Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa
File:                     3139302e31342e3134322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          ACZvB4uQWQwzXUwoPWtH/2yR5+YfP39WRsys4mCu16o=
Subject key identifier:   9F:47:3E:AA:48:B9:30:29:F8:BD:EB:9C:9B:F8:E8:70:47:E0:E2:56
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       348BAA9D2C0231B06A3F7C9F35AF04C2D78D08EF
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 22 Sep 2026 00:36:21 +0000
ROA not before:           Tue 22 Sep 2026 00:31:21 +0000
ROA not after:            Tue 21 Sep 2027 00:36:21 +0000
asID:                     23243
IP address blocks:        190.14.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8b:aa:9d:2c:02:31:b0:6a:3f:7c:9f:35:af:04:c2:d7:8d:08:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Sep 22 00:31:21 2026 GMT
            Not After : Sep 21 00:36:21 2027 GMT
        Subject: CN=9F473EAA48B93029F8BDEB9C9BF8E87047E0E256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:bb:8c:9f:2a:14:a0:f8:54:92:4a:73:02:
                    46:31:1f:12:c3:bf:a2:32:12:e3:43:5a:4d:97:c9:
                    38:ab:e4:2e:e0:87:69:66:9b:be:50:ae:97:61:1f:
                    00:ec:b5:e3:63:7b:d1:18:c2:68:fb:84:6a:8d:6b:
                    ba:f3:dc:ea:50:07:ab:68:43:a5:b6:8a:d1:45:96:
                    66:ba:9f:5e:9d:a6:f7:d9:1e:e0:19:c2:6e:2c:ac:
                    ab:86:27:a1:a5:6f:8e:d7:f3:82:d3:ed:b4:f3:7a:
                    98:92:de:2e:cc:41:f6:74:a5:a7:47:b6:19:d8:bd:
                    98:ee:09:40:cf:bd:14:8f:1b:a9:ec:63:a1:54:70:
                    f9:3e:db:b5:e4:cc:61:66:21:09:5b:72:b7:a1:7c:
                    64:16:87:80:c5:0d:17:9a:f8:74:3c:dc:de:f7:28:
                    d8:47:40:25:be:89:33:ee:7b:f0:e2:10:37:d2:d7:
                    b8:c5:e4:9c:91:cc:f8:df:8e:c3:cb:17:f7:0c:24:
                    a8:ae:ce:2d:58:4c:54:3a:1b:35:07:c9:75:a8:21:
                    cd:9a:4d:d7:49:fa:70:9d:14:5e:32:12:9c:5a:1c:
                    05:9b:7a:31:c6:1d:a1:e9:04:dc:4e:0b:30:86:b2:
                    44:41:66:39:66:8f:e1:77:4a:21:81:85:6c:48:91:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:47:3E:AA:48:B9:30:29:F8:BD:EB:9C:9B:F8:E8:70:47:E0:E2:56
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3134322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:56:f6:69:ae:ee:85:3c:59:08:41:6d:d9:29:12:7e:75:a3:
         ec:ee:d8:ca:94:b7:fa:1c:af:bf:32:cd:94:7f:ee:83:b4:eb:
         04:d0:6f:94:47:19:4a:bb:e1:08:cd:f5:ad:a6:30:17:8b:09:
         e8:c6:cd:24:3d:9a:2c:6e:21:3e:a1:41:32:5d:35:13:1a:0d:
         0c:2c:5f:43:71:66:82:84:3a:44:cf:45:a3:0e:b0:35:74:dc:
         07:41:4b:52:f3:cc:da:46:2d:92:9e:a9:0a:f3:46:9e:fd:b7:
         e7:0a:cc:ac:14:c0:3f:8d:f8:c9:c4:3b:8f:ed:30:ae:83:bc:
         d1:8a:a0:f0:83:4c:40:d9:df:f6:5f:e3:03:0b:d2:03:35:94:
         69:65:bd:b7:1d:14:7a:e7:e1:a2:cd:29:69:43:1d:03:10:28:
         9c:b0:24:51:95:a5:16:05:90:66:0d:16:f8:92:1d:37:e1:b9:
         5d:21:1c:5d:a9:fa:51:f5:53:6e:37:0d:72:43:a4:28:49:b6:
         4e:07:8b:21:c0:ee:d5:c9:ff:50:d8:b4:c6:dd:8b:e9:c9:15:
         8c:58:27:db:93:35:59:dd:34:16:a7:08:d7:51:e3:c4:ec:db:
         72:72:ab:46:4f:99:df:53:2c:86:48:dc:03:ad:ac:98:92:dd:
         04:0a:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:06:34 2026 by rpki-client