Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa
File:                     3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          PesfLzEGl63fRfBZ37+eufM/uhBXq9AEkjFU91Iw640=
Subject key identifier:   11:E2:E0:4B:FD:FC:B2:75:03:A6:02:7B:4E:A0:56:03:4C:85:54:1F
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       162E88B5445505CBAF6D97CC4533E4D2BA5E06ED
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:00 +0000
ROA not before:           Tue 04 Feb 2025 18:00:00 +0000
ROA not after:            Tue 03 Feb 2026 18:05:00 +0000
asID:                     26611
IP address blocks:        190.127.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:88:b5:44:55:05:cb:af:6d:97:cc:45:33:e4:d2:ba:5e:06:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:00 2025 GMT
            Not After : Feb  3 18:05:00 2026 GMT
        Subject: CN=11E2E04BFDFCB27503A6027B4EA056034C85541F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:f1:0d:c8:6f:b6:67:21:8f:bb:19:7b:db:
                    db:d1:14:fd:3a:2d:64:80:fb:3b:8b:09:e7:0c:f1:
                    4f:84:58:6e:3f:ff:c6:92:58:e1:ec:a2:e5:15:3f:
                    ec:4f:b2:41:51:b6:6f:d3:f9:60:6e:dd:9b:0e:ce:
                    47:15:45:22:db:04:9e:f3:59:cb:a5:7b:36:18:ef:
                    73:b0:15:5f:08:f0:b8:e2:04:75:4f:ca:49:28:7b:
                    70:7b:5a:1d:ad:a2:fb:d7:e0:9f:bc:73:ad:3a:41:
                    55:2c:f5:2c:df:7b:27:3b:9f:e0:37:f9:5b:ae:e2:
                    0b:02:8c:83:47:e1:da:ca:ac:1f:9a:bb:31:89:fc:
                    79:02:8b:32:e9:e7:dd:0b:04:44:12:ec:12:6e:19:
                    1e:1e:47:99:8b:a3:67:00:ce:bc:0c:ec:2e:36:ee:
                    8b:09:76:62:93:64:76:e5:63:e4:e0:e1:3d:6f:e7:
                    d2:00:5f:14:88:1c:68:b1:57:28:dd:44:33:ee:c0:
                    13:66:18:7c:3d:cf:f3:99:af:dd:8d:61:c2:ad:fb:
                    4c:69:cb:a4:95:f4:14:e2:6b:01:c1:38:7b:a6:88:
                    e4:3c:4e:10:2d:d5:8b:d5:3a:c0:27:4f:18:d5:7f:
                    e6:c5:e2:92:23:fe:a0:51:48:0a:25:21:0a:82:d3:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:E0:4B:FD:FC:B2:75:03:A6:02:7B:4E:A0:56:03:4C:85:54:1F
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:71:b6:0b:3e:7f:54:f3:69:27:7c:cb:1b:d7:52:68:d9:06:
         2f:e8:24:e9:d1:18:f0:aa:90:76:a8:f2:5f:37:07:21:57:b0:
         72:86:38:69:68:7b:e8:58:fa:e7:35:95:01:95:35:7f:9c:ad:
         06:65:09:ae:15:a6:c9:4c:07:66:0d:b1:92:c8:6e:24:6c:c0:
         c2:2f:c6:e6:b4:95:fb:31:c1:f8:51:80:b3:70:57:59:37:10:
         6c:b0:d0:c6:16:6e:66:24:e4:8c:c0:f1:b9:06:e0:ae:7e:fc:
         ae:f8:c0:7e:9c:79:47:ac:9b:92:c6:7b:f2:ea:3b:c8:91:00:
         70:ae:60:1e:4f:fb:f8:ea:43:dc:31:7d:76:82:f3:4e:fd:db:
         ed:94:8e:ca:27:09:53:6b:52:a5:61:da:e7:7e:27:1c:25:64:
         23:cc:27:b6:06:36:51:4d:07:24:da:91:e0:84:d3:dd:58:83:
         09:52:98:be:7e:43:62:71:68:7d:5e:df:80:9f:45:77:84:08:
         5e:24:aa:2b:92:75:9d:46:58:8b:64:d0:65:8a:d6:b6:89:4b:
         1e:08:5f:97:ad:8b:dd:8e:96:91:90:4e:b9:ac:e1:5c:31:0e:
         2b:22:0d:f5:ea:41:72:da:6a:22:07:3f:b0:89:8a:d5:7d:d4:
         70:a1:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:00 2025 by rpki-client