Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133352e302f32342d3234203d3e203532333632.roa
File:                     3139302e31342e3133352e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          eNFyZE2CRz3b45W8NIhpDMu8KcoeEM9lTTxnO1DK0Yg=
Subject key identifier:   77:32:69:3C:08:EE:43:8E:CB:00:1E:5D:D3:86:75:70:9F:F2:C8:CC
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       2CD81E0BFC1A620B90A5F3A96E576FCB17F4246F
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133352e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:00 +0000
ROA not before:           Tue 05 Mar 2024 17:51:00 +0000
ROA not after:            Tue 04 Mar 2025 17:56:00 +0000
asID:                     52362
IP address blocks:        190.14.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d8:1e:0b:fc:1a:62:0b:90:a5:f3:a9:6e:57:6f:cb:17:f4:24:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:00 2024 GMT
            Not After : Mar  4 17:56:00 2025 GMT
        Subject: CN=7732693C08EE438ECB001E5DD38675709FF2C8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:a3:52:64:11:bf:50:90:31:a3:fc:cd:91:
                    34:c8:2c:6c:05:4b:4a:bd:11:04:cb:d8:c5:c9:34:
                    5b:49:04:90:95:5b:9d:b4:cb:41:2e:b7:73:af:79:
                    72:18:b7:55:a0:f8:e8:82:93:98:9a:36:73:47:fb:
                    49:a2:36:12:cb:d5:f4:be:05:6e:e3:ee:b0:0d:6b:
                    fe:b9:2a:5d:41:cd:7e:91:07:ab:7b:d5:2f:78:40:
                    da:78:92:53:a6:de:29:2e:b2:58:60:db:b0:f7:1c:
                    ab:0f:70:95:5d:f0:96:8e:30:04:c9:90:9f:4c:b9:
                    43:ee:7d:ae:61:c8:c1:2c:89:29:a7:5e:c5:64:6b:
                    8e:45:d9:cb:78:62:8b:19:89:e0:40:f3:d0:48:0f:
                    ff:f4:a3:76:15:c5:3e:44:bd:6d:67:3e:b6:62:14:
                    d8:90:c9:dc:9e:ee:2f:5e:5a:52:81:5e:1f:4b:da:
                    6b:82:42:a6:88:c6:35:37:c1:f7:b8:8a:cb:01:b1:
                    ea:89:66:83:0d:5a:36:cc:9a:c6:eb:b4:ce:ea:ce:
                    74:d6:29:fa:8e:92:3a:0b:43:66:6e:e0:9c:ed:97:
                    0a:a5:ae:23:88:0c:60:44:f7:73:a5:8d:2e:aa:04:
                    d7:94:f4:06:28:5d:59:84:5f:7a:4c:a8:b7:ff:16:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:32:69:3C:08:EE:43:8E:CB:00:1E:5D:D3:86:75:70:9F:F2:C8:CC
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133352e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:ca:2e:ae:0a:fd:c7:78:9e:88:90:d4:0d:6d:78:75:9d:
         8f:e3:ab:d3:ef:3d:51:2c:ea:1c:aa:0b:db:20:3e:46:f3:6b:
         61:c2:9b:be:ce:1e:a4:4e:2c:1d:6f:ad:d5:60:b4:f1:b0:6b:
         4c:1c:38:6e:22:90:a8:54:db:1d:eb:06:a7:07:3f:f9:5d:0c:
         9a:e3:b8:47:7e:bc:c8:29:f8:be:d4:3d:56:72:c5:10:fa:4d:
         23:6f:f7:74:0d:0a:3b:18:5d:eb:36:02:0e:14:bf:f3:da:0f:
         90:ec:5c:87:e7:ea:61:d4:50:71:4c:3f:28:4e:bb:5e:74:0f:
         3d:4f:87:f8:10:f6:16:af:82:0d:1b:17:f8:4f:8d:50:51:f7:
         60:62:d1:e5:62:3f:4a:2d:4d:74:d0:94:a1:76:f0:74:0d:9d:
         85:9b:46:e2:ba:88:02:2d:57:b0:d6:24:78:26:f1:df:31:a2:
         45:1d:68:49:2d:ba:58:d3:fa:5e:12:07:e8:ad:f8:80:a8:6e:
         a7:91:b2:6d:14:0b:75:d4:c0:e8:ac:b9:6a:90:59:65:02:29:
         80:b0:17:5e:03:7c:1a:a1:eb:dc:c5:5c:1e:77:86:1b:0f:66:
         0f:cb:1a:45:ac:4c:57:45:b5:25:b5:19:5a:a3:68:fb:6c:77:
         40:05:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org