Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa
File:                     3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          BM+YrejYSwtlgDTM5BuHyFYZfV+fQiI9UBceW9IKky4=
Subject key identifier:   C1:AB:37:36:B0:E3:B1:68:26:C3:EC:F8:55:95:59:16:A3:81:AE:0D
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       17AA685242D4181F9E347C73F7CF324836474296
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:01 +0000
ROA not before:           Tue 05 Mar 2024 17:51:01 +0000
ROA not after:            Tue 04 Mar 2025 17:56:01 +0000
asID:                     52362
IP address blocks:        190.104.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:aa:68:52:42:d4:18:1f:9e:34:7c:73:f7:cf:32:48:36:47:42:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:01 2024 GMT
            Not After : Mar  4 17:56:01 2025 GMT
        Subject: CN=C1AB3736B0E3B16826C3ECF855955916A381AE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:e0:5f:83:c9:52:ec:0e:9b:a0:2f:83:65:
                    5a:62:d0:82:3b:bd:b3:0a:bc:71:9a:1a:cd:d9:d7:
                    4b:bc:ea:e5:bf:27:9b:50:88:1e:d5:e6:9a:84:ec:
                    13:75:68:37:98:fb:fe:a0:e0:f2:1d:cf:3a:4c:1f:
                    49:42:15:32:65:a4:09:ee:67:9c:50:18:a3:e3:2c:
                    74:1b:4e:9d:45:f2:45:5a:ad:02:90:1c:34:d6:de:
                    f6:3c:fd:80:42:f8:c2:7a:f4:e8:df:dc:b7:91:75:
                    53:be:0f:34:53:51:12:67:8a:2c:3a:b1:8e:90:d6:
                    db:d9:f2:6c:99:ed:9c:fc:0c:07:2e:b3:15:d1:e1:
                    58:1d:57:59:c1:17:2a:d1:e9:f7:e4:05:0d:e2:95:
                    19:e8:32:a5:84:c4:5c:0d:22:e6:43:4c:9e:99:ac:
                    44:aa:c5:90:a6:fb:0f:8b:c2:8b:81:23:08:40:a2:
                    ca:8e:12:9f:80:f1:d3:26:bb:a6:ee:69:fb:92:16:
                    ce:a2:85:f0:ec:b9:28:4b:c9:d3:d1:9e:8f:f2:79:
                    01:5d:8a:1a:73:44:16:2f:3c:27:a1:d1:54:1f:43:
                    91:fe:c1:91:ea:64:7c:41:2a:a5:52:3b:1c:70:e8:
                    2d:77:d1:38:96:fe:06:82:cd:5a:29:94:b4:ab:90:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AB:37:36:B0:E3:B1:68:26:C3:EC:F8:55:95:59:16:A3:81:AE:0D
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131322e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:80:98:78:19:13:8b:5e:4c:08:3e:45:27:2e:fa:c8:92:39:
         73:7b:e1:cd:33:d6:23:51:d8:3d:42:77:46:62:c0:d9:5a:e1:
         ec:24:fd:e4:31:bc:5d:35:9f:de:b6:e2:50:6e:3b:6a:70:bc:
         c4:46:93:70:86:1c:9d:cf:87:18:3a:49:15:98:9a:21:50:c9:
         85:77:d3:7b:1c:84:87:d5:3e:06:07:e8:98:9d:7e:7c:b4:dd:
         a8:db:bb:92:ba:79:52:12:1f:8a:e2:be:1a:f3:ff:f0:8a:ae:
         eb:9b:27:7c:d8:61:93:b2:e9:0e:d9:4e:44:8e:fc:03:67:71:
         e4:78:0a:22:c9:b7:9d:f5:e0:75:43:cd:96:35:57:a1:52:b9:
         e0:bc:f9:96:85:38:88:90:04:f2:81:c2:0c:85:12:93:d6:22:
         ee:9f:b9:da:93:5b:88:45:d0:04:9b:68:23:4f:33:ee:07:45:
         d1:b2:58:eb:20:40:80:12:d0:fa:51:e0:ba:44:f6:a6:24:96:
         72:a9:9d:c4:25:82:68:76:6e:e3:de:0b:d5:03:e5:d5:28:8b:
         eb:a5:e2:f1:fe:d1:3e:2b:2c:a0:b5:9e:13:97:2f:f4:69:dd:
         f3:8f:96:5f:cd:b9:ca:b1:eb:59:f4:92:bf:8b:ed:20:92:06:
         29:d6:15:85
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUF6poUkLUGB+eNHxz988ySDZHQpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNDAzMDUxNzUxMDFaFw0yNTAzMDQxNzU2MDFaMDMxMTAvBgNV
BAMTKEMxQUIzNzM2QjBFM0IxNjgyNkMzRUNGODU1OTU1OTE2QTM4MUFFMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtieBfg8lS7A6boC+DZVpi0II7
vbMKvHGaGs3Z10u86uW/J5tQiB7V5pqE7BN1aDeY+/6g4PIdzzpMH0lCFTJlpAnu
Z5xQGKPjLHQbTp1F8kVarQKQHDTW3vY8/YBC+MJ69Ojf3LeRdVO+DzRTURJniiw6
sY6Q1tvZ8myZ7Zz8DAcusxXR4VgdV1nBFyrR6ffkBQ3ilRnoMqWExFwNIuZDTJ6Z
rESqxZCm+w+LwouBIwhAosqOEp+A8dMmu6buafuSFs6ihfDsuShLydPRno/yeQFd
ihpzRBYvPCeh0VQfQ5H+wZHqZHxBKqVSOxxw6C130TiW/gaCzVoplLSrkMXzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwas3NrDjsWgmw+z4VZVZFqOBrg0wHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzMxMzkzMDJlMzEzMDM0MmUzMTMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmhw
MA0GCSqGSIb3DQEBCwUAA4IBAQC+gJh4GROLXkwIPkUnLvrIkjlze+HNM9YjUdg9
QndGYsDZWuHsJP3kMbxdNZ/etuJQbjtqcLzERpNwhhydz4cYOkkVmJohUMmFd9N7
HISH1T4GB+iYnX58tN2o27uSunlSEh+K4r4a8//wiq7rmyd82GGTsukO2U5EjvwD
Z3HkeAoiybed9eB1Q82WNVehUrngvPmWhTiIkATygcIMhRKT1iLun7nak1uIRdAE
m2gjTzPuB0XRsljrIECAEtD6UeC6RPamJJZyqZ3EJYJodm7j3gvVA+XVKIvrpeLx
/tE+KyygtZ4Tly/0ad3zj5ZfzbnKsetZ9JK/i+0gkgYp1hWF
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:12 2024 by rpki-client on console-ams.rpki-client.org