Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa
File:                     3139302e3132362e302e302f31352d3234203d3e203236363131.roa (raw, json)
Hash identifier:          2MftyhiYeU8hPRs4b/i6M6Jz3GUP1XhroMkqa8QPwdA=
Subject key identifier:   A4:38:B0:77:06:6B:5B:CD:04:C5:1A:6C:40:6C:EA:EE:43:64:A2:5F
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7D4964221F43C0C06BDE755B5BB5F6EE12B903CE
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:00 +0000
ROA not before:           Tue 04 Feb 2025 18:00:00 +0000
ROA not after:            Tue 03 Feb 2026 18:05:00 +0000
asID:                     26611
IP address blocks:        190.126.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:49:64:22:1f:43:c0:c0:6b:de:75:5b:5b:b5:f6:ee:12:b9:03:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:00 2025 GMT
            Not After : Feb  3 18:05:00 2026 GMT
        Subject: CN=A438B077066B5BCD04C51A6C406CEAEE4364A25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:07:d1:90:ab:af:b8:4c:8b:da:af:3d:e1:
                    a4:02:c7:80:a2:3b:20:be:21:1f:db:d8:19:80:08:
                    12:8f:f4:f4:f5:4c:8f:cb:4c:82:26:84:59:be:6a:
                    47:94:78:82:3e:2b:45:08:27:dd:7f:91:61:fd:4c:
                    c9:f0:77:31:a6:f2:6b:5e:3f:78:e8:99:34:77:a5:
                    19:87:6a:5a:cb:29:53:65:32:70:be:c7:d0:09:67:
                    98:04:f3:4d:80:f1:4d:88:77:ff:f3:ec:e5:09:f9:
                    c8:71:2f:7e:ba:1a:2a:9a:1d:4a:93:38:ea:67:86:
                    82:db:3a:12:22:81:2c:d8:60:ff:40:aa:7d:68:4f:
                    33:f7:f3:2e:90:81:f0:3e:e3:b6:f7:1f:bd:26:52:
                    17:60:a0:af:c2:9e:02:3b:b0:4a:cc:8a:b9:4b:14:
                    05:c3:f7:9c:29:74:4f:c7:63:46:f8:97:7e:b1:89:
                    1d:f8:8a:cf:d6:0f:ff:1f:68:3a:81:5d:1f:d3:cc:
                    77:d0:b2:b0:38:c7:34:56:c8:78:76:af:04:fb:26:
                    7f:07:a0:5a:24:8c:58:1e:05:10:64:17:70:1a:60:
                    29:79:78:60:6b:a2:35:7d:8f:4d:d4:d1:a3:dc:f3:
                    18:6b:b5:79:36:c4:aa:b3:ba:98:7c:5f:3d:85:eb:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:B0:77:06:6B:5B:CD:04:C5:1A:6C:40:6C:EA:EE:43:64:A2:5F
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8d:a9:e7:09:a8:b7:c2:eb:94:71:4f:f5:66:de:03:78:e9:da:
         50:2d:65:a4:fb:b5:4b:90:8d:fa:02:bf:e3:24:ea:52:27:b8:
         91:01:d2:02:99:e3:6e:62:9b:6d:7c:61:3e:18:e7:a2:32:bb:
         73:ed:81:d1:76:b9:a3:ab:03:b5:7f:b5:ef:ad:75:28:73:87:
         e4:d1:86:70:9d:c9:73:37:5f:11:57:d0:e9:a3:b8:5c:23:c6:
         e6:bd:3e:ee:22:03:cf:f2:00:a4:c8:22:e4:d9:2d:0b:f3:76:
         44:81:03:74:31:e9:58:c7:02:2e:37:52:a1:3e:8a:8f:eb:8a:
         97:25:61:fe:88:d2:d8:6d:6c:23:32:6b:f5:fc:38:69:f6:f7:
         79:9b:57:60:37:31:1d:37:21:a5:b1:4d:63:e6:ce:1a:fb:18:
         00:3a:9a:be:30:95:38:3f:32:19:72:e3:a9:a1:10:cf:5b:09:
         05:27:cc:f5:24:18:04:22:9c:be:b4:f0:46:bc:20:c2:45:22:
         22:61:6a:e7:09:37:fa:83:fd:12:0d:17:e4:da:53:6d:12:34:
         0e:ba:6b:d3:b8:b1:32:05:b2:5f:80:22:1c:d4:ff:a3:30:64:
         e3:52:6b:e6:9a:b7:aa:75:d9:39:ea:29:78:c9:ab:6b:7d:2f:
         98:f1:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:53 2025 by rpki-client