Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa
File:                     3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa (raw, json)
Hash identifier:          8kSzcsfENB2Nt7xiyzW8lVWTQTUNSIcYoZAzmTnWfws=
Subject key identifier:   8C:C8:86:AD:50:13:01:B7:30:8D:C5:46:81:F4:91:8C:90:F0:DF:E9
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       2A98463CDBA57F4C84797CC2CABB276A2D5B9F36
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:09 +0000
ROA not before:           Tue 05 Mar 2024 17:56:09 +0000
ROA not after:            Tue 04 Mar 2025 18:01:09 +0000
asID:                     26611
IP address blocks:        190.127.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:46:3c:db:a5:7f:4c:84:79:7c:c2:ca:bb:27:6a:2d:5b:9f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:09 2024 GMT
            Not After : Mar  4 18:01:09 2025 GMT
        Subject: CN=8CC886AD501301B7308DC54681F4918C90F0DFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:67:3f:48:d6:ec:c2:6c:4a:b0:3e:da:f2:aa:
                    cd:a4:71:0f:5f:00:b6:09:85:c4:96:71:ea:ac:24:
                    73:71:ec:84:01:cd:4b:4a:d6:fb:2f:aa:7d:18:b5:
                    3a:75:11:42:7e:58:ea:6d:dd:e8:e9:ad:ce:e2:59:
                    45:7a:cb:2c:f7:d0:9f:24:c5:f0:80:ac:b0:6f:8b:
                    06:ed:3e:3f:e7:42:28:8e:dc:df:a3:df:d3:70:84:
                    d1:60:3b:5d:08:2a:d7:80:2d:9d:fc:4a:b5:9f:9d:
                    71:d2:9c:25:0b:e8:36:cc:84:e6:1c:c1:31:19:cf:
                    41:f3:df:cf:41:aa:2b:75:3b:d6:b7:85:e6:93:86:
                    8a:a8:b5:42:a6:0e:c7:e7:a8:94:85:21:3e:20:51:
                    2b:09:0a:43:f7:13:f5:27:0b:39:8d:8f:1d:83:76:
                    e8:76:a9:38:49:50:43:c4:6f:49:ee:14:30:43:c7:
                    de:f9:c8:48:62:8d:8e:a2:17:bf:91:99:4c:f5:0a:
                    b4:86:bd:75:fb:cd:97:a9:5f:f5:e9:be:e9:7d:45:
                    bd:b8:56:67:62:6f:ff:d0:48:3c:a3:89:ce:db:0f:
                    ba:d7:97:41:f5:46:b4:2f:9a:25:23:2f:52:48:01:
                    7f:86:65:a8:1a:21:86:5b:9d:26:ae:39:f5:5e:2e:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C8:86:AD:50:13:01:B7:30:8D:C5:46:81:F4:91:8C:90:F0:DF:E9
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:a0:f8:0d:26:b2:61:89:45:d1:40:a8:e4:ae:c1:eb:a1:
         85:5a:4e:ca:c4:f1:c2:43:d7:3e:25:46:76:42:f5:38:78:bd:
         aa:26:56:69:c7:3d:17:87:85:8c:19:4d:72:ad:22:2d:e5:fc:
         42:52:42:67:87:16:c1:99:3d:26:6d:98:a6:8a:10:b3:88:44:
         9a:f0:fb:03:f2:43:10:b3:aa:13:09:b9:45:09:fd:bf:28:eb:
         cb:4c:dc:ca:c2:0a:ba:ba:a7:ae:43:ff:b3:4d:64:ae:57:c1:
         ae:59:7b:01:cd:22:bf:bb:4b:35:45:c7:c3:38:6c:1b:37:4f:
         8f:d9:0f:ab:0a:bd:9d:a3:68:9b:da:76:e7:7f:e8:9c:06:9b:
         5e:29:18:09:8b:5d:b3:59:a1:5a:0e:71:2b:a9:69:0b:b4:f8:
         40:01:74:12:7f:b8:28:14:52:83:df:b2:01:50:44:88:75:ab:
         ad:b6:ab:6f:e3:f4:2a:e7:fb:1c:b1:3f:e4:8a:bd:90:fb:49:
         4a:a2:03:70:e5:57:f4:8f:46:93:17:82:9b:cc:89:f4:99:a4:
         f4:e9:fb:41:b9:1f:bf:82:a7:59:50:2f:3d:d5:50:0f:26:7f:
         a2:ec:bc:66:54:4b:25:bd:9a:50:92:d6:03:f8:77:9c:df:c3:
         d7:dd:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org