Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131332e302f32342d3234203d3e203236363137.roa
File:                     3139302e3130342e3131332e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          99pNDwnyY7BJC7K9kT/poqcOlHF6hpNszkR6OrPlarA=
Subject key identifier:   27:67:FC:79:D2:6F:BE:DD:9C:AC:FA:63:A0:7C:47:CE:07:1E:C4:0B
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       3DFC111F72546BFDFF772BFBFC8CEA6705DEDF68
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131332e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:35 +0000
ROA not before:           Tue 04 Feb 2025 18:01:35 +0000
ROA not after:            Tue 03 Feb 2026 18:06:35 +0000
asID:                     26617
IP address blocks:        190.104.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fc:11:1f:72:54:6b:fd:ff:77:2b:fb:fc:8c:ea:67:05:de:df:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:35 2025 GMT
            Not After : Feb  3 18:06:35 2026 GMT
        Subject: CN=2767FC79D26FBEDD9CACFA63A07C47CE071EC40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:09:40:39:0d:d0:da:cd:eb:10:fe:c3:b9:
                    80:af:aa:41:2e:55:36:ed:12:a1:2a:15:9c:f0:a8:
                    4a:04:f8:76:b4:a6:69:12:55:ef:98:cb:79:39:03:
                    3c:fc:6e:8b:ee:f0:5a:da:f4:f2:b5:23:a4:7e:be:
                    ac:68:83:9f:12:db:d1:1f:dc:7a:87:ea:2f:75:6a:
                    8f:36:32:a7:6a:27:95:3f:70:8d:37:49:32:96:de:
                    b7:5e:20:da:89:1e:64:c9:76:80:8e:bf:37:33:3d:
                    10:d1:16:d7:8f:08:53:a2:fc:42:f6:a1:47:d5:31:
                    5d:da:ad:64:01:cd:02:3d:1b:aa:9e:4e:00:34:4a:
                    71:41:85:36:91:93:93:72:9d:90:a4:59:da:46:49:
                    b2:88:c3:5d:9c:cb:b9:ce:89:c9:fe:ad:d4:a1:b2:
                    f2:6f:32:3e:cb:d5:c1:6e:d9:c3:0f:a3:b3:22:db:
                    c4:c7:fb:fd:ef:0d:83:46:4b:f3:c3:24:85:90:b3:
                    32:54:a7:93:45:45:4f:d3:99:32:fe:db:33:4d:11:
                    c1:75:e5:c6:86:5b:6d:c0:80:98:5f:9c:d7:73:8c:
                    d2:de:7e:47:4b:d5:a4:a6:db:dd:8e:c6:4d:f4:7b:
                    fa:41:04:16:cc:6e:3e:d6:fe:b1:ee:ce:48:21:f9:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:67:FC:79:D2:6F:BE:DD:9C:AC:FA:63:A0:7C:47:CE:07:1E:C4:0B
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131332e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:14:cd:e8:60:7d:20:5f:ef:77:95:79:be:3a:fe:a1:2e:12:
         ef:a9:c4:c8:a9:95:20:ad:ae:e3:3c:7a:55:aa:26:c2:ce:9e:
         95:58:d6:fb:e5:f1:61:79:42:bf:15:35:bd:d3:32:91:1f:a1:
         cb:c4:e8:e0:3c:94:75:1e:5d:8c:eb:cb:26:81:e9:d0:f2:a4:
         3b:75:03:42:d6:7b:26:b1:5f:0d:f1:89:56:f7:29:0c:bf:86:
         4b:6d:f2:95:a7:34:19:61:74:08:7a:fc:9f:95:40:5d:a2:1c:
         25:3b:0a:1c:be:7b:93:b2:bb:3c:60:68:40:e6:cd:a6:3c:46:
         1e:b5:c0:c6:23:fe:e8:27:4d:f2:80:c8:5d:cd:c4:dc:f2:e3:
         45:1c:80:84:7b:00:9b:f9:0e:8a:f5:97:9d:61:ae:0c:ab:88:
         56:9c:32:b7:f7:1f:58:00:4e:54:0d:8f:74:e9:25:d0:d4:1f:
         cb:ca:19:b3:8e:3d:7a:ba:68:fb:c0:64:b8:d5:1c:6b:bf:a8:
         d3:26:3a:b7:de:60:e4:eb:44:f8:63:64:48:e6:bf:a1:29:c0:
         7d:05:88:ba:7a:33:6c:bf:84:7e:0d:dd:04:df:a1:26:5b:6a:
         b0:ea:51:6b:81:d5:33:d1:ee:10:c5:4e:a8:74:29:86:5c:23:
         e1:fc:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:01 2025 by rpki-client