Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132342e302f32322d3234203d3e203532333632.roa
File:                     3139302e3130342e3132342e302f32322d3234203d3e203532333632.roa (raw, json)
Hash identifier:          fA9lbvxmUJwrPG9F0jamc4lQLg1opPZN67/XauJoNEI=
Subject key identifier:   35:C0:10:A5:46:08:8C:2D:2C:81:17:C1:5B:C1:4F:EB:EF:E8:99:2B
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       14ED8791C39375EF2C0B7A0EBB7229659F8CF15A
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132342e302f32322d3234203d3e203532333632.roa
Signing time:             Tue 04 Feb 2025 18:06:30 +0000
ROA not before:           Tue 04 Feb 2025 18:01:30 +0000
ROA not after:            Tue 03 Feb 2026 18:06:30 +0000
asID:                     52362
IP address blocks:        190.104.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ed:87:91:c3:93:75:ef:2c:0b:7a:0e:bb:72:29:65:9f:8c:f1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:30 2025 GMT
            Not After : Feb  3 18:06:30 2026 GMT
        Subject: CN=35C010A546088C2D2C8117C15BC14FEBEFE8992B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:c3:11:90:1d:b2:68:a4:7c:37:a4:67:ec:
                    2a:7f:b5:76:7b:2e:97:04:dd:cf:3f:06:12:66:67:
                    d6:16:d9:c3:dc:1e:91:7b:a6:44:9c:ec:9a:89:0c:
                    18:5d:63:d5:b0:9a:37:f0:08:16:2e:67:7b:45:a2:
                    32:aa:90:4f:3e:3a:b1:66:e7:22:a3:da:fc:19:fb:
                    73:e5:c4:bb:30:ad:fc:0e:61:37:d7:45:40:4f:b3:
                    84:93:7f:1e:f1:17:4b:ea:95:4d:33:98:81:8a:f3:
                    13:7e:c9:2e:ce:1c:ad:bd:67:96:9e:2f:cf:f0:90:
                    4b:ba:94:2b:f9:b9:f2:77:15:0e:20:a3:86:cc:d8:
                    e5:73:6b:60:61:43:fe:e3:36:83:ba:ce:07:31:57:
                    7e:7d:14:6f:82:ce:88:81:53:dc:ed:7d:de:9b:b8:
                    b9:ee:bd:58:db:9d:73:0d:14:60:3d:04:0a:77:d1:
                    79:b0:40:1d:cd:0b:47:1a:a6:7a:42:50:58:d3:c8:
                    95:ae:3a:a7:5b:87:5a:51:f1:c6:4e:3e:ad:41:d4:
                    a3:60:3c:bb:e2:d0:6a:94:29:91:5e:7a:80:2c:22:
                    68:b6:d9:ee:f5:f0:0b:43:94:e5:24:24:91:9a:30:
                    66:8c:09:df:28:8e:1d:63:17:08:a9:51:7b:dd:6a:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C0:10:A5:46:08:8C:2D:2C:81:17:C1:5B:C1:4F:EB:EF:E8:99:2B
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132342e302f32322d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:df:c9:f5:4b:10:b1:c3:a3:c9:34:2f:4a:51:74:d9:72:
         ea:96:ce:3d:2c:7e:f0:da:74:8f:d0:41:7e:62:49:a0:76:24:
         dc:f7:b5:75:18:90:3e:8e:85:81:ca:a8:43:8d:00:cd:b4:ff:
         a0:4d:0e:96:5b:4b:e2:e1:2a:04:dc:ac:d1:5f:74:25:4d:b6:
         bd:52:76:ed:97:98:1b:e9:5e:21:7d:24:c0:50:38:0f:8c:1a:
         64:d9:58:e3:bd:da:8b:fc:11:ed:b7:39:55:ce:90:50:21:81:
         39:51:70:b6:54:5b:25:27:bb:30:1a:93:95:72:72:05:a2:b3:
         bf:8d:8c:0d:79:f3:5e:ba:f1:0a:84:e2:26:5a:f1:32:cd:5f:
         ec:a1:f7:ca:f3:07:1b:c1:4d:9a:c5:63:d2:af:b0:2e:a7:d0:
         a8:03:65:53:df:5a:69:54:f0:e0:67:d2:1b:17:27:61:13:37:
         a7:d5:c9:61:52:89:1e:d7:35:fb:a5:a9:fe:e7:86:07:9e:d3:
         44:72:79:7a:fd:b3:43:f1:25:dd:58:c4:9a:72:75:f7:90:e7:
         a9:55:8e:81:b8:db:28:a7:5f:f1:0f:28:68:46:80:1b:43:5e:
         a2:e8:4d:0b:08:e8:c5:61:ca:77:b5:d2:5f:96:c3:c1:bf:4a:
         86:5f:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:59 2025 by rpki-client