Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3234203d3e203236363131.roa
File:                     3139302e3132352e302e302f31362d3234203d3e203236363131.roa (raw, json)
Hash identifier:          4KY2vlZVCasDaeNeuDKMWH4BYV3LKYQzDhk/HjgzMws=
Subject key identifier:   2E:E8:DF:20:3E:1A:15:64:CD:1B:89:E5:FE:56:57:EB:C6:32:A8:5F
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       46CCA1ABE6977BDA260A297C2CB6BE9886081985
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:04 +0000
ROA not before:           Tue 05 Mar 2024 17:56:04 +0000
ROA not after:            Tue 04 Mar 2025 18:01:04 +0000
asID:                     26611
IP address blocks:        190.125.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cc:a1:ab:e6:97:7b:da:26:0a:29:7c:2c:b6:be:98:86:08:19:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:04 2024 GMT
            Not After : Mar  4 18:01:04 2025 GMT
        Subject: CN=2EE8DF203E1A1564CD1B89E5FE5657EBC632A85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:19:0e:7d:1f:b9:87:93:43:31:66:81:dc:
                    c2:7c:86:09:a1:da:06:19:c0:d5:fa:20:26:93:d4:
                    c3:e9:d0:c9:0c:05:e0:eb:b7:2a:9c:65:5d:ff:82:
                    6b:af:05:57:19:bb:df:f3:3b:11:dc:d3:59:d2:05:
                    94:2a:a0:26:d2:a1:22:40:59:32:74:9c:2e:5f:3b:
                    61:3d:6d:a5:22:e0:bd:fb:cd:a6:ef:95:e0:4d:7e:
                    3a:99:8a:0f:e6:b9:23:8f:6e:39:49:45:1e:47:e7:
                    b6:07:33:28:15:84:8a:82:ca:d9:57:6c:4c:82:c5:
                    2f:99:e1:2a:5a:5f:0e:6e:27:68:f3:ea:93:bb:7c:
                    af:a2:fd:9a:06:0b:63:be:c5:82:56:1d:dc:b4:a4:
                    c7:c8:2f:05:b7:0f:18:14:49:a0:e2:27:28:b4:16:
                    2d:7d:cc:e3:8b:2f:ed:36:ec:39:93:0a:dd:85:f2:
                    8f:e9:e1:01:a0:fd:73:27:a8:40:74:42:ce:ad:9d:
                    d5:96:3c:38:8a:43:a5:e8:a1:ff:1f:70:ad:a1:b3:
                    9d:3a:fd:f9:0f:94:ae:47:5d:b6:c2:9f:50:e3:5b:
                    21:cb:ce:00:5c:6f:1d:7b:7d:9d:91:fb:76:23:82:
                    df:3b:73:0e:e9:9a:8c:97:49:36:a8:2b:f7:f4:0f:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:DF:20:3E:1A:15:64:CD:1B:89:E5:FE:56:57:EB:C6:32:A8:5F
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:db:0a:a4:55:2f:d9:ba:07:7e:ec:dc:88:f9:92:56:cf:
         23:29:67:eb:3d:5b:83:2e:ef:5b:b6:78:5c:f7:e5:61:f6:ea:
         ab:49:00:36:0c:8d:59:5b:e0:d6:7b:33:ab:8e:2d:3b:87:00:
         f7:10:96:52:c6:f4:e9:8c:5a:8f:88:a7:e1:e3:90:9a:ba:fd:
         da:58:06:cf:bd:66:65:c0:69:d0:28:de:ab:7e:01:bd:a5:0c:
         ab:62:75:68:7f:5d:51:41:f4:3d:53:6d:8a:23:7d:70:6f:b7:
         89:9d:78:10:88:0f:26:11:da:ba:d7:6e:11:ab:a2:59:d7:7f:
         a4:67:69:aa:15:79:6f:f3:64:a4:91:68:83:d9:34:ea:44:3b:
         ac:e7:77:f8:57:03:63:36:10:b6:dd:52:dd:5c:2a:91:af:7c:
         b7:38:03:75:2c:bf:72:b7:c1:00:34:8a:18:69:b5:41:91:39:
         ac:2c:fd:72:88:03:7d:a7:34:07:bb:8c:85:d4:cb:9a:b5:92:
         e8:c2:5d:8f:55:e9:e0:0b:40:f2:98:37:34:08:1a:ec:d7:c2:
         66:1c:bf:6e:a7:5e:0a:e5:ca:c6:b3:c1:06:46:40:e0:1e:08:
         59:37:2f:f9:49:33:86:eb:8b:ef:e0:bf:bc:8e:2b:1b:bd:49:
         5a:0a:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org