Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133322e302f32342d3234203d3e203233323433.roa
File:                     3139302e31342e3133322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          0qAHUR3BdmD119+OHqvZgGyByH96hEYvdKSngwBXfeI=
Subject key identifier:   8D:05:09:96:8B:14:A0:D7:FA:A9:ED:EE:E2:F4:32:FE:C5:FC:22:C7
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       30E7F532EFFB537F5957247FB285D5FDB7110AFB
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133322e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 18 Nov 2024 21:00:00 +0000
ROA not before:           Mon 18 Nov 2024 20:55:00 +0000
ROA not after:            Mon 17 Nov 2025 21:00:00 +0000
asID:                     23243
IP address blocks:        190.14.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e7:f5:32:ef:fb:53:7f:59:57:24:7f:b2:85:d5:fd:b7:11:0a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Nov 18 20:55:00 2024 GMT
            Not After : Nov 17 21:00:00 2025 GMT
        Subject: CN=8D0509968B14A0D7FAA9EDEEE2F432FEC5FC22C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:cc:25:86:a7:ec:2f:55:a1:c1:a3:81:8a:
                    74:b0:88:e3:bd:20:91:80:11:7f:ac:7d:8a:da:3c:
                    08:25:de:46:9a:d0:45:0b:e5:69:c6:1c:ed:01:ed:
                    9a:14:cf:a4:b1:5a:f2:6e:2a:ec:c5:b5:14:33:c2:
                    0f:7a:11:68:72:9d:1e:6d:a0:c4:a3:48:a9:09:bb:
                    ce:f1:8e:6f:51:02:18:c6:ad:ff:c9:ca:e9:c7:78:
                    b0:8e:a5:dc:ba:88:c2:40:c8:39:26:2a:43:2f:c4:
                    f2:27:73:88:77:25:70:5e:b1:ba:ac:1a:31:47:4b:
                    31:91:a9:ab:eb:ce:24:7c:3d:7b:ea:7b:04:4f:ed:
                    db:63:db:a3:5c:25:06:c8:cc:f2:62:ab:b1:8c:9d:
                    29:ad:9e:8c:f9:15:57:1c:96:a2:41:5b:08:37:cf:
                    6b:25:1d:00:aa:a2:43:41:d2:7f:cf:99:1f:bb:12:
                    df:88:35:bf:5c:6b:e4:fc:a8:60:61:e8:7c:b6:cd:
                    d5:13:86:09:bf:76:d8:0b:b8:33:bc:bb:c0:96:90:
                    2a:36:6c:02:dd:8d:fb:bf:70:2b:2d:d9:2b:4e:a3:
                    4e:3c:f0:51:55:a4:9c:20:b3:fe:40:7a:b6:67:9b:
                    fb:f8:a5:71:fa:dd:fd:20:d1:b6:b5:50:b4:f0:ac:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:05:09:96:8B:14:A0:D7:FA:A9:ED:EE:E2:F4:32:FE:C5:FC:22:C7
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:cb:e3:28:da:b4:6a:bf:e8:78:06:fc:22:42:91:af:c6:
         86:66:1e:26:45:67:89:31:f4:97:ed:b1:16:6c:ea:fb:47:43:
         a4:68:9f:09:00:d8:4f:cd:c6:0b:c8:62:7a:8f:ed:92:97:73:
         2b:33:bc:0b:e2:1c:48:91:cf:ef:de:7a:44:e2:00:76:7f:0f:
         68:d2:d8:5e:66:11:a0:a2:55:dd:ba:ec:99:fe:51:16:a1:ab:
         ab:3d:5d:2a:6f:b8:2c:12:dc:bb:f3:35:b7:c2:18:3c:b7:f6:
         9e:c6:01:46:ea:a9:6d:3a:2d:2b:52:47:48:48:94:f8:b9:70:
         62:5e:72:03:22:69:04:c5:db:2a:bb:07:df:7c:e1:1c:89:04:
         ff:f8:62:54:8c:06:11:4d:d1:43:b0:ec:1a:9a:33:45:0d:85:
         44:9e:a1:8b:32:ba:74:ef:fb:32:47:04:a1:8d:3b:68:6d:40:
         4c:ad:e4:f7:0e:ce:de:46:92:a1:01:aa:47:1d:5a:02:4c:de:
         3c:74:5c:94:09:d6:4b:72:64:a2:84:d8:bf:65:6a:61:7b:de:
         a8:ef:0f:fa:06:0e:a9:85:cf:13:c1:5e:ff:0c:50:e9:12:84:
         58:fb:9a:24:7f:a9:bc:df:24:9d:02:83:2b:d3:42:e4:eb:2d:
         34:69:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org