Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e203132313237.roa
File:                     3139302e35372e39362e302f32312d3234203d3e203132313237.roa (raw, json)
Hash identifier:          dn0IoL5fhbvglSd0ZA7hZfiSToZ6SZ/TXKRARf3wc3Q=
Subject key identifier:   9A:CF:73:E0:2C:8F:5E:A0:D3:CF:99:2C:FE:3D:EA:57:91:97:A2:C4
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       48B2BFF4CBBF3365D6534482BD044B7BF15ED0AA
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:07:02 +0000
ROA not before:           Tue 05 Mar 2024 18:02:02 +0000
ROA not after:            Tue 04 Mar 2025 18:07:02 +0000
asID:                     12127
IP address blocks:        190.57.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b2:bf:f4:cb:bf:33:65:d6:53:44:82:bd:04:4b:7b:f1:5e:d0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:02 2024 GMT
            Not After : Mar  4 18:07:02 2025 GMT
        Subject: CN=9ACF73E02C8F5EA0D3CF992CFE3DEA579197A2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:72:0d:62:f0:a6:66:5e:4d:4a:b4:00:0c:
                    53:7b:2e:02:e3:3e:a3:cb:47:52:5c:c7:5f:7d:f9:
                    5b:a7:2b:cf:ce:a1:1e:e3:4a:c3:02:aa:68:ec:12:
                    92:79:db:2a:12:be:59:ca:ab:dd:2b:26:9b:86:cc:
                    39:25:72:f2:ef:94:40:d8:88:28:52:d6:63:46:99:
                    41:03:89:61:42:73:9a:94:82:31:4e:11:f3:3b:b0:
                    f3:11:05:0d:9a:71:98:46:67:c3:ec:e4:0c:27:34:
                    f2:c8:30:22:21:67:7e:38:46:86:0c:1b:5e:7d:35:
                    c9:86:30:c1:80:71:a6:0b:cd:31:d5:e0:1b:90:39:
                    d2:6e:41:c9:81:f0:28:03:85:13:34:e8:18:cf:57:
                    05:60:51:ce:1f:e1:41:2a:07:ee:ff:f8:01:22:c5:
                    bd:c2:16:55:e2:bb:2c:c7:33:42:99:72:82:3b:93:
                    d7:7e:c9:03:b3:70:5c:25:a4:aa:35:77:46:ae:69:
                    40:65:39:df:dc:6c:a0:5e:2f:81:97:4c:bf:08:f3:
                    61:85:4e:f9:52:7d:0f:72:81:47:d0:ba:72:3c:26:
                    c6:96:55:e3:32:e6:37:09:2a:2a:a1:73:a9:dc:94:
                    00:b1:d1:3f:5a:cd:24:1c:b4:3f:3f:fd:aa:ef:73:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:73:E0:2C:8F:5E:A0:D3:CF:99:2C:FE:3D:EA:57:91:97:A2:C4
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:a8:dd:cd:3d:31:37:86:01:51:54:b0:6c:29:76:eb:82:
         e0:f8:31:22:e7:f2:68:6f:3e:a4:21:cd:47:e7:83:ef:4f:6b:
         86:e0:10:74:eb:a7:b3:35:9e:31:ed:c7:d0:21:ec:d9:bb:9b:
         b4:f3:0b:8f:e0:67:db:9f:d6:32:97:29:92:f6:d7:9f:12:94:
         8f:e3:7c:1f:2d:a3:b4:45:4e:22:85:c8:50:67:f8:31:d6:af:
         c4:c4:b0:3f:7f:35:29:65:fa:ca:b4:71:fe:1e:c9:2b:a5:fb:
         5a:ab:58:68:6a:ef:c8:38:f6:48:aa:65:65:0e:48:f9:3c:95:
         d9:9c:00:19:65:7c:48:10:40:08:72:30:2c:64:fe:d3:44:b4:
         b9:9d:db:aa:87:e2:0a:a9:a3:27:1e:05:76:30:8f:de:41:7f:
         de:c3:77:57:76:0a:e1:a0:1d:89:7f:4b:30:57:2c:4b:2a:ac:
         40:1b:49:69:27:1e:8e:36:96:e5:f5:5a:40:63:f0:a4:6d:84:
         c3:6d:60:86:0f:8d:91:25:79:25:7f:eb:b9:0d:92:73:8c:72:
         7b:2b:1a:e1:8b:13:bf:48:fc:e7:73:96:be:2c:eb:4b:bf:9c:
         1c:de:4b:24:36:7b:4d:a6:a6:4c:4f:1b:9f:08:6d:86:00:44:
         c0:2d:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:33 2024 by rpki-client on console-fra.rpki-client.org