Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa
File:                     3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          Ywwb1rdlEUKn9U5rESn+t0UTTKW22HAHCKjfCeoGYow=
Subject key identifier:   09:B0:27:1A:81:04:FB:62:69:78:A5:EB:E1:95:39:24:FF:A2:48:9A
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       1DB6ECAAB8D3C9E68A157821EF2BA5E083B05DC4
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 04 Feb 2025 18:06:37 +0000
ROA not before:           Tue 04 Feb 2025 18:01:37 +0000
ROA not after:            Tue 03 Feb 2026 18:06:37 +0000
asID:                     52362
IP address blocks:        190.104.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b6:ec:aa:b8:d3:c9:e6:8a:15:78:21:ef:2b:a5:e0:83:b0:5d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:37 2025 GMT
            Not After : Feb  3 18:06:37 2026 GMT
        Subject: CN=09B0271A8104FB626978A5EBE1953924FFA2489A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:ed:e5:22:cb:e9:ec:39:8c:b5:1e:86:f2:
                    f4:d2:15:57:00:57:88:1d:51:92:c2:8f:ed:40:0a:
                    af:53:b5:a3:fa:b7:2f:ae:22:0c:f1:e1:fd:c6:d1:
                    8d:b1:cb:a3:33:0a:82:e0:3e:a5:55:30:5f:e0:f0:
                    36:e2:11:27:72:08:a3:29:1a:0f:ea:f4:6f:44:9f:
                    34:ef:21:56:a9:98:71:84:61:10:cf:90:57:bc:c6:
                    e6:72:ce:9b:04:f5:f4:a9:ed:93:65:a8:b6:be:25:
                    28:d1:26:49:84:e8:3e:f0:07:19:ae:48:07:67:23:
                    c4:23:0d:87:28:73:38:71:72:cc:00:0a:88:23:25:
                    47:8e:51:ab:f9:25:dd:36:78:6b:35:78:ea:a3:17:
                    1e:ac:10:54:8d:ef:fd:3b:84:30:ac:89:42:c3:fb:
                    0b:2c:29:19:3e:d8:8b:8e:54:fb:ba:c7:c8:4f:ea:
                    21:23:ef:ed:e7:0e:cf:4b:4e:dc:2a:b4:76:ef:ff:
                    81:d6:1c:b8:03:a8:6c:66:9e:85:32:f0:bc:d8:a2:
                    5b:46:ec:81:fc:cd:68:35:df:bd:24:31:3c:91:a5:
                    54:e6:38:78:f5:e7:74:da:fe:79:9f:03:2c:0a:f9:
                    5a:fa:f6:01:1c:56:b0:f0:f6:2f:c7:22:67:17:d9:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B0:27:1A:81:04:FB:62:69:78:A5:EB:E1:95:39:24:FF:A2:48:9A
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:8d:a9:41:a5:dc:6a:70:44:f0:25:12:0e:49:cd:b7:25:
         0c:42:97:c1:e3:d9:f7:2f:5e:07:e0:f6:5c:7e:9d:34:8e:c7:
         a5:27:c4:51:a8:7b:b4:5e:29:64:09:6d:a5:e6:97:b5:f0:80:
         9d:65:3b:4c:56:e3:d8:22:f3:3f:35:e8:b7:7b:fe:6f:dd:e4:
         b4:83:f1:67:ee:97:b3:62:38:16:b8:94:e2:c4:38:42:f4:6a:
         88:3a:ab:00:45:12:72:1a:da:77:12:99:73:1e:35:9c:12:ad:
         76:8d:f4:2f:57:55:67:cc:c5:9f:48:c0:23:7f:e2:1c:c2:28:
         c7:f4:0f:12:7b:ee:1a:a4:73:1b:21:83:ba:60:a3:b9:35:f6:
         df:71:bb:6a:5e:c3:76:60:e5:17:f5:5b:c8:3a:f4:06:de:c3:
         2d:fb:d6:6f:54:a9:69:ec:8d:4c:cf:a6:9f:03:3d:08:98:61:
         54:ec:56:85:ea:8e:9f:ee:b2:f8:dc:ec:78:56:ce:a0:db:c1:
         82:13:46:d8:08:35:3e:82:45:a2:56:95:a3:02:16:d7:30:74:
         99:23:aa:1f:ce:50:0d:07:65:2c:18:d9:31:fd:e6:f6:79:dd:
         6e:a6:e5:9c:80:27:aa:aa:4e:9c:4f:d8:29:55:da:c8:51:64:
         be:66:dd:4e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHbbsqrjTyeaKFXgh7yul4IOwXcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNTAyMDQxODAxMzdaFw0yNjAyMDMxODA2MzdaMDMxMTAvBgNV
BAMTKDA5QjAyNzFBODEwNEZCNjI2OTc4QTVFQkUxOTUzOTI0RkZBMjQ4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGO3lIsvp7DmMtR6G8vTSFVcA
V4gdUZLCj+1ACq9TtaP6ty+uIgzx4f3G0Y2xy6MzCoLgPqVVMF/g8DbiESdyCKMp
Gg/q9G9EnzTvIVapmHGEYRDPkFe8xuZyzpsE9fSp7ZNlqLa+JSjRJkmE6D7wBxmu
SAdnI8QjDYcoczhxcswACogjJUeOUav5Jd02eGs1eOqjFx6sEFSN7/07hDCsiULD
+wssKRk+2IuOVPu6x8hP6iEj7+3nDs9LTtwqtHbv/4HWHLgDqGxmnoUy8LzYoltG
7IH8zWg1370kMTyRpVTmOHj153Ta/nmfAywK+Vr69gEcVrDw9i/HImcX2fntAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCbAnGoEE+2JpeKXr4ZU5JP+iSJowHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzMxMzkzMDJlMzEzMDM0MmUzMTMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmhw
MA0GCSqGSIb3DQEBCwUAA4IBAQBsLo2pQaXcanBE8CUSDknNtyUMQpfB49n3L14H
4PZcfp00jselJ8RRqHu0XilkCW2l5pe18ICdZTtMVuPYIvM/Nei3e/5v3eS0g/Fn
7pezYjgWuJTixDhC9GqIOqsARRJyGtp3EplzHjWcEq12jfQvV1VnzMWfSMAjf+Ic
wijH9A8Se+4apHMbIYO6YKO5NfbfcbtqXsN2YOUX9VvIOvQG3sMt+9ZvVKlp7I1M
z6afAz0ImGFU7FaF6o6f7rL43Ox4Vs6g28GCE0bYCDU+gkWiVpWjAhbXMHSZI6of
zlANB2UsGNkx/eb2ed1upuWcgCeqqk6cT9gpVdrIUWS+Zt1O
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:56:54 2025 by rpki-client