Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134332e302f32342d3234203d3e203532333632.roa
File:                     3139302e31342e3134332e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          Od5wAF0Io3uBfbrGTl/cqmMrxbXqXq0i668nzz+bnPg=
Subject key identifier:   A8:6B:48:7B:39:A7:23:06:FC:94:2D:B9:98:EB:FE:87:07:82:BB:22
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       018BEF53611DC1ECBDA6956C7F96AED7A3BA7B7E
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134332e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 04 Feb 2025 18:06:30 +0000
ROA not before:           Tue 04 Feb 2025 18:01:30 +0000
ROA not after:            Tue 03 Feb 2026 18:06:30 +0000
asID:                     52362
IP address blocks:        190.14.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ef:53:61:1d:c1:ec:bd:a6:95:6c:7f:96:ae:d7:a3:ba:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:30 2025 GMT
            Not After : Feb  3 18:06:30 2026 GMT
        Subject: CN=A86B487B39A72306FC942DB998EBFE870782BB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:8e:3b:8b:79:30:c0:1d:7f:ab:91:a9:29:
                    8f:5d:a2:dd:37:2a:71:89:76:af:bd:1d:79:f8:31:
                    d0:50:48:58:16:58:3e:e4:61:91:d3:b1:c2:5c:87:
                    d8:cc:4e:ee:95:26:7a:4b:23:94:7b:60:59:51:a1:
                    b6:26:1a:18:3c:37:a7:d7:5c:e3:b3:94:74:79:b0:
                    77:40:f0:f0:97:d2:1d:ad:d6:5e:e4:25:cf:14:1d:
                    cc:4e:7d:65:52:67:36:ec:9f:27:8f:84:3f:b3:3a:
                    bf:f1:be:08:1b:82:6a:58:ef:df:3e:17:74:74:da:
                    63:11:3e:f5:ab:81:87:12:bf:be:ea:64:8e:b4:cd:
                    21:09:c7:97:cb:d1:cc:2b:43:0c:ba:07:a4:f5:30:
                    d0:e8:29:ac:41:aa:35:78:9e:34:b2:2a:d8:35:f2:
                    29:9b:af:4d:9d:66:80:5e:20:64:4d:10:da:99:7d:
                    74:e8:00:56:e3:10:67:cf:0c:f0:95:44:ca:82:72:
                    36:9f:2a:b6:97:67:fc:bd:bf:46:ad:9c:4f:e0:13:
                    2a:a2:84:9c:59:af:31:1f:e9:c0:fe:0d:c7:a2:fa:
                    e1:a6:f9:00:d8:3b:09:60:b6:2f:12:d2:61:a4:c0:
                    32:50:fa:59:3c:83:0e:c0:28:36:83:ab:b6:bf:1f:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:48:7B:39:A7:23:06:FC:94:2D:B9:98:EB:FE:87:07:82:BB:22
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134332e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:2d:53:3a:90:21:b5:e6:9d:ab:3b:14:1d:3e:45:5d:ff:
         0a:04:55:52:a8:b1:c2:08:b3:02:93:89:00:4d:b1:97:64:f5:
         1a:78:3e:44:00:e6:4c:e3:51:5c:82:e3:9a:c4:a8:13:ad:6a:
         d5:0f:05:3f:02:e3:b9:a0:4a:ec:aa:36:23:86:33:7b:72:23:
         a2:3c:05:b5:cd:a8:3f:68:e5:28:65:9b:ea:49:e9:99:25:4d:
         03:88:9f:94:26:d6:06:83:38:fe:a8:14:4d:1f:6a:8c:39:dd:
         91:ba:c8:2d:40:cc:76:0d:d0:ce:20:d2:98:52:87:c7:da:89:
         46:43:3b:3e:8d:cc:7f:6f:07:59:e1:e1:2c:97:1a:7f:4e:4c:
         ad:d7:07:36:fb:c7:45:33:e7:ec:3f:68:b0:d7:89:0b:f1:5f:
         84:9a:d3:1c:22:d5:65:0d:67:8f:85:fa:1e:3d:ad:f6:2c:89:
         fc:4b:0d:f2:f6:2e:7f:1b:fe:0c:4d:e4:4b:de:d9:58:b9:9f:
         d6:3c:87:6e:78:67:47:c5:f8:58:40:2e:ff:0b:54:04:48:d4:
         36:79:53:60:a3:2f:5a:b6:72:14:7b:a5:0a:e3:23:60:a5:8f:
         c8:9f:55:23:08:c1:bb:47:9e:64:3e:f9:e4:cd:99:d1:21:24:
         18:13:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:22 2025 by rpki-client