Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203130363230.roa
File:                     3139302e3132362e302e302f31352d3234203d3e203130363230.roa (raw, json)
Hash identifier:          +pILXn5OU/+cvQ8DqYof0EjrQTvl6KMyluH8BJNDV90=
Subject key identifier:   B6:00:5A:48:5F:AD:35:E6:93:94:EA:5A:92:BE:A2:54:E8:FC:B8:7A
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7D144DE70A6B06A9E6B4B42F47A54342A2D2F767
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203130363230.roa
Signing time:             Tue 04 Feb 2025 18:05:07 +0000
ROA not before:           Tue 04 Feb 2025 18:00:07 +0000
ROA not after:            Tue 03 Feb 2026 18:05:07 +0000
asID:                     10620
IP address blocks:        190.126.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:14:4d:e7:0a:6b:06:a9:e6:b4:b4:2f:47:a5:43:42:a2:d2:f7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:07 2025 GMT
            Not After : Feb  3 18:05:07 2026 GMT
        Subject: CN=B6005A485FAD35E69394EA5A92BEA254E8FCB87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:8d:08:2b:cf:97:c3:87:9b:13:12:b0:c8:
                    64:19:dc:1a:30:93:f5:90:19:39:6a:e4:ed:99:eb:
                    f3:a3:0c:df:7f:1d:68:f2:4f:90:cc:b8:9a:7d:05:
                    ac:fb:a4:83:b1:d6:7e:e1:76:6a:88:f3:2b:74:47:
                    37:10:b2:cf:df:ac:46:ad:cf:63:7f:91:39:23:27:
                    0a:0b:3a:d4:71:89:b7:ab:9c:57:22:85:06:9d:ef:
                    21:f4:0f:9f:4b:12:c9:b3:75:b9:37:ed:7d:64:61:
                    70:a7:16:7e:19:28:26:51:f0:d7:79:99:d5:c1:3c:
                    4a:16:af:29:b5:5c:31:fc:4e:b0:5e:ef:54:a1:c6:
                    cb:81:dd:62:af:08:c5:76:7c:99:38:a5:59:cb:c1:
                    eb:65:1c:9b:6b:09:39:88:16:59:52:d6:2c:88:13:
                    9c:1b:ec:25:36:5b:6d:9e:7b:ee:48:74:93:47:c0:
                    9a:77:b6:a5:90:b5:82:97:2f:21:36:7e:3c:d7:3e:
                    55:d0:30:84:0c:26:2b:34:ef:6b:30:6f:5f:42:d6:
                    23:31:34:a4:b2:62:5f:d9:26:13:14:c4:23:02:d6:
                    04:e1:93:49:3c:f7:cd:ac:a1:a7:ff:df:2b:4a:37:
                    00:0b:11:65:40:fa:62:5a:32:a0:36:35:da:2f:fa:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:5A:48:5F:AD:35:E6:93:94:EA:5A:92:BE:A2:54:E8:FC:B8:7A
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203130363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:7e:c6:8a:4b:15:4c:7e:7c:44:fa:9d:0e:99:70:d7:da:
         2e:65:78:1a:0a:6f:30:db:d6:6d:16:5e:72:a8:21:b1:15:25:
         3a:3c:3b:0e:1d:ad:d8:88:b7:55:43:04:70:c3:94:be:57:48:
         63:90:ee:f8:89:1e:b1:fc:42:1c:11:8d:62:dc:1d:c2:2b:7e:
         47:ea:89:e3:67:22:7d:48:8a:f9:86:c0:ad:1b:d6:57:16:10:
         ce:43:47:45:1e:8f:01:d2:f3:f6:8f:1f:4b:7e:eb:5f:d4:d0:
         ce:88:79:36:d9:3b:66:2c:cc:87:bb:04:d2:5d:b5:6c:70:32:
         b5:d3:1f:a2:30:1d:ef:77:e1:af:4d:d9:42:4e:70:d7:f3:62:
         cd:c3:7c:af:79:86:54:8b:e4:e1:34:64:44:a4:dc:d6:dc:b0:
         2f:c7:8f:61:6c:e9:cb:c5:21:3f:93:7f:1a:b6:4b:8c:64:15:
         07:91:10:a5:a7:da:e1:fc:22:9f:68:4e:92:a8:16:87:10:f9:
         a0:db:0f:40:d1:01:06:da:35:be:7d:20:d1:96:a9:69:83:be:
         c3:97:86:29:28:d7:2b:22:8c:ca:6b:aa:f2:8b:46:ca:63:0e:
         ef:99:63:d2:76:2a:5f:89:96:f7:a9:c4:c4:31:75:25:9a:b7:
         cf:2d:6b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:01 2025 by rpki-client