Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131352e302f32342d3234203d3e203532333632.roa
File:                     3139302e3130342e3131352e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          LbvK47EYElaF97mpgj65/VKx1CzG85JvW2GkiH6DSLE=
Subject key identifier:   F9:94:C1:CE:CF:1E:CC:48:2B:F8:95:59:69:1F:E2:B1:EF:96:43:A1
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       3D33D8AA43A944AAC9A4E2E5B126B6064ACC7E05
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131352e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:07 +0000
ROA not before:           Tue 05 Mar 2024 17:51:07 +0000
ROA not after:            Tue 04 Mar 2025 17:56:07 +0000
asID:                     52362
IP address blocks:        190.104.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:33:d8:aa:43:a9:44:aa:c9:a4:e2:e5:b1:26:b6:06:4a:cc:7e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:07 2024 GMT
            Not After : Mar  4 17:56:07 2025 GMT
        Subject: CN=F994C1CECF1ECC482BF89559691FE2B1EF9643A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:f6:6f:06:cc:a3:15:47:66:cf:d0:02:1f:
                    04:1e:7b:02:67:a8:5a:aa:0b:d6:24:92:c0:78:73:
                    38:d7:07:31:5b:7e:fc:8a:41:ca:cd:72:20:38:c5:
                    16:72:ea:ce:58:ba:1b:a6:4c:c6:e4:c1:4a:25:02:
                    80:27:f5:4a:fc:37:81:b4:c7:35:ff:25:72:f4:6d:
                    43:96:81:3c:bf:a6:86:d4:02:eb:75:f7:98:5c:30:
                    a5:0f:61:39:db:85:4d:7d:ce:af:e5:fa:db:74:56:
                    31:e0:cd:44:a6:da:4d:d9:83:92:86:da:62:a2:42:
                    13:15:3a:86:fb:c9:6d:f8:26:48:c4:00:df:b8:c6:
                    ce:2b:5b:16:fc:7f:74:72:cb:ff:b1:cb:81:88:99:
                    05:cf:ea:44:9f:6a:f7:02:73:bc:77:e4:4e:14:6e:
                    98:26:a4:67:12:ef:6d:0c:75:2d:53:15:63:f9:b1:
                    e8:a2:d5:88:60:03:d3:fa:24:83:54:99:70:b5:5f:
                    3d:f0:d0:d0:f1:c7:b6:b1:64:36:62:e2:9b:21:e6:
                    6b:b9:57:a7:a9:b2:e9:5b:76:85:5b:da:e9:d7:01:
                    77:0d:94:9f:85:d0:a5:73:2a:bf:93:64:71:c3:88:
                    19:f6:54:d8:2e:56:dd:d1:d5:59:cf:98:88:05:18:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:C1:CE:CF:1E:CC:48:2B:F8:95:59:69:1F:E2:B1:EF:96:43:A1
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131352e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d2:32:7b:39:0d:aa:d4:13:fa:43:28:99:f4:e4:7d:f3:72:
         b1:58:23:89:6c:bd:79:43:1a:eb:68:88:bb:03:8d:5d:36:32:
         96:1f:c0:4d:b0:a3:38:2f:24:62:a8:eb:fa:df:ca:6f:ed:50:
         62:d6:75:29:e3:35:f8:d4:6b:df:41:c0:1d:87:7e:94:88:1b:
         a1:75:f4:ed:45:f9:fd:c7:47:35:82:80:b6:e5:27:e6:13:e5:
         3c:79:1b:41:64:5e:73:80:27:9a:6e:42:64:58:a6:87:fa:f9:
         0e:84:27:37:b6:cb:cf:9d:9d:42:ec:e8:81:da:8a:ac:c4:84:
         f1:3b:85:05:6d:d2:b2:dd:1c:9b:6d:5d:00:e3:a4:2c:b2:89:
         00:d3:ee:a8:ef:7f:21:5b:d6:6e:bf:ab:01:36:4a:5f:3d:33:
         2b:93:9f:f5:31:a7:ba:f3:f4:8f:fe:6d:bd:22:cd:7d:1d:02:
         ab:18:ba:e1:df:4f:d8:94:0e:93:e9:1c:dc:2e:79:e6:2c:a1:
         3e:80:7d:75:f1:70:21:37:46:a4:3d:7b:ef:41:8b:e2:e2:30:
         a3:32:8b:e3:4f:00:85:97:6a:54:40:19:67:05:03:b5:05:2e:
         af:89:7b:52:3e:ab:66:02:b0:4f:c8:e4:a1:a2:93:17:3f:0b:
         fa:fd:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:33:23 2024 by rpki-client on console-ams.rpki-client.org