Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133342e302f32342d3234203d3e203532333632.roa
File:                     3139302e31342e3133342e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          IeJqPNr2IHg+fUNjHerQ/P95VObkkDugzBFMVOFo9tc=
Subject key identifier:   EA:94:4B:09:76:DA:78:4A:64:39:DD:E2:50:04:6B:D8:14:6C:0C:68
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       420D401F205CD0A326259802127A4A992FD97E29
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133342e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 04 Feb 2025 18:06:34 +0000
ROA not before:           Tue 04 Feb 2025 18:01:34 +0000
ROA not after:            Tue 03 Feb 2026 18:06:34 +0000
asID:                     52362
IP address blocks:        190.14.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0d:40:1f:20:5c:d0:a3:26:25:98:02:12:7a:4a:99:2f:d9:7e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:34 2025 GMT
            Not After : Feb  3 18:06:34 2026 GMT
        Subject: CN=EA944B0976DA784A6439DDE250046BD8146C0C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:8a:da:70:36:ba:a2:b9:4c:95:5a:04:fa:
                    2f:14:1a:6d:58:a0:9f:e5:04:72:48:7c:50:0d:1e:
                    57:f3:f7:6d:ff:65:d1:73:70:65:11:10:19:f6:05:
                    f9:fa:79:43:67:3a:4c:25:3a:9a:6c:2d:7c:4b:66:
                    32:cb:12:5c:6f:9a:1b:6b:79:f5:4d:46:f2:d6:99:
                    b0:41:6b:dc:b0:61:bc:31:f8:ec:49:bb:cd:f5:e9:
                    1d:01:7c:c2:4b:97:93:38:d8:7e:14:e1:93:20:8b:
                    17:a1:45:d6:fa:48:03:93:29:32:b6:70:d3:49:a7:
                    49:ba:84:69:b1:81:d1:cc:b9:ce:27:aa:12:ef:27:
                    69:be:be:0b:ee:8a:69:1f:aa:c0:25:07:76:08:7a:
                    f9:03:b5:cc:31:2f:11:dc:bd:c2:c4:55:72:56:49:
                    52:25:cf:00:cd:5d:26:5f:a3:9d:5d:3c:23:6f:1b:
                    18:03:3c:d7:e1:60:80:46:9a:43:eb:65:73:33:7d:
                    78:a8:90:45:53:d7:d8:5f:9e:fc:91:dd:e1:e4:0d:
                    cc:a0:eb:17:de:a3:01:6a:99:66:6e:c1:e6:35:8d:
                    e8:ac:8d:f7:84:c7:fd:d9:a5:1c:77:d2:95:92:fd:
                    d8:e7:4f:4b:aa:fd:8d:25:f4:cd:e4:bc:b1:33:80:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:94:4B:09:76:DA:78:4A:64:39:DD:E2:50:04:6B:D8:14:6C:0C:68
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133342e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:eb:ef:74:8d:64:13:74:68:bc:8f:b2:12:ea:bd:74:90:24:
         35:06:07:84:b9:b0:ce:63:86:c1:a1:5a:12:05:64:d7:8c:00:
         9b:9e:98:9d:0e:36:ae:fb:6e:a4:a8:6d:55:9e:76:e9:0b:fc:
         c5:f1:af:70:5c:f2:3d:97:82:43:2e:74:f7:9e:90:70:cb:be:
         8c:69:09:44:23:5c:5d:b7:0c:41:d9:0a:4c:07:9d:ef:9f:8f:
         16:6f:db:f4:05:7c:3f:c6:4d:4a:53:f9:c5:f1:23:13:b7:79:
         39:b1:07:8e:19:41:60:66:55:18:11:39:ed:79:96:6d:63:ab:
         39:c3:ac:2d:3f:a3:4b:44:d2:01:fb:7a:7b:7a:4c:63:96:1a:
         f4:18:b1:cf:0e:71:b2:44:7f:e4:1c:2a:0b:39:4a:d1:91:30:
         25:ba:71:f0:15:c7:bf:8b:6f:49:b8:a3:e4:96:3a:50:7d:63:
         ae:05:78:47:19:d0:d4:72:e2:b3:f4:f7:27:61:7c:0e:1b:f3:
         66:e9:96:d4:9b:92:c5:d0:b7:a4:e3:59:bf:da:a7:91:cc:37:
         f3:5a:2b:53:17:6b:f3:a3:d6:78:4c:3a:cd:90:bd:3b:7d:c0:
         6c:67:8d:45:14:42:73:7f:21:5c:1c:ae:e2:c1:bf:90:ed:25:
         35:d7:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:33:24 2025 by rpki-client