Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa
File:                     3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          P5IxJIVvxTtHClPvwecakZrqt6mXQ0frCpCyRt4aTwY=
Subject key identifier:   CB:00:80:CC:79:83:27:BA:5D:D1:44:8F:FE:FC:77:5F:D1:B6:98:A7
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       51A6D7793F1688B47C6FE2A4D63B930E4B5B0601
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:05 +0000
ROA not before:           Tue 05 Mar 2024 17:56:05 +0000
ROA not after:            Tue 04 Mar 2025 18:01:05 +0000
asID:                     26611
IP address blocks:        190.127.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a6:d7:79:3f:16:88:b4:7c:6f:e2:a4:d6:3b:93:0e:4b:5b:06:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:05 2024 GMT
            Not After : Mar  4 18:01:05 2025 GMT
        Subject: CN=CB0080CC798327BA5DD1448FFEFC775FD1B698A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:bb:51:ce:18:dc:be:6c:cb:cf:b6:87:e0:
                    66:2a:6b:60:10:fd:87:d1:b1:f4:c2:bb:41:6a:5b:
                    c6:46:c6:11:4f:8e:25:8d:42:10:ec:47:b7:7d:63:
                    ab:58:8e:dc:75:1f:81:e2:3e:4f:bb:77:24:6b:a6:
                    4e:ad:4e:d1:fc:db:c2:20:bc:e6:f5:09:b0:19:8f:
                    51:78:cd:6a:63:3c:ab:9e:84:08:c9:22:c8:21:96:
                    bd:e5:ce:f8:7e:29:e0:16:f2:b2:e8:b5:bc:d0:8a:
                    c3:af:55:9a:e0:9b:df:b3:df:c3:50:03:71:98:eb:
                    f5:c3:da:5a:1b:4b:43:93:40:4e:d2:42:b7:ab:11:
                    38:4d:e0:44:85:b9:f2:71:73:63:03:53:df:dd:d3:
                    1d:4f:21:c7:e1:ab:fb:f7:0f:84:32:b7:8b:d2:14:
                    91:14:3f:57:62:76:ae:bc:3a:9e:50:91:2c:f7:42:
                    47:6d:20:79:df:b0:29:aa:eb:e8:8b:5c:af:eb:bd:
                    66:9a:53:cb:f6:7f:de:c2:b3:64:98:1d:e6:ca:e4:
                    81:a0:8b:c9:8d:87:80:08:ea:fe:14:dc:43:57:41:
                    f2:eb:96:e8:7d:8b:f9:b8:54:6d:dd:84:fd:5b:8b:
                    aa:ce:f2:82:a0:3e:50:89:da:35:ac:8b:ca:45:2e:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:80:CC:79:83:27:BA:5D:D1:44:8F:FE:FC:77:5F:D1:B6:98:A7
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:da:a3:42:fb:bc:bd:ca:8a:bc:fa:c6:f5:52:4a:dd:22:
         5a:38:85:69:76:78:77:a9:62:1f:f7:76:58:ff:fc:b1:d6:44:
         0a:4d:9a:c2:19:06:a1:72:0e:1d:56:20:79:b3:5d:e9:54:cd:
         0f:9b:89:e4:d9:e1:b0:43:99:d5:d7:48:12:bf:25:27:43:b7:
         8b:1d:5a:9a:9b:d8:fe:9b:5d:d6:4e:24:bb:e9:ec:0d:38:8c:
         49:25:db:b2:de:4b:cd:16:1c:57:4b:91:86:1e:42:21:8a:b8:
         5b:92:4a:98:1a:00:09:29:17:c5:2a:f5:4e:de:01:59:25:3c:
         91:2d:b7:f3:e1:8d:5d:4c:bf:11:db:ec:4d:0b:bf:ae:03:8b:
         0b:4e:7b:af:2d:1b:95:30:70:d4:7d:87:18:cf:00:c9:ce:8f:
         28:3e:de:c6:8c:8d:b1:6a:38:d1:9e:c0:25:2b:52:fd:52:52:
         b6:79:68:17:f6:43:36:01:27:c7:a2:1e:e9:99:2f:7b:7e:24:
         83:2f:2f:2c:58:8a:12:cd:ec:51:a8:d6:26:ac:7c:f7:6d:da:
         01:76:3e:58:98:bd:0d:18:d2:9d:e8:70:a2:b9:80:ae:f7:22:
         51:db:a9:cf:de:7f:41:88:b2:61:75:32:ce:2f:2a:40:f8:94:
         e9:63:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org