Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133322e302f32342d3234203d3e203233323433.roa
File:                     3139302e31342e3133322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          XJANqHg1tl5x1KsCGeZxo6lyNPr65oVTmQEebiEkIvE=
Subject key identifier:   07:33:DD:C4:BC:7B:F6:6E:EC:83:B1:FE:17:85:96:77:25:00:DA:BF
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       05DEE21434E3D9566C29F4480B1AD4B3A4C9F1A4
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133322e302f32342d3234203d3e203233323433.roa
Signing time:             Mon 20 Oct 2025 21:50:40 +0000
ROA not before:           Mon 20 Oct 2025 21:45:40 +0000
ROA not after:            Mon 19 Oct 2026 21:50:40 +0000
asID:                     23243
IP address blocks:        190.14.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 17:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:de:e2:14:34:e3:d9:56:6c:29:f4:48:0b:1a:d4:b3:a4:c9:f1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Oct 20 21:45:40 2025 GMT
            Not After : Oct 19 21:50:40 2026 GMT
        Subject: CN=0733DDC4BC7BF66EEC83B1FE178596772500DABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:f8:27:b6:cc:0f:a8:7b:c4:0a:b1:db:67:
                    99:72:8d:9c:3a:3a:53:25:40:5b:e9:32:74:19:58:
                    c1:6c:7f:ad:1e:20:e9:e7:ee:2f:b8:a0:a0:8c:33:
                    cd:d0:8b:ba:46:ea:23:d1:7e:69:1f:c4:b1:4c:d8:
                    9d:c7:14:54:b5:78:17:2a:d9:ce:22:0b:75:f7:55:
                    d2:bd:7c:fc:9d:e3:1a:95:63:fb:1b:94:fe:f0:8b:
                    e0:1b:b2:76:5f:fd:68:80:57:21:c3:78:56:3a:a2:
                    5c:e8:30:be:a0:2a:e3:ec:b0:6e:d9:24:12:88:8f:
                    38:53:a8:2e:17:24:fb:75:cb:ee:56:9b:89:5e:59:
                    a9:b2:66:70:21:77:ff:43:c9:bd:9f:9f:f1:c7:dc:
                    00:6d:2b:e2:af:ee:0f:47:69:1e:6c:d7:3c:5b:fe:
                    39:d9:0d:ff:35:e5:a9:13:b4:96:25:d5:55:e1:a7:
                    f1:56:b4:0d:84:3f:df:43:24:16:8c:5a:56:a0:8a:
                    43:63:0d:f4:a3:d2:61:0d:a4:4d:af:8d:a9:1f:d2:
                    98:d4:75:bd:c5:d9:15:24:66:76:39:fd:4d:b4:55:
                    d7:9b:9c:52:7b:5c:7f:15:f2:d8:09:7c:0c:da:d9:
                    1a:cc:5f:40:25:b3:09:b8:71:e1:a2:b4:1b:79:2f:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:DD:C4:BC:7B:F6:6E:EC:83:B1:FE:17:85:96:77:25:00:DA:BF
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:27:70:b5:61:19:1f:56:08:4d:63:e6:53:04:41:82:12:96:
         99:3a:42:9d:de:17:c8:c8:fe:c8:47:24:43:e2:5d:10:bf:f3:
         78:65:84:99:8f:6f:19:4b:eb:e9:19:09:c6:ac:7a:a1:0d:ed:
         ee:b4:38:8c:b3:c6:fd:eb:1a:1a:b0:8a:dd:a1:16:bb:0f:e8:
         1f:fd:73:9e:a6:da:9a:86:25:b1:64:48:79:e5:a2:35:64:58:
         81:57:94:7e:0e:f7:02:1f:0c:38:e8:f4:b9:c4:b5:9e:6e:6f:
         94:63:3f:9c:52:c6:6e:63:68:3f:01:d5:f1:28:8b:04:0a:0d:
         89:f0:9b:50:80:4e:b9:af:6f:50:8b:47:60:6b:21:0a:73:ee:
         55:aa:8b:e3:d2:4d:74:4a:2b:29:75:5f:70:2d:a0:23:fb:7e:
         21:03:8d:19:1e:8a:8d:b3:14:ff:8f:38:da:b1:bd:f9:d9:ae:
         25:da:1b:26:f6:f3:e9:8a:d8:25:2b:30:64:8a:f7:03:7e:c4:
         66:9c:02:5f:f3:ed:3c:be:46:12:62:e1:0b:2d:6e:06:70:ad:
         9f:cd:87:e6:b2:33:a9:c6:76:5e:d4:4d:23:87:ae:98:88:9a:
         05:96:d9:18:e5:6b:b2:ff:96:3e:ee:23:fe:67:de:a3:6a:e4:
         bc:e8:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:27:22 2025 by rpki-client