Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/3139302e3132332e31342e302f32342d3234203d3e203532343233.roa
File:                     3139302e3132332e31342e302f32342d3234203d3e203532343233.roa (raw, json)
Hash identifier:          g30J5BVjFTOMahPpYN6Slq9K0bNFspVl6Ws36XN/tv0=
Subject key identifier:   31:99:1E:31:25:AA:5C:8E:B7:69:3D:42:7F:FC:85:FC:CE:21:6C:56
Certificate issuer:       /CN=1194051239F45F659AED4103422CF78311E1B146
Certificate serial:       2700DA57A1DD74B672E9F3373CA1B479A28190E3
Authority key identifier: 11:94:05:12:39:F4:5F:65:9A:ED:41:03:42:2C:F7:83:11:E1:B1:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/3139302e3132332e31342e302f32342d3234203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:39:30 +0000
ROA not before:           Tue 04 Feb 2025 18:34:30 +0000
ROA not after:            Tue 03 Feb 2026 18:39:30 +0000
asID:                     52423
IP address blocks:        190.123.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/1194051239F45F659AED4103422CF78311E1B146.crl
                          rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/1194051239F45F659AED4103422CF78311E1B146.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 04:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:00:da:57:a1:dd:74:b6:72:e9:f3:37:3c:a1:b4:79:a2:81:90:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1194051239F45F659AED4103422CF78311E1B146
        Validity
            Not Before: Feb  4 18:34:30 2025 GMT
            Not After : Feb  3 18:39:30 2026 GMT
        Subject: CN=31991E3125AA5C8EB7693D427FFC85FCCE216C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:86:6c:9e:64:21:cf:a5:1c:d8:2b:1e:1a:
                    44:82:de:63:60:e5:8e:b6:52:05:02:51:69:ed:3b:
                    8c:c0:a2:1d:7b:46:a8:b2:ac:e0:1c:26:a3:b7:68:
                    93:57:7c:8e:ee:15:82:2e:94:3a:02:15:8f:d3:3c:
                    0c:c3:8d:1a:52:c6:ab:01:b7:7f:6c:eb:06:99:f1:
                    d2:ac:08:aa:9a:d9:fb:33:8d:77:19:49:23:f3:c5:
                    4f:b0:cb:82:60:fd:70:35:66:80:6a:1f:1c:38:de:
                    e4:21:cd:63:9d:67:4f:5e:c8:6d:e1:9f:dc:69:01:
                    d7:f7:03:84:81:b6:ff:9d:3f:65:40:e2:ed:33:2d:
                    60:43:86:be:63:15:c7:26:3e:1c:b4:83:66:89:67:
                    eb:e4:81:c9:ca:80:b3:77:52:c1:e4:e5:e0:20:5d:
                    1f:92:1f:09:10:d1:50:84:59:36:d8:4e:7c:49:c9:
                    7a:0f:e8:7a:15:47:95:74:77:51:9f:73:7c:b7:fa:
                    8a:40:cc:aa:2d:26:96:c7:e9:a6:5f:5c:55:47:87:
                    34:70:a9:eb:72:a3:34:3a:ee:2d:25:00:9f:49:0d:
                    6f:ff:c4:03:5b:7d:65:d3:6f:a1:52:63:dd:23:c9:
                    59:f3:6b:d1:ba:86:cb:55:70:e4:c2:7b:91:6e:3d:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:1E:31:25:AA:5C:8E:B7:69:3D:42:7F:FC:85:FC:CE:21:6C:56
            X509v3 Authority Key Identifier:
                keyid:11:94:05:12:39:F4:5F:65:9A:ED:41:03:42:2C:F7:83:11:E1:B1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/1194051239F45F659AED4103422CF78311E1B146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/3139302e3132332e31342e302f32342d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:db:30:5a:07:c1:49:51:3d:50:24:c4:24:33:6e:98:a0:
         69:8c:4c:9e:9f:f1:74:ee:ed:8d:ba:4f:7b:1f:b0:5e:88:b4:
         52:08:3c:2a:98:c9:0f:3b:02:9a:76:da:fd:c8:52:96:60:5d:
         47:d6:4e:cd:f1:a8:3e:a1:91:c9:f8:5b:61:cb:58:06:92:c3:
         7c:2f:fb:35:16:4d:39:9e:a0:e0:be:ff:64:46:59:08:df:97:
         06:cd:3e:e4:1a:1d:50:cb:82:7a:1a:92:36:f7:b0:f6:a5:5c:
         bd:76:12:92:3e:85:3b:b8:96:41:59:25:5c:97:7a:13:71:fc:
         0e:48:e2:9f:ee:49:d8:76:9a:50:7f:fb:53:97:20:50:08:bd:
         d4:9e:7a:11:75:2c:8e:40:4b:38:eb:76:47:90:7a:a5:d3:0a:
         3c:79:b9:61:d4:20:89:de:ef:b3:ec:11:84:29:15:92:45:94:
         ac:f0:6d:7e:66:0b:07:cf:36:76:07:f3:c9:22:5e:bb:0c:1c:
         ae:0c:2d:89:28:44:26:aa:37:dc:d1:10:7e:bc:39:35:56:b2:
         c3:aa:83:5d:8a:92:ca:4d:32:83:bd:9c:1d:d1:b8:3b:93:a0:
         13:7e:91:f0:3f:ad:4c:0b:6a:38:66:82:40:14:d2:6f:cb:3c:
         de:1b:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:12 2025 by rpki-client