Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          MpoFipFQZ/2PjyXJWwqO5xbEJpcY3eT8/DYatnjqb6M=
Subject key identifier:   88:71:50:19:B7:84:C9:6B:42:7D:D5:88:B7:1D:35:E2:D2:76:8B:6D
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       7C3FD7B9EAA246FC693D5BAB58C9D18CD38F2D27
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 20 Oct 2025 23:50:40 +0000
ROA not before:           Mon 20 Oct 2025 23:45:40 +0000
ROA not after:            Mon 19 Oct 2026 23:50:40 +0000
asID:                     23243
IP address blocks:        190.104.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 17:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3f:d7:b9:ea:a2:46:fc:69:3d:5b:ab:58:c9:d1:8c:d3:8f:2d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Oct 20 23:45:40 2025 GMT
            Not After : Oct 19 23:50:40 2026 GMT
        Subject: CN=88715019B784C96B427DD588B71D35E2D2768B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:ee:d0:7d:ef:26:5b:91:30:6e:85:49:c2:
                    c4:18:a5:d6:ea:28:d7:18:00:84:dd:8f:57:61:1d:
                    bd:53:23:16:d7:35:39:17:b3:f6:03:f5:07:0a:7f:
                    00:97:72:e3:a7:4c:cd:f6:32:ae:2d:03:1a:f0:13:
                    0c:6b:bf:96:f9:a7:fd:98:b9:ce:6c:79:a9:1e:49:
                    d6:ad:c1:29:24:a8:3c:09:d3:06:03:cd:84:9f:a1:
                    f1:7b:5f:fd:46:a4:c2:bb:dc:4e:c3:24:cb:02:2e:
                    dc:39:32:8a:79:53:14:c2:7d:11:52:c1:f5:72:e7:
                    bf:5a:91:07:2f:d4:23:a1:83:1c:14:8e:fe:3d:a4:
                    06:6f:73:0c:57:5b:36:ed:f6:40:ff:bb:39:35:b2:
                    d1:d9:a2:2a:6a:a0:a1:3c:1e:cc:cd:48:18:9d:35:
                    04:7f:54:70:be:72:9e:bb:40:68:84:53:50:93:84:
                    db:01:34:d0:68:0a:91:73:6c:1b:22:d5:9a:69:70:
                    81:89:f2:df:3c:89:2e:20:30:f7:32:b0:6f:cb:9a:
                    98:47:d5:ad:8c:62:57:43:c6:7c:c1:a9:90:e9:60:
                    59:d4:de:f2:7c:cb:01:80:19:3f:3e:34:b2:1c:97:
                    f7:4b:ce:d0:a7:8e:17:25:69:56:47:3a:de:f9:e4:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:71:50:19:B7:84:C9:6B:42:7D:D5:88:B7:1D:35:E2:D2:76:8B:6D
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:a6:b3:44:03:9f:d6:c5:04:a1:cf:e4:1a:9c:97:3f:f3:
         7e:41:d9:20:58:fd:d2:5f:e0:85:b5:c7:67:db:4b:90:fb:cb:
         1f:c3:3a:bc:4b:28:a8:b3:d8:e6:0a:53:c1:a2:87:eb:44:2e:
         79:89:94:59:92:63:e4:8f:a6:96:61:56:1e:80:42:22:25:4e:
         63:ca:9d:0b:b0:9a:80:be:e4:1e:58:1d:08:0c:47:7b:34:d6:
         ec:bb:29:b8:1d:e9:72:49:69:3d:a1:3b:15:76:66:7e:e0:85:
         18:c6:b0:78:c5:88:09:2c:df:2f:cc:6d:f0:fd:e1:9d:71:e4:
         07:5a:cb:90:44:ca:92:f9:dd:7b:8e:d5:76:18:94:72:58:7d:
         f1:0a:43:47:80:f6:77:a5:ee:cd:91:7b:ef:bb:4e:df:6f:ed:
         fe:c6:6e:8c:1a:73:04:18:4b:ec:9d:9b:ac:55:5e:19:bf:3b:
         05:03:ff:65:46:38:2e:9d:da:f4:46:9c:31:11:df:ce:e8:e9:
         17:8d:b5:12:52:00:ea:2a:a0:56:e7:5c:eb:0e:47:a4:d1:d1:
         ab:0b:50:c3:5d:46:e6:46:83:a9:33:aa:91:74:2d:db:4d:ff:
         cb:b6:52:d1:e6:f6:43:34:89:fa:ed:12:af:d5:a9:03:02:09:
         05:a3:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:08:01 2025 by rpki-client