Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e20323633373833.roa
File:                     3139302e35372e39362e302f32312d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Hkg49PZfQ7ziXEzL6VeWjToRYym3gBqEn5Dc6jBLjvk=
Subject key identifier:   82:BF:D7:A8:20:96:42:4A:9F:BE:34:A6:ED:33:6C:D1:36:DC:5C:95
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       766128481CA0468200764E618CB37FB481B1EA88
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e20323633373833.roa
Signing time:             Tue 05 Mar 2024 18:07:00 +0000
ROA not before:           Tue 05 Mar 2024 18:02:00 +0000
ROA not after:            Tue 04 Mar 2025 18:07:00 +0000
asID:                     263783
IP address blocks:        190.57.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:61:28:48:1c:a0:46:82:00:76:4e:61:8c:b3:7f:b4:81:b1:ea:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:02:00 2024 GMT
            Not After : Mar  4 18:07:00 2025 GMT
        Subject: CN=82BFD7A82096424A9FBE34A6ED336CD136DC5C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:1c:2b:ff:34:16:7e:95:94:c4:d8:5d:bf:
                    0d:3d:a4:b6:3c:0f:40:d3:e9:4b:05:dd:39:fd:4e:
                    f4:84:4a:5f:89:a6:52:29:9f:e9:d8:0b:82:33:b2:
                    29:4c:1a:59:d0:7c:6a:e6:2e:b1:77:8f:bc:df:68:
                    0a:a6:9c:10:92:16:26:60:c8:0a:ba:94:a1:ed:09:
                    37:bd:9e:36:0a:e6:12:54:83:2e:1a:41:ca:8f:7c:
                    67:fe:1d:6f:45:22:7b:ed:73:e9:a1:df:57:cb:92:
                    fc:a7:2d:6c:f1:de:23:6e:e8:d1:01:c7:ae:2b:6d:
                    2a:56:1c:55:8b:7c:f5:1f:a4:bf:e9:73:c4:a2:37:
                    50:99:71:8c:7f:85:10:a4:ef:36:b1:d1:63:30:ba:
                    05:6d:de:1d:14:46:fa:60:03:12:c1:eb:17:77:36:
                    07:56:6d:aa:ad:72:8a:f1:c3:5c:b9:16:08:d7:ff:
                    60:ef:a8:2f:60:88:0e:6d:ae:74:34:50:1d:d8:37:
                    2b:66:4f:97:26:8d:59:c8:2e:fd:c7:f7:bd:4a:23:
                    90:df:c7:d3:6f:43:f3:95:aa:83:4a:23:14:6b:53:
                    07:f3:fe:e7:a8:86:f7:e9:d8:cd:e9:55:5b:80:2d:
                    57:8f:8c:6b:1a:21:27:26:25:53:55:31:a5:19:3f:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:D7:A8:20:96:42:4A:9F:BE:34:A6:ED:33:6C:D1:36:DC:5C:95
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:e0:17:5a:9d:66:06:a2:bc:54:d6:a0:ce:9c:4b:3f:0c:
         de:40:36:74:d5:0b:7e:c9:fd:8a:90:b8:12:9b:65:0f:f8:11:
         ed:1e:bf:d1:10:b4:ae:5d:11:b9:87:a6:ef:83:95:e4:3b:02:
         55:1a:cd:e2:aa:30:df:66:cc:56:25:cf:d8:60:dd:78:2a:14:
         b9:31:90:e6:89:89:01:89:ca:9f:4a:03:0c:8b:de:6f:91:ff:
         e9:56:09:06:d5:a8:d4:de:a1:c7:08:d4:30:bd:2f:82:c1:1c:
         47:21:a6:d7:bc:c0:08:95:85:b1:9f:7f:c3:9c:4c:46:b1:19:
         00:5e:c3:cb:56:d3:f3:52:d0:44:81:4d:44:39:e6:ba:bc:23:
         c0:37:f8:41:3f:bb:c9:14:47:8f:ed:39:e2:a9:43:b1:5d:11:
         60:5c:75:0e:b3:29:7e:fa:36:85:40:4b:82:0f:4f:6b:e4:f6:
         6d:18:ad:91:05:29:e3:df:73:19:6d:99:52:9b:2e:4f:44:bc:
         87:96:0e:9c:bb:f9:c8:4e:8c:2a:d0:f7:87:f4:77:c8:d0:b3:
         ac:3f:86:de:43:3b:17:22:bf:38:47:68:f3:6c:68:54:b8:6f:
         f8:ed:4d:a2:73:61:b2:8b:9c:26:09:d5:01:70:ea:cb:a9:b8:
         01:7d:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:35:37 2024 by rpki-client on console-ams.rpki-client.org