Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3234203d3e203236363131.roa
File:                     3138312e3134342e302e302f31322d3234203d3e203236363131.roa (raw, json)
Hash identifier:          2nuEyVlaUTL8TcwAz7zVD1BHVkBC9dHF+/k1OrQANik=
Subject key identifier:   49:59:8E:93:DF:20:E8:75:53:41:C4:4B:67:D6:1B:31:45:5F:00:7F
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       1715A33AEE9B216DA69C122B8AB4F8B00DD7E14E
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:02 +0000
ROA not before:           Tue 05 Mar 2024 17:56:02 +0000
ROA not after:            Tue 04 Mar 2025 18:01:02 +0000
asID:                     26611
IP address blocks:        181.144.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:15:a3:3a:ee:9b:21:6d:a6:9c:12:2b:8a:b4:f8:b0:0d:d7:e1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:02 2024 GMT
            Not After : Mar  4 18:01:02 2025 GMT
        Subject: CN=49598E93DF20E8755341C44B67D61B31455F007F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:e1:57:55:c4:f9:40:9b:95:81:6c:61:46:
                    82:90:1c:b4:c1:96:c6:1e:8b:a6:0c:53:fb:00:2f:
                    71:22:ca:36:0e:c1:83:b9:a4:00:26:e9:e5:a0:9e:
                    8a:64:2c:f8:d2:f5:45:ee:ce:fc:75:01:f3:3f:1c:
                    f8:ca:a6:27:6d:1b:4f:08:b8:89:78:9c:87:07:e6:
                    32:1c:5e:aa:10:a9:7f:f5:1a:ba:63:e2:a1:f3:ed:
                    d7:af:c4:ae:30:c4:d3:be:bb:48:94:d5:56:05:1a:
                    43:fd:9b:6a:7b:a0:54:ab:7a:ca:cc:e0:1c:e1:d1:
                    59:62:68:9b:bc:05:d3:f6:ca:a5:aa:75:31:42:46:
                    44:61:e9:27:9e:33:8a:7e:99:b2:61:71:42:e6:5d:
                    a1:8f:76:a1:29:52:a8:db:93:0a:37:10:39:91:e6:
                    0f:f0:3e:bf:cb:6e:07:73:bb:c7:19:bb:04:59:9d:
                    93:25:c7:6c:c8:0f:b6:c8:53:42:e2:2a:67:5a:40:
                    09:14:f1:ee:89:69:0d:03:3b:92:e9:b9:ab:6a:f2:
                    be:d3:ff:24:ba:fc:41:6b:82:4e:da:84:81:3c:8f:
                    00:23:7e:74:07:a4:f4:91:1b:35:0f:5a:27:48:70:
                    00:a5:2c:f0:80:ba:20:99:8d:a3:98:11:0a:28:1c:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:8E:93:DF:20:E8:75:53:41:C4:4B:67:D6:1B:31:45:5F:00:7F
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         5f:fe:68:8f:2b:d4:40:46:56:04:d1:fa:a5:67:6e:29:cd:15:
         18:33:08:9c:7b:cf:d9:42:51:5b:66:02:31:d0:30:48:ea:03:
         0e:ca:cf:90:76:09:5a:99:2f:d2:ee:1f:33:63:b7:c0:91:a4:
         bd:1d:e3:b9:a3:c0:4d:9e:6b:bf:35:4e:77:36:19:48:94:ae:
         f7:19:f4:f1:86:1a:cc:21:5c:ab:55:a5:3e:75:4f:c7:5c:df:
         3e:e3:78:3a:8c:ac:93:23:92:b2:3c:f2:9c:21:a6:4c:e7:1c:
         63:ac:d1:e4:0f:1e:a1:b4:8e:90:75:66:20:3a:d4:4c:0a:a9:
         59:35:5b:b7:91:2a:7c:f4:67:cc:0c:c3:ed:ef:bd:7c:7c:18:
         e5:d9:de:b4:2b:43:eb:88:d6:bc:a1:c3:06:f8:55:50:2d:ca:
         03:5e:bb:c6:90:8e:5a:f2:02:44:47:7f:cc:90:9d:b9:91:09:
         db:03:ff:eb:9a:0e:da:66:ef:5a:cb:f3:56:34:16:4f:18:b3:
         50:5e:5b:7b:9d:24:55:cd:c0:65:0e:a4:d9:37:a7:f0:69:c0:
         96:b5:4c:ab:1e:8f:15:ed:b6:d3:54:62:fc:65:b7:cd:b4:eb:
         a3:f2:a0:92:aa:c3:98:08:0f:44:c7:1f:39:d9:ec:fb:c6:cd:
         4c:35:dd:d8
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUFxWjOu6bIW2mnBIrirT4sA3X4U4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MDJaFw0yNTAzMDQxODAxMDJaMDMxMTAvBgNV
BAMTKDQ5NTk4RTkzREYyMEU4NzU1MzQxQzQ0QjY3RDYxQjMxNDU1RjAwN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypOFXVcT5QJuVgWxhRoKQHLTB
lsYei6YMU/sAL3EiyjYOwYO5pAAm6eWgnopkLPjS9UXuzvx1AfM/HPjKpidtG08I
uIl4nIcH5jIcXqoQqX/1Grpj4qHz7devxK4wxNO+u0iU1VYFGkP9m2p7oFSresrM
4Bzh0VliaJu8BdP2yqWqdTFCRkRh6SeeM4p+mbJhcULmXaGPdqEpUqjbkwo3EDmR
5g/wPr/Lbgdzu8cZuwRZnZMlx2zID7bIU0LiKmdaQAkU8e6JaQ0DO5Lpuatq8r7T
/yS6/EFrgk7ahIE8jwAjfnQHpPSRGzUPWidIcAClLPCAuiCZjaOYEQooHGGzAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUSVmOk98g6HVTQcRLZ9YbMUVfAH8wHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzgzMTJlMzEzNDM0MmUzMDJlMzAy
ZjMxMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwS1kDANBgkq
hkiG9w0BAQsFAAOCAQEAX/5ojyvUQEZWBNH6pWduKc0VGDMInHvP2UJRW2YCMdAw
SOoDDsrPkHYJWpkv0u4fM2O3wJGkvR3juaPATZ5rvzVOdzYZSJSu9xn08YYazCFc
q1WlPnVPx1zfPuN4OoyskyOSsjzynCGmTOccY6zR5A8eobSOkHVmIDrUTAqpWTVb
t5EqfPRnzAzD7e+9fHwY5dnetCtD64jWvKHDBvhVUC3KA167xpCOWvICREd/zJCd
uZEJ2wP/65oO2mbvWsvzVjQWTxizUF5be50kVc3AZQ6k2Ten8GnAlrVMqx6PFe22
01Ri/GW3zbTro/KgkqrDmAgPRMcfOdns+8bNTDXd2A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org