Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          9oIAJbmZVTmfB2OE1CSJMq3LUSRsi9hlLM3eic84D4o=
Subject key identifier:   57:3B:FF:15:50:D8:87:A6:35:0A:F6:EB:A9:AE:BF:0E:33:37:88:B8
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       442B658AEF726221D3DB7776185900DB3B8B5E21
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 18 Nov 2024 23:15:01 +0000
ROA not before:           Mon 18 Nov 2024 23:10:01 +0000
ROA not after:            Mon 17 Nov 2025 23:15:01 +0000
asID:                     23243
IP address blocks:        190.104.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2b:65:8a:ef:72:62:21:d3:db:77:76:18:59:00:db:3b:8b:5e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Nov 18 23:10:01 2024 GMT
            Not After : Nov 17 23:15:01 2025 GMT
        Subject: CN=573BFF1550D887A6350AF6EBA9AEBF0E333788B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6d:b6:01:b0:48:7a:e6:8c:b7:5a:50:df:65:
                    46:e8:ff:f7:13:9d:18:86:a5:65:73:1f:85:f8:59:
                    c1:19:05:a9:14:f4:f2:de:6d:23:9e:cc:b0:6e:85:
                    c3:15:4a:6a:35:d1:30:97:c9:9b:91:78:3f:22:dc:
                    13:6d:56:5c:1f:9f:02:68:2c:6b:67:83:c7:9c:8a:
                    10:ef:3a:67:6e:fc:ee:d3:0a:64:e4:e1:be:c8:1d:
                    53:2a:42:8e:e2:8c:20:4d:a2:21:a7:88:38:27:c4:
                    a4:9c:b0:6b:d1:6f:07:7f:46:b7:b6:29:28:ce:a3:
                    6b:45:3c:82:95:58:39:8c:9b:b8:96:93:1f:eb:73:
                    e0:43:cd:f3:8c:8f:ec:e8:52:e5:a1:79:fd:88:39:
                    13:56:55:88:90:b6:0d:d3:1a:ed:bb:92:33:c1:e3:
                    82:c6:59:f0:0a:a0:5b:60:9b:7f:35:9a:aa:03:21:
                    24:12:ae:d5:ec:58:db:b1:49:ad:04:57:b2:96:ce:
                    65:12:35:00:9a:2b:44:50:cf:3f:7e:6b:95:db:3a:
                    59:99:2f:36:51:6e:47:74:14:86:04:16:1b:41:89:
                    1b:8c:6d:ce:ba:b6:e6:73:a7:53:fa:09:cd:c6:f3:
                    e7:cc:40:d1:5d:0a:75:c6:56:1d:87:0e:0a:84:f4:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:FF:15:50:D8:87:A6:35:0A:F6:EB:A9:AE:BF:0E:33:37:88:B8
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bd:3b:d0:b6:5a:07:78:e9:9c:e1:76:b9:7a:79:6c:e9:e1:
         58:32:6b:8b:b3:91:1a:36:5e:ee:7e:5f:a1:1e:85:a0:82:4d:
         29:d5:ae:2e:80:da:37:9e:f0:68:40:15:c1:ac:f8:ce:34:59:
         1e:d2:eb:cf:b7:45:db:a5:c3:ff:9b:85:8c:2f:8d:50:e7:29:
         39:e2:f2:de:09:21:5c:9d:67:1d:38:ed:9e:32:2a:df:ac:44:
         d9:be:5a:19:1b:b9:09:3f:ee:f9:b9:a6:99:0b:26:0d:d7:75:
         d1:be:a1:ee:af:50:af:98:3e:59:f2:f3:36:51:48:85:58:79:
         28:1f:e9:d2:4a:c8:cb:33:f5:32:38:51:da:60:77:fb:a2:5f:
         0d:3d:c3:25:08:11:3e:2f:59:07:a2:76:94:ef:ae:69:5f:12:
         5a:bd:00:e8:17:29:76:44:a2:a6:83:90:c7:1e:41:ea:9a:48:
         71:d8:00:6e:de:19:c8:90:5b:78:bb:f5:5e:00:a7:7f:02:99:
         b0:62:e6:63:d5:cb:4c:6e:1f:83:22:f8:fc:1b:0d:c5:92:f6:
         01:f4:21:ab:ff:db:8f:b0:bb:36:4a:4a:8f:6b:3a:a0:64:e2:
         dc:aa:f4:f0:e4:54:1b:75:e6:e7:88:99:75:6a:bf:5f:a9:5e:
         77:98:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org