Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          tPeXwKd2jM0cbSR5QYa42VOsBGmOiDhl0RXpxOyY2lA=
Subject key identifier:   7D:C0:EF:0E:D3:CA:E4:36:47:64:F8:CC:F5:A6:B0:4B:B1:EE:72:04
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       1CB90F2FE09DD756FCF7FB0A80BEA6F679641E12
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 22 Sep 2026 00:36:20 +0000
ROA not before:           Tue 22 Sep 2026 00:31:20 +0000
ROA not after:            Tue 21 Sep 2027 00:36:20 +0000
asID:                     23243
IP address blocks:        190.104.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 16:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b9:0f:2f:e0:9d:d7:56:fc:f7:fb:0a:80:be:a6:f6:79:64:1e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Sep 22 00:31:20 2026 GMT
            Not After : Sep 21 00:36:20 2027 GMT
        Subject: CN=7DC0EF0ED3CAE4364764F8CCF5A6B04BB1EE7204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:91:56:fb:0c:59:bf:f8:d5:8c:dd:06:81:
                    3c:a1:6b:cc:dc:02:7b:89:77:af:28:d6:53:7c:a7:
                    5d:2c:cf:3f:aa:5a:a2:1e:48:59:ac:41:9e:20:00:
                    11:10:8c:8b:5a:a2:fb:4a:e8:44:c3:a7:5f:d6:ba:
                    ba:3a:8c:ac:81:49:1f:66:75:55:c0:af:e7:e5:21:
                    be:1d:a0:6e:c0:2c:f0:2e:09:cc:2a:d0:1a:9a:60:
                    a1:de:36:7a:8e:e0:96:a8:8d:d7:0b:7c:c2:c6:b5:
                    3d:cc:ab:bd:84:8f:09:b5:0e:1f:a0:77:52:ff:4b:
                    84:c4:bd:08:cd:19:a4:fb:a9:70:69:60:f7:8b:2e:
                    f6:c6:46:48:72:a2:fb:95:bb:c0:12:00:9a:20:e4:
                    50:68:4c:ff:d2:2a:13:9d:4c:77:6b:6f:d9:90:b7:
                    65:d1:8f:4e:22:02:c0:23:09:80:33:81:78:76:87:
                    e9:a0:88:50:9d:82:f3:2c:9b:87:b0:00:f4:80:48:
                    47:ea:57:a3:0b:85:46:6b:50:9c:2f:92:ac:85:e2:
                    a0:99:af:0f:47:22:22:3a:d0:c7:bd:ac:c1:ec:67:
                    2c:4f:fb:db:bd:86:5d:5a:f3:77:3e:79:2e:9e:7e:
                    c5:61:0c:8c:f3:1f:6e:24:6a:3b:64:28:9d:e0:70:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C0:EF:0E:D3:CA:E4:36:47:64:F8:CC:F5:A6:B0:4B:B1:EE:72:04
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3132332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:61:95:19:9e:ca:6a:cc:d3:85:a2:bf:6d:1e:44:0a:cb:
         d9:7a:3b:b9:a2:3d:c4:3f:51:cc:b2:c4:14:21:89:1f:6a:15:
         11:c0:1e:e9:d2:3b:fd:85:e3:82:17:f6:c8:ac:ed:bd:6a:25:
         22:c1:0a:5c:a0:1a:b6:d7:e5:46:e8:80:70:51:f6:48:96:75:
         89:57:1b:e8:b0:fc:a8:55:e4:27:f9:0e:9e:43:c5:05:bb:58:
         6d:7a:57:b2:0f:fc:9a:0b:5e:d2:32:ff:07:68:d7:8b:1f:91:
         ae:d8:51:2e:8c:19:d5:06:35:a4:79:22:42:c3:67:ed:22:28:
         09:08:2a:04:5d:ec:75:59:7d:7e:55:94:95:05:cb:4f:8b:e7:
         92:d1:5b:77:95:a3:bc:f2:93:17:8d:37:fc:61:0e:6d:21:2f:
         2f:a4:40:97:0d:60:9f:ba:47:87:70:c1:ad:ca:da:88:57:84:
         15:3f:ca:dd:51:77:f9:cd:6c:f6:15:91:20:e3:21:b0:35:22:
         fb:34:9a:6b:1b:86:e3:c0:4a:c7:bf:c4:e8:84:ac:f7:53:80:
         68:85:d9:a3:d9:4b:06:a6:06:69:f9:dd:52:bb:ed:39:8d:9e:
         7e:53:5f:48:a5:87:b9:af:42:cc:86:90:36:a8:18:37:e5:51:
         3a:a1:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:03:33 2026 by rpki-client