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          MTbeTHGpD6E8ChdNAVJTPih2gLaTz4I09Zq2dKmRG6o=
Subject key identifier:   7D:42:50:BB:32:DA:D1:AB:34:32:1D:D6:D5:CF:88:12:36:86:91:BF
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       542DACF57ACD9CE3C12F89BE6CA8D55377B7094E
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:06:46 +0000
ROA not before:           Tue 05 Mar 2024 18:01:46 +0000
ROA not after:            Tue 04 Mar 2025 18:06:46 +0000
asID:                     263783
IP address blocks:        190.57.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2d:ac:f5:7a:cd:9c:e3:c1:2f:89:be:6c:a8:d5:53:77:b7:09:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:46 2024 GMT
            Not After : Mar  4 18:06:46 2025 GMT
        Subject: CN=7D4250BB32DAD1AB34321DD6D5CF8812368691BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:18:4a:0a:82:88:1b:67:ca:b3:ba:28:21:
                    97:fb:ff:94:b2:0c:df:3d:dd:e3:4e:36:d0:88:0c:
                    9e:25:5b:52:89:67:b3:a5:a0:54:26:16:b4:ee:21:
                    86:19:fb:fa:8d:90:77:2a:97:d3:76:ab:4b:f9:b8:
                    2e:94:63:30:cd:ce:18:f0:6f:2e:ed:3b:8d:e5:2e:
                    61:ea:1f:df:2d:2f:9f:6b:7f:57:46:fe:3f:e6:11:
                    25:a5:58:82:71:84:25:de:b2:73:ba:fb:8f:f3:3b:
                    0f:f2:69:66:a6:fb:0d:35:e8:78:60:fa:9c:95:3e:
                    7d:65:b3:c5:57:c5:9f:2c:5b:5c:84:ee:94:cc:33:
                    07:42:45:78:6d:14:db:4d:58:a2:2a:12:af:64:4a:
                    95:3d:f0:86:52:ee:b6:78:7a:0f:e1:d3:2c:c7:84:
                    b8:87:c2:9c:28:f1:75:b8:41:e0:c8:7a:b3:5a:25:
                    e1:98:df:f7:1b:1f:a2:0b:a8:e6:14:b2:af:95:8a:
                    59:80:f1:cb:3b:89:8a:33:42:82:32:7d:0d:59:76:
                    5b:25:b2:fe:65:75:7a:40:e0:29:3b:4e:40:59:b2:
                    66:6a:1b:a3:23:51:1d:8d:36:e9:bc:50:52:47:f7:
                    1e:ef:2c:c4:46:71:66:76:87:87:27:8c:77:11:7e:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:50:BB:32:DA:D1:AB:34:32:1D:D6:D5:CF:88:12:36:86:91:BF
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c9:40:8e:07:23:ca:62:e5:bd:59:54:80:7e:4e:cb:b2:77:b0:
         e0:0d:61:0b:94:43:df:99:9a:9f:bb:c2:34:b2:77:bf:a6:26:
         f5:9a:a2:d7:30:9c:03:d2:d1:9d:e1:c1:df:85:48:b4:77:9c:
         e4:8f:71:92:cc:64:29:a4:d0:01:08:bd:ae:81:4a:67:f6:2f:
         73:ee:d2:90:f1:91:ad:01:2e:41:13:7f:54:07:6c:d8:6b:5b:
         4d:e1:e5:69:ba:2d:8c:9e:34:28:2c:83:6c:e9:eb:fd:fd:3d:
         c4:b7:d2:41:38:36:49:3d:60:7e:bb:9c:f9:45:01:ba:da:19:
         90:30:f9:f2:9f:ca:df:d2:e4:e3:5a:07:bc:6a:03:f9:bc:c7:
         cb:03:0d:cc:a4:8a:5f:27:18:f2:8a:d9:54:cb:b7:fb:30:7f:
         0a:44:98:15:89:57:94:79:c1:5f:fd:0f:aa:9e:7e:c5:2a:ed:
         79:a5:39:f9:19:39:bf:eb:6b:fd:64:3d:de:0a:a5:47:fa:dc:
         a8:c8:40:7f:33:09:70:43:b5:3e:a1:3d:f3:00:56:08:2a:96:
         31:85:14:2f:9c:64:59:27:c5:2e:49:63:64:39:d3:55:93:23:
         b8:98:18:fd:f7:aa:17:0c:9a:26:40:73:69:70:c5:c1:5a:74:
         65:c9:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:33 2024 by rpki-client on console-fra.rpki-client.org