Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          aGI1iKi0ftm2Z4YaEewMsA7gASfs4qao9F9K5aoeeps=
Subject key identifier:   3A:79:23:69:FF:7E:51:97:F0:ED:B4:47:5B:FB:22:DD:5F:87:FD:4D
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       0873FF64250842A8FD33A7EA3EBA9CA698D2F61E
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 20 Oct 2025 23:50:41 +0000
ROA not before:           Mon 20 Oct 2025 23:45:41 +0000
ROA not after:            Mon 19 Oct 2026 23:50:41 +0000
asID:                     23243
IP address blocks:        190.104.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 15:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:73:ff:64:25:08:42:a8:fd:33:a7:ea:3e:ba:9c:a6:98:d2:f6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Oct 20 23:45:41 2025 GMT
            Not After : Oct 19 23:50:41 2026 GMT
        Subject: CN=3A792369FF7E5197F0EDB4475BFB22DD5F87FD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:95:a0:bb:43:89:c5:2d:8e:70:c0:f3:25:
                    eb:da:7c:00:ab:68:16:34:45:b1:94:b3:4b:57:8f:
                    9e:d1:f4:78:38:d2:df:92:ea:96:8d:cc:21:96:a0:
                    b7:3e:b2:da:74:22:0b:c9:c3:3a:44:fe:44:75:d2:
                    e5:7c:9c:7d:47:eb:cd:35:02:c7:05:64:c1:11:07:
                    19:62:88:4d:60:26:88:5c:df:f1:6d:c2:e1:5f:88:
                    8d:65:6c:3c:d1:1e:49:b7:28:59:5c:56:b1:67:50:
                    d8:6b:19:bd:70:88:26:fe:fe:30:a6:07:f6:cc:fb:
                    5a:83:64:aa:a2:67:ca:31:16:95:85:77:eb:d7:ab:
                    4e:13:3b:b5:55:7a:7d:96:a7:7f:f3:a0:ca:81:68:
                    30:c1:ae:a6:39:97:14:9c:b7:43:22:7b:bc:8a:2b:
                    cf:f3:60:14:99:da:02:f5:20:b8:ae:6d:19:6a:83:
                    43:9b:b5:53:91:89:22:19:20:bf:77:f1:f8:06:48:
                    72:b4:f6:06:3a:73:05:ea:62:e9:ac:62:95:ee:e9:
                    17:bd:55:f7:e7:d8:9a:b7:dc:0b:03:2d:64:79:ab:
                    a7:78:1d:9d:0e:51:c4:81:4e:59:a1:36:cf:a2:ec:
                    e0:7c:72:26:75:ff:72:48:83:c3:21:ba:64:f3:97:
                    c6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:23:69:FF:7E:51:97:F0:ED:B4:47:5B:FB:22:DD:5F:87:FD:4D
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f0:e7:f8:90:7e:bf:73:8b:dd:86:2a:85:47:f0:3f:14:06:
         d1:b5:fb:b0:22:92:39:e6:72:21:92:30:bf:b0:1f:b4:7b:0c:
         68:54:10:71:d9:49:81:ed:44:61:d8:da:2d:d7:02:8a:f4:55:
         f7:80:96:f5:f1:23:3d:88:a4:c2:72:18:21:d9:c5:ed:f6:c7:
         cd:46:14:18:8c:ac:45:e2:36:77:cf:1e:0c:d2:cb:ff:fe:de:
         ab:05:50:6a:95:98:a2:65:a7:79:16:fc:9d:23:62:21:8a:02:
         5c:43:2f:0b:99:94:33:b5:a5:49:6b:14:e1:e8:99:24:c8:ff:
         4a:a0:58:87:fe:19:be:ad:ff:5e:db:7a:10:32:93:40:ca:24:
         49:70:92:4c:62:62:05:c7:0e:6f:89:18:eb:35:81:69:e8:e3:
         22:06:aa:6f:0c:ac:43:4a:1c:d5:f6:8f:68:44:7b:08:5c:1e:
         82:29:db:a9:dd:b0:c9:51:50:e2:4c:97:2d:64:aa:e2:8f:76:
         40:e5:4d:2f:a9:d5:b7:5d:58:d2:fa:3a:d1:0c:9d:b1:68:7c:
         89:c7:b6:b0:78:32:26:14:9d:bb:a7:b7:2d:c5:7a:6e:78:cf:
         73:44:45:50:ae:d0:5b:1d:82:06:92:ee:95:1b:cf:39:64:cc:
         e7:f2:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:41:45 2025 by rpki-client