Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133302e302f32342d3234203d3e203233323433.roa
File:                     3139302e31342e3133302e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          tAJNZQKHoZx/Fw4M9zJAcClUnkN62L9+L9DIVlyLcTc=
Subject key identifier:   40:E9:03:8F:24:6E:DE:3C:C5:BF:CB:56:8D:D5:50:C4:95:EA:C7:8C
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       394692A3054671049054B41432F38A35D010E5FE
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133302e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 18 Nov 2024 21:00:00 +0000
ROA not before:           Mon 18 Nov 2024 20:55:00 +0000
ROA not after:            Mon 17 Nov 2025 21:00:00 +0000
asID:                     23243
IP address blocks:        190.14.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:46:92:a3:05:46:71:04:90:54:b4:14:32:f3:8a:35:d0:10:e5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Nov 18 20:55:00 2024 GMT
            Not After : Nov 17 21:00:00 2025 GMT
        Subject: CN=40E9038F246EDE3CC5BFCB568DD550C495EAC78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:27:eb:cf:a2:50:16:68:90:85:b7:45:65:
                    40:36:f3:1b:ac:1d:4a:bd:e2:3b:48:99:6f:91:cf:
                    72:1d:be:00:eb:8c:08:1b:67:8a:50:17:49:79:dd:
                    4f:12:59:f4:5b:47:a4:95:27:47:78:6a:90:d1:12:
                    06:37:17:88:af:88:27:7c:7d:90:cd:6f:fc:aa:ef:
                    b8:e9:44:e4:91:07:77:68:db:2f:5c:92:b6:5b:b3:
                    89:c9:01:80:ff:99:00:0e:92:52:41:9a:70:76:bd:
                    27:98:45:b4:c9:5f:cb:7b:26:9d:0e:16:b0:55:2a:
                    2f:61:b9:15:87:03:f5:4d:86:01:99:4b:2d:2d:e4:
                    9d:a4:74:97:f0:b1:35:43:81:40:44:6f:9a:ae:0f:
                    54:70:bc:a5:9f:3d:db:51:aa:33:8f:d8:a2:36:40:
                    db:a1:94:aa:94:d6:2f:b4:5b:4d:ea:eb:fb:68:32:
                    6b:1b:22:82:1f:ff:ad:38:bd:77:85:c7:89:d3:68:
                    47:c9:ad:8f:40:99:f5:c6:29:f2:17:b7:d1:f9:95:
                    96:e1:01:65:ef:26:24:9b:ef:60:4a:be:8e:8d:7b:
                    52:95:51:70:ab:13:00:39:9b:1f:79:db:3b:d1:16:
                    47:37:e2:a3:fa:32:5f:09:4a:85:6c:7b:d4:07:fe:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E9:03:8F:24:6E:DE:3C:C5:BF:CB:56:8D:D5:50:C4:95:EA:C7:8C
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133302e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:6f:2b:c3:67:06:e4:63:ca:cd:3c:48:d5:58:91:af:1f:
         56:0e:0f:ca:85:75:0a:a9:7b:49:30:75:22:9d:e0:49:a1:6f:
         e1:2c:88:b3:96:4c:8c:75:a8:a1:2d:21:52:22:15:23:d3:be:
         30:53:b5:32:fe:2e:bb:7e:8e:b7:16:eb:86:4d:72:41:0c:a2:
         ca:60:b5:d8:7f:a3:74:c2:09:29:cd:da:39:da:65:3b:3a:e8:
         5e:54:75:75:89:63:97:6a:da:24:7d:74:69:9a:0f:51:b7:1a:
         99:fa:4f:0b:00:29:a4:47:5a:0b:76:c8:47:0d:61:9f:3c:27:
         6a:69:4d:63:62:af:7d:fc:82:72:02:49:4d:12:10:85:ba:75:
         8a:e9:db:3e:14:ce:bb:2c:3a:fd:46:6d:5a:94:5f:b0:32:c7:
         be:68:f7:e3:f1:17:31:6e:6a:da:c7:ba:cf:3c:80:cb:65:51:
         37:01:12:ff:1c:ea:d3:40:c4:81:3b:10:6b:85:bb:b4:a6:a1:
         07:93:f1:f0:33:d1:28:97:f9:7c:6c:89:3f:01:c9:20:b5:a6:
         be:35:31:b7:ea:6a:10:9e:f0:00:37:39:22:81:45:57:ab:bf:
         e0:8f:8c:d9:05:52:59:43:65:3a:0d:bd:49:e9:1f:ac:a5:79:
         8a:47:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org