Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3139322e302f32342d3234203d3e203236363131.roa
File:                     3139302e3132372e3139322e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          tjqXykmC8UqqnM6f7URAGhXFpA2oOO6LXtf3lwtKcxE=
Subject key identifier:   1D:DE:5B:1F:5E:38:74:F9:35:FA:E4:F6:C8:FF:AD:44:5B:7D:02:2B
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       10DF691BDF3561BEBA46ED16A0ED2EBC88198672
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3139322e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:09 +0000
ROA not before:           Tue 05 Mar 2024 17:56:09 +0000
ROA not after:            Tue 04 Mar 2025 18:01:09 +0000
asID:                     26611
IP address blocks:        190.127.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:df:69:1b:df:35:61:be:ba:46:ed:16:a0:ed:2e:bc:88:19:86:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:09 2024 GMT
            Not After : Mar  4 18:01:09 2025 GMT
        Subject: CN=1DDE5B1F5E3874F935FAE4F6C8FFAD445B7D022B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2c:21:72:7a:94:4e:4d:c4:66:2a:32:8e:b7:
                    68:6b:68:98:a2:16:5c:61:52:e0:a9:3a:0a:78:8b:
                    5d:ec:ac:6a:f3:00:42:f1:ea:ec:f5:95:75:9a:e5:
                    69:35:76:b3:c7:e3:cd:33:b3:14:29:d8:00:be:ae:
                    30:18:24:06:87:6a:b3:89:c2:d2:f4:0c:95:1e:1d:
                    fd:f7:8f:e1:c6:4a:73:17:98:72:7e:0e:1a:49:26:
                    d8:b2:e2:1a:f3:14:bf:43:d9:c9:88:80:8c:b4:0f:
                    6d:bd:52:87:ca:22:5c:fc:21:66:a4:57:43:6f:19:
                    18:78:ef:a5:51:4c:6f:69:70:e1:a5:76:40:15:ba:
                    3c:c5:f2:72:5d:86:08:c2:a5:af:47:27:7c:44:54:
                    6d:73:19:7a:5d:24:a9:f3:4e:cb:fa:88:22:b1:b6:
                    e5:73:3a:13:e6:9e:f5:af:d1:60:3b:fe:a9:3c:d4:
                    2b:ea:a9:5f:1e:5f:9b:fb:fb:87:ad:48:55:60:3b:
                    71:ab:1d:a4:51:84:06:0d:6a:74:44:ff:6d:09:44:
                    78:a1:d7:58:b5:ee:cc:80:05:14:90:4c:4d:a4:51:
                    0d:3b:cb:8e:62:61:26:dd:3f:67:7e:67:2a:7a:ec:
                    51:a9:54:48:c4:79:d5:cc:fd:46:c4:6a:32:b7:02:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:5B:1F:5E:38:74:F9:35:FA:E4:F6:C8:FF:AD:44:5B:7D:02:2B
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3139322e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:79:a7:96:57:4b:d1:3f:a7:cb:94:11:38:2a:7b:c7:bb:e5:
         78:6c:0a:13:08:14:e4:cf:ae:df:4c:b0:aa:33:fc:f1:29:a7:
         35:88:1f:72:20:8d:17:65:62:ca:c8:10:9e:90:e0:90:31:a1:
         ed:26:15:62:c8:79:92:d5:a3:87:9d:ba:67:60:27:42:b6:c8:
         fa:9a:d9:39:aa:a9:22:76:2d:73:83:18:70:57:0d:8a:65:83:
         ec:96:f0:48:1e:61:92:97:02:90:ed:fd:27:9c:b0:69:c4:67:
         ee:f2:5a:2f:ee:fa:2d:36:1c:35:d3:19:d9:50:93:27:80:ff:
         c0:18:4b:05:0c:3e:61:f9:e8:b2:66:e2:c8:50:e0:13:7c:bf:
         be:87:95:15:a3:6c:98:7f:ff:f9:7e:34:ee:db:b5:87:6e:53:
         74:82:9e:cf:bc:1f:e2:f0:fe:1c:7e:b6:72:7b:85:b9:21:9e:
         f9:e2:d7:10:0f:49:15:2a:fd:52:2c:e8:36:0c:95:e3:10:44:
         a1:e7:36:79:ba:34:48:69:1e:28:13:48:3f:e2:e0:fb:6b:18:
         01:b9:6e:73:2e:25:cc:c3:89:be:06:ac:7a:a3:f8:1c:90:28:
         95:e9:30:c5:98:b2:e4:a3:2b:05:1c:fb:08:bc:8b:b2:1c:53:
         06:c2:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:54:25 2024 by rpki-client on console-ams.rpki-client.org