Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e38302e302f32302d3234203d3e203132313237.roa
File:                     3139302e35372e38302e302f32302d3234203d3e203132313237.roa (raw, json)
Hash identifier:          /BKn/Ee5MboSizfppS8HxFpTwNw6nAaGsA9k/N3Wleg=
Subject key identifier:   3C:E5:A0:48:80:AE:C8:48:5E:08:88:C2:44:0B:47:B8:27:88:07:19
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       6AB5ACF846AE4293BFA80E37A8C020C1E6521B64
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e38302e302f32302d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:30 +0000
ROA not before:           Tue 04 Feb 2025 18:46:30 +0000
ROA not after:            Tue 03 Feb 2026 18:51:30 +0000
asID:                     12127
IP address blocks:        190.57.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b5:ac:f8:46:ae:42:93:bf:a8:0e:37:a8:c0:20:c1:e6:52:1b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:30 2025 GMT
            Not After : Feb  3 18:51:30 2026 GMT
        Subject: CN=3CE5A04880AEC8485E0888C2440B47B827880719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:ea:b6:29:1b:b6:b3:8d:78:10:e7:4d:57:
                    f5:20:ee:bb:68:f6:31:f0:44:fe:68:00:d3:e1:a0:
                    09:8f:f3:9d:ad:b5:dd:0d:86:a5:40:37:2e:16:c0:
                    46:3f:07:31:2d:ff:d6:65:d5:5f:55:65:fc:bc:e5:
                    63:71:c8:a9:47:ce:af:61:53:9b:31:24:ed:6b:65:
                    7e:fe:11:3f:33:12:93:64:a0:8a:49:5c:9e:a0:d7:
                    08:68:62:04:1f:1b:0c:b1:81:fd:e4:1f:a6:2f:41:
                    7f:56:dc:2e:3c:91:68:31:c9:ea:e5:63:6b:d2:d4:
                    7d:56:75:cb:10:dc:3c:a2:15:71:24:b4:4e:13:40:
                    a5:64:43:05:ea:7c:47:f5:ec:10:5d:6b:29:24:12:
                    d1:8a:4b:7d:54:63:c3:e0:e9:13:e6:f7:c7:f4:8a:
                    41:ad:48:a3:bf:e3:d1:e1:2f:64:10:83:d9:88:cd:
                    4d:d6:8b:7c:96:dd:50:8d:2c:e1:61:6e:a7:2d:ef:
                    70:3a:5b:e1:6b:f0:2a:f5:2f:be:81:ea:39:cc:58:
                    22:e0:b3:2d:76:95:19:65:10:9d:b9:41:b3:ce:32:
                    dd:dc:7f:b3:c3:59:d0:d5:3a:fa:95:a3:d0:b4:7d:
                    e8:e0:f8:c5:08:62:3a:1b:0b:6c:6d:8b:39:5c:0f:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E5:A0:48:80:AE:C8:48:5E:08:88:C2:44:0B:47:B8:27:88:07:19
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e38302e302f32302d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:64:a9:9f:34:18:4c:5e:da:41:4d:3b:9f:16:60:ae:0b:bf:
         4b:e2:73:d7:75:e2:95:82:51:a9:b7:01:a5:ca:5c:94:a1:88:
         a3:3b:05:33:6a:f6:0f:9b:61:a8:31:b5:cd:2a:bd:34:cf:1c:
         72:75:6c:ce:e5:0b:4e:a1:a3:07:17:2a:3b:65:a2:c2:da:fa:
         04:70:55:75:c0:62:e9:d2:81:d6:46:c6:b4:50:d1:6a:bc:0e:
         9e:77:54:ae:f2:4d:d9:80:d8:39:61:6e:49:8b:ce:3e:63:b6:
         2b:a1:da:5b:0e:d4:91:71:6a:ba:d9:89:9f:b3:86:98:33:a6:
         63:03:3d:9f:89:51:ff:5c:8b:ab:00:0b:7c:5e:7a:e4:09:24:
         14:7f:d8:4b:c9:d3:60:bb:ab:2a:2d:85:80:89:f6:f9:dd:ca:
         80:57:ee:63:53:5a:7b:03:1e:56:07:09:69:70:2e:1b:2e:8a:
         2c:1a:ff:8e:6a:74:54:7b:d2:de:a9:3d:3e:5e:bb:52:85:0b:
         8e:02:dd:ce:3f:d5:ba:07:9d:7d:5f:90:ad:a1:da:b9:31:db:
         c8:35:e9:03:2f:81:f2:11:ac:22:32:c6:92:af:6b:e7:36:aa:
         3c:fc:c8:f9:30:db:37:5e:a9:08:f7:9a:a0:f9:9a:ea:8b:f8:
         a5:0f:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:51 2025 by rpki-client