Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa
File:                     3139302e31342e3134322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          exm3aFfPevnUmlwV0MKO0PlESvQKMa+mv8lKxWwDfEM=
Subject key identifier:   FD:2E:62:7B:C6:0A:C6:61:DD:EC:2F:C2:FE:8F:C7:7B:AB:AD:9A:98
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       5E8C165052A092D84FA3500C67536103EF737BA9
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 20 Oct 2025 23:50:40 +0000
ROA not before:           Mon 20 Oct 2025 23:45:40 +0000
ROA not after:            Mon 19 Oct 2026 23:50:40 +0000
asID:                     23243
IP address blocks:        190.14.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 15:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8c:16:50:52:a0:92:d8:4f:a3:50:0c:67:53:61:03:ef:73:7b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Oct 20 23:45:40 2025 GMT
            Not After : Oct 19 23:50:40 2026 GMT
        Subject: CN=FD2E627BC60AC661DDEC2FC2FE8FC77BABAD9A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:31:5d:cb:f4:cf:64:51:6d:2b:92:20:15:e2:
                    09:ba:cb:85:51:2f:c0:17:61:f8:65:fd:3b:2a:23:
                    7e:46:51:5f:f7:9f:3a:34:54:35:88:58:08:9a:01:
                    cf:a1:df:64:a1:eb:99:83:80:66:73:ff:87:22:0e:
                    6c:e7:c3:01:b7:63:18:bf:07:16:8a:7b:ed:76:60:
                    68:60:5c:59:a2:80:8c:c8:a6:69:f2:6b:35:ed:9d:
                    53:71:dd:01:04:ae:c1:14:e9:20:79:fa:28:26:20:
                    e9:e6:f4:14:c9:40:42:d7:e9:4b:b5:9b:2f:fd:0d:
                    f0:50:51:36:e8:48:a3:b7:a0:ab:b7:93:69:2b:31:
                    5b:93:b5:8e:9f:f1:e9:d5:62:25:f3:34:3c:be:d4:
                    60:4b:73:78:34:76:18:47:6e:6f:b3:99:48:9c:67:
                    5e:56:80:91:7d:84:95:b0:e4:00:5c:e2:0b:ad:59:
                    d7:42:d7:f9:94:20:1f:5a:03:a3:17:49:3d:cf:b2:
                    41:5e:cf:ac:3a:47:07:a6:20:31:92:bb:63:ff:fa:
                    93:3a:a7:2a:1c:84:24:e0:9e:28:a7:60:b9:e8:13:
                    e4:93:c6:83:c6:0d:24:f1:94:91:30:39:ad:c6:b5:
                    c9:6c:89:44:92:a8:aa:fb:f7:f0:5e:8c:3b:ef:75:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2E:62:7B:C6:0A:C6:61:DD:EC:2F:C2:FE:8F:C7:7B:AB:AD:9A:98
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:16:bd:e5:b1:e2:58:d9:39:37:e0:b1:c2:37:e1:d5:f1:
         3e:a1:72:b0:e6:01:2b:be:1e:f2:ea:1e:79:28:eb:b1:df:68:
         8f:57:84:fd:ae:65:b6:13:93:05:8c:50:d7:97:97:a9:0f:79:
         ea:9c:7c:f2:1c:7a:5e:ab:b9:65:03:2c:f2:e8:fd:87:90:e4:
         44:8b:0e:d5:bb:16:e7:57:2a:30:95:03:ae:91:1e:bb:b4:c4:
         71:26:11:34:86:10:7c:2d:e1:9d:e2:10:92:37:86:3c:4b:b6:
         99:34:6c:06:01:ae:7c:e5:e5:f8:86:8f:3e:7a:a3:83:4d:9f:
         ae:40:e3:8d:45:ae:ae:67:51:f5:24:ae:13:8d:64:72:b4:d6:
         99:5d:e6:df:60:74:78:b5:1a:29:34:04:9a:d7:2f:65:12:1f:
         67:50:ba:08:93:38:4b:13:a6:b1:5a:69:60:b1:b0:16:ab:22:
         4f:e4:a5:5b:d8:62:13:62:71:07:1e:7c:2c:79:51:b2:f4:78:
         9a:3a:ef:a3:a0:45:56:de:d1:21:7b:65:58:a9:09:13:4e:02:
         16:0d:f4:86:ee:66:a3:7d:8f:e1:e9:9b:8e:34:e3:05:7b:77:
         f7:24:f6:09:3d:be:d8:96:d8:55:b5:a1:e0:e8:42:37:b5:f9:
         1c:0d:87:f4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXowWUFKgkthPo1AMZ1NhA+9ze6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNTEwMjAyMzQ1NDBaFw0yNjEwMTkyMzUwNDBaMDMxMTAvBgNV
BAMTKEZEMkU2MjdCQzYwQUM2NjFEREVDMkZDMkZFOEZDNzdCQUJBRDlBOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMV3L9M9kUW0rkiAV4gm6y4VR
L8AXYfhl/TsqI35GUV/3nzo0VDWIWAiaAc+h32Sh65mDgGZz/4ciDmznwwG3Yxi/
BxaKe+12YGhgXFmigIzIpmnyazXtnVNx3QEErsEU6SB5+igmIOnm9BTJQELX6Uu1
my/9DfBQUTboSKO3oKu3k2krMVuTtY6f8enVYiXzNDy+1GBLc3g0dhhHbm+zmUic
Z15WgJF9hJWw5ABc4gutWddC1/mUIB9aA6MXST3PskFez6w6RwemIDGSu2P/+pM6
pyochCTgniinYLnoE+STxoPGDSTxlJEwOa3GtclsiUSSqKr79/BejDvvdfxJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/S5ie8YKxmHd7C/C/o/He6utmpgwHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzMxMzkzMDJlMzEzNDJlMzEzNDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzMyMzQzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4OjjAN
BgkqhkiG9w0BAQsFAAOCAQEAdPYWveWx4ljZOTfgscI34dXxPqFysOYBK74e8uoe
eSjrsd9oj1eE/a5lthOTBYxQ15eXqQ956px88hx6Xqu5ZQMs8uj9h5DkRIsO1bsW
51cqMJUDrpEeu7TEcSYRNIYQfC3hneIQkjeGPEu2mTRsBgGufOXl+IaPPnqjg02f
rkDjjUWurmdR9SSuE41kcrTWmV3m32B0eLUaKTQEmtcvZRIfZ1C6CJM4SxOmsVpp
YLGwFqsiT+SlW9hiE2JxBx58LHlRsvR4mjrvo6BFVt7RIXtlWKkJE04CFg30hu5m
o32P4embjjTjBXt39yT2CT2+2JbYVbWh4OhCN7X5HA2H9A==
-----END CERTIFICATE-----
Generated at Wed Oct 22 16:42:23 2025 by rpki-client