Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133332e302f32342d3234203d3e203233323433.roa
File:                     3139302e31342e3133332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          czp5KLGZp4wUKCNqYUIz4n0NQILV7tDCtW5lWrx9004=
Subject key identifier:   77:F7:26:CA:DC:2D:29:D8:C5:DB:57:DC:B8:33:E1:2E:5C:E1:DF:4D
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       2F93E74F859329E42C950E1F86AE227176D21522
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133332e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 18 Nov 2024 21:00:00 +0000
ROA not before:           Mon 18 Nov 2024 20:55:00 +0000
ROA not after:            Mon 17 Nov 2025 21:00:00 +0000
asID:                     23243
IP address blocks:        190.14.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:93:e7:4f:85:93:29:e4:2c:95:0e:1f:86:ae:22:71:76:d2:15:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Nov 18 20:55:00 2024 GMT
            Not After : Nov 17 21:00:00 2025 GMT
        Subject: CN=77F726CADC2D29D8C5DB57DCB833E12E5CE1DF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:8c:15:0a:8a:27:af:78:03:2c:99:13:96:
                    39:b2:01:4d:5a:a1:d8:0e:40:c2:47:42:0a:2e:07:
                    85:1d:05:dd:66:3a:70:fc:17:b5:99:40:79:6c:53:
                    2f:62:80:4b:b6:26:42:72:9d:bd:52:ed:fe:3e:aa:
                    9f:12:d3:b9:d8:b4:16:2f:39:83:89:bb:17:42:d3:
                    46:e1:84:e8:30:79:a6:50:2f:41:da:98:e1:60:27:
                    b3:90:e2:24:26:7f:58:99:61:3e:28:3c:97:37:1d:
                    3c:53:00:b7:3e:44:53:5d:b8:aa:7d:89:5b:7d:a1:
                    00:fc:b7:1a:42:35:fd:a0:c4:d0:b5:b1:e6:0b:8e:
                    cb:14:c3:d5:56:1b:d8:59:cd:b8:7d:9f:11:1c:c4:
                    23:f0:9c:89:81:bd:ee:a2:e5:b5:6c:50:a5:38:65:
                    81:b9:3b:b8:a7:7d:ce:95:a7:58:94:88:56:27:56:
                    1c:69:b4:6f:c4:82:d9:7b:34:10:6e:10:ae:ec:3d:
                    56:82:2d:27:36:6e:d8:e7:6e:2a:64:05:62:31:07:
                    73:c1:81:c7:51:fa:74:a3:01:92:06:e7:e0:da:6b:
                    e7:c4:25:00:e5:49:2d:bd:1d:40:34:1d:42:51:f0:
                    8a:bd:5c:5f:62:f9:f5:84:61:2c:59:10:d7:c2:ed:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:26:CA:DC:2D:29:D8:C5:DB:57:DC:B8:33:E1:2E:5C:E1:DF:4D
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:69:5e:12:f0:c1:af:7a:81:60:e9:23:ce:b7:37:24:c3:
         b6:6f:b3:a9:e1:ec:c0:30:ee:45:5f:17:b4:32:2b:cf:4a:a6:
         ea:f2:2e:b5:bc:21:f9:2f:97:89:4e:47:72:47:c2:04:64:ec:
         31:98:0c:2a:95:23:5c:fd:5e:1c:a9:d5:ab:f0:dc:64:0f:99:
         a9:8b:0f:0f:85:f0:2b:9e:68:60:07:97:f1:30:87:ff:3a:85:
         1a:3e:ff:96:63:bb:b5:78:4a:73:0e:48:46:81:e9:aa:36:e7:
         5f:5c:5b:59:ba:fe:d7:cf:c7:2d:c8:08:30:d8:00:e4:2c:9a:
         a4:d0:18:2e:43:fa:82:ac:20:14:df:92:12:4e:b4:60:5f:e0:
         1a:52:f9:e8:db:63:55:38:50:ec:d0:8b:ee:85:c7:28:37:65:
         d0:2f:68:12:3a:16:e0:d6:0e:02:7d:c2:e3:e2:08:05:ec:32:
         4b:d1:fb:b8:82:ac:e6:9b:06:68:17:a9:1a:24:64:79:0c:f4:
         d0:db:a8:54:a5:44:45:bb:b4:50:29:f1:16:5e:9d:4a:22:ca:
         0b:3b:d3:d1:35:b9:fe:90:5f:fe:7a:52:4c:c2:f4:a5:e7:65:
         50:d5:c1:66:38:8a:47:73:1e:5c:ff:58:15:11:24:6a:95:39:
         02:18:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:12 2024 by rpki-client on console-ams.rpki-client.org