Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132302e302f32332d3234203d3e203532333632.roa
File:                     3139302e3130342e3132302e302f32332d3234203d3e203532333632.roa (raw, json)
Hash identifier:          Fe9Y91uu/9XclkrHbQlpBpxp0EzQLyDwmDtLfvDv9/M=
Subject key identifier:   0E:70:8C:86:45:4A:B4:43:F2:2E:91:DE:39:84:86:05:A9:4A:36:57
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       2E6AED7C9B7C5A921D4A980C808263D316C0EB9D
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132302e302f32332d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:01 +0000
ROA not before:           Tue 05 Mar 2024 17:51:01 +0000
ROA not after:            Tue 04 Mar 2025 17:56:01 +0000
asID:                     52362
IP address blocks:        190.104.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6a:ed:7c:9b:7c:5a:92:1d:4a:98:0c:80:82:63:d3:16:c0:eb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:01 2024 GMT
            Not After : Mar  4 17:56:01 2025 GMT
        Subject: CN=0E708C86454AB443F22E91DE39848605A94A3657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:04:b4:c6:68:39:8d:75:cb:f1:83:c0:46:
                    d6:97:15:9b:7f:ff:36:02:58:1f:50:05:22:55:9d:
                    ee:fe:f6:ef:02:ce:ce:f5:c5:9e:94:1b:ff:de:bc:
                    83:39:21:54:fa:8e:96:aa:88:97:0f:0c:d3:c1:aa:
                    a2:59:29:d8:8d:0a:ed:f9:a3:26:58:0d:3f:c4:b9:
                    d2:34:ab:9e:0c:ce:61:09:42:50:ba:ab:59:38:37:
                    f3:bf:3c:93:3f:07:14:c1:28:b9:ce:6f:fa:79:03:
                    09:7c:af:bb:a3:ef:e6:1d:04:f5:9f:e0:16:35:af:
                    a6:22:58:b1:be:b8:a3:e7:9c:ba:95:79:d1:a8:10:
                    89:70:8d:31:22:8e:11:6d:15:74:f3:b3:6c:d1:73:
                    bf:e5:37:6c:15:fa:42:09:78:34:0f:e5:5f:b8:ed:
                    ae:a9:ef:0b:d0:fc:10:05:95:be:17:e8:5a:35:ba:
                    50:5c:64:5a:cf:35:e8:70:30:f2:15:33:30:e0:1c:
                    cc:71:08:90:43:01:b4:61:10:7b:b4:23:03:75:d4:
                    19:dd:99:d9:12:b2:85:ba:e7:98:85:17:c3:40:04:
                    00:61:28:b6:39:6c:d8:a8:42:95:b7:b7:f2:76:f4:
                    71:c6:b6:72:88:32:ec:90:39:e4:06:77:f6:76:7f:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:8C:86:45:4A:B4:43:F2:2E:91:DE:39:84:86:05:A9:4A:36:57
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132302e302f32332d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:87:dc:ef:66:b9:11:7e:94:d2:2b:0e:91:8b:4d:d1:f3:ce:
         bf:f6:67:72:45:83:6f:68:cb:72:77:bd:15:3b:31:5f:4f:b4:
         75:1e:ed:83:e3:9d:9a:61:84:02:78:33:3b:1b:ae:e6:3f:f6:
         f2:ae:f9:03:82:2f:11:2f:e3:25:18:13:f7:a6:e2:94:c5:b9:
         eb:d1:ba:65:6d:84:64:20:93:3e:de:6d:43:59:ea:e7:80:ba:
         d3:cc:8f:da:95:ce:ab:25:09:99:b5:4b:44:99:f3:36:06:33:
         d8:41:1f:94:d1:66:df:90:56:22:6f:1e:ac:36:ee:31:7e:3e:
         1a:ef:d6:7b:93:c8:85:2e:76:4a:e0:37:c2:57:1f:a6:f7:53:
         ab:29:dc:be:93:22:e1:0a:01:30:a0:29:8b:e5:c3:b8:a7:eb:
         d0:eb:72:8e:3a:ee:89:d9:82:ea:f4:6d:9c:49:b7:1a:07:0c:
         d7:81:98:1f:d4:31:71:a8:7e:fd:0e:35:1d:93:ed:cd:67:c6:
         fa:9b:3d:e3:c1:10:94:e9:d6:eb:7b:59:04:94:4f:e8:ed:9c:
         8d:f6:c5:d9:e8:ba:f6:97:47:16:34:f6:49:5e:19:74:36:f2:
         b8:dd:fb:0f:fd:dc:ac:e6:c4:e4:bf:aa:93:16:b7:ce:d2:94:
         c6:14:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:19 2024 by rpki-client on console-fra.rpki-client.org