Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa
File:                     3139302e31342e3134322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          ORGCttmpHYwhMVXkf3ibcqXVvCmokEZnKPfMd2FmoeU=
Subject key identifier:   74:E0:1C:43:85:A4:24:E7:1B:D0:78:68:06:8D:84:2B:35:F6:5D:32
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       340CBE3809AAED73DCB4AD835DB474344F93DB1B
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 18 Nov 2024 23:15:00 +0000
ROA not before:           Mon 18 Nov 2024 23:10:00 +0000
ROA not after:            Mon 17 Nov 2025 23:15:00 +0000
asID:                     23243
IP address blocks:        190.14.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0c:be:38:09:aa:ed:73:dc:b4:ad:83:5d:b4:74:34:4f:93:db:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Nov 18 23:10:00 2024 GMT
            Not After : Nov 17 23:15:00 2025 GMT
        Subject: CN=74E01C4385A424E71BD07868068D842B35F65D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:23:ad:46:ae:05:c9:cb:0a:6e:f8:af:fc:
                    5c:5d:e4:25:ed:dd:18:0e:8f:ac:73:e7:d7:97:49:
                    a4:a1:5c:a9:6a:4b:38:00:95:a1:a0:93:95:1d:0d:
                    f3:7f:33:3c:9c:24:e7:65:87:b1:1c:78:84:cc:37:
                    6f:08:db:e3:6b:85:05:25:90:c8:ad:9d:7f:82:00:
                    65:98:91:0b:a5:cf:d7:19:da:85:83:cb:d2:56:2d:
                    92:ca:a4:98:0f:b6:a9:02:62:4a:10:87:65:fb:34:
                    1d:26:f7:74:44:99:aa:9c:f8:0d:f7:df:0f:5a:03:
                    25:3b:32:5d:83:4b:30:65:ae:c8:cf:ff:9e:90:d6:
                    2a:5a:93:d1:77:82:68:5d:a5:70:1b:7e:93:fc:26:
                    6a:8c:53:4f:75:b2:b0:ce:1f:7d:28:85:e9:e6:55:
                    21:36:f4:1e:22:98:54:53:16:0b:02:c7:b7:ab:02:
                    2d:1b:52:9f:2f:f2:38:06:f2:8f:fc:81:f6:d6:b6:
                    c5:d6:e3:a8:a4:bf:03:7f:51:40:5f:95:75:75:a1:
                    b3:1b:28:82:fb:04:d7:07:0a:87:76:f1:88:cc:af:
                    35:83:4e:d0:16:cd:00:05:f6:3e:2e:e7:f9:99:a8:
                    04:50:c7:d7:09:69:a5:ab:97:d9:6c:f6:1f:42:63:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E0:1C:43:85:A4:24:E7:1B:D0:78:68:06:8D:84:2B:35:F6:5D:32
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:53:f0:90:29:3b:8a:ba:8a:a4:e1:19:bd:af:c2:a2:9e:3c:
         af:d0:bc:25:f2:fe:f4:28:6e:bd:64:68:51:a7:a1:d7:77:18:
         d2:a5:11:d0:ba:af:bd:1c:88:47:d4:20:50:7f:52:51:fb:dc:
         65:59:bb:c1:1b:90:82:ff:8a:51:a2:46:e5:ca:71:57:ee:6a:
         30:cc:4d:a0:31:3c:6a:8d:61:a8:31:db:4a:f5:3c:c0:2d:31:
         0f:a9:16:ea:73:53:02:ee:a6:e6:34:f4:68:54:78:93:4e:7e:
         82:d1:3e:46:78:0f:fe:f5:b1:95:85:e2:17:c1:25:9f:f0:e8:
         02:f8:9d:06:86:75:18:8a:2a:0f:f8:60:82:aa:70:d7:ee:08:
         e2:c4:8e:c2:20:11:57:88:07:31:0c:7e:33:9a:c3:7d:0c:ee:
         8e:ac:82:d5:bc:6b:a2:36:a4:6f:ed:92:e9:20:60:0b:00:2e:
         63:e3:67:e0:bd:40:76:45:c7:96:3b:24:33:dd:e2:1a:c0:9b:
         3e:8f:44:cd:fd:71:4c:bc:7b:d1:37:dd:21:e8:22:79:a3:a9:
         4b:39:7e:da:16:b9:48:1c:41:a8:7a:5f:c3:11:b9:1d:50:6a:
         20:ce:20:3a:c2:cd:3d:e0:61:2b:98:62:59:74:4f:6a:d6:6c:
         5b:5f:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org