Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3233342e302f32342d3234203d3e203236363131.roa
File:                     3139302e3132372e3233342e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          DnBRSdKERz/iOW8Q+Lf0OUd2K/RyoW6UvgXuZvtC5DM=
Subject key identifier:   5D:2D:21:8F:01:27:C4:C8:83:A0:FB:B4:AD:93:10:3B:5D:3E:BF:09
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       147FBD9F06E843224F020C697645268908D5766A
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3233342e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:11 +0000
ROA not before:           Tue 05 Mar 2024 17:56:11 +0000
ROA not after:            Tue 04 Mar 2025 18:01:11 +0000
asID:                     26611
IP address blocks:        190.127.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7f:bd:9f:06:e8:43:22:4f:02:0c:69:76:45:26:89:08:d5:76:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:11 2024 GMT
            Not After : Mar  4 18:01:11 2025 GMT
        Subject: CN=5D2D218F0127C4C883A0FBB4AD93103B5D3EBF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:b3:74:24:30:20:4a:0d:35:0e:5d:b7:b7:
                    ef:b1:64:c5:4c:72:bd:46:bf:15:ef:b0:82:e8:c1:
                    22:a7:e9:20:35:95:a6:19:a9:f3:63:ed:3e:df:b1:
                    43:b6:7a:b7:a3:85:c1:87:dd:0a:ac:31:1d:78:84:
                    3a:e7:b7:02:89:52:5d:f8:e1:92:f8:85:6b:f6:a7:
                    4d:34:49:2c:e6:8b:c4:06:d3:da:27:a5:7f:2b:88:
                    38:c9:39:ba:08:7e:10:1b:b7:38:a4:01:45:ad:3b:
                    51:1d:c3:80:03:80:6e:38:ba:d5:67:c3:bb:58:0d:
                    60:2d:7b:da:fa:c1:41:6e:bc:93:2f:5c:3c:46:5a:
                    47:b5:a8:3a:bc:35:98:8d:0c:13:30:70:c1:b9:5f:
                    78:6d:63:10:62:ab:f4:6a:36:f0:ba:2a:83:83:1b:
                    ec:0c:42:e7:43:46:77:33:f9:89:9c:b2:79:71:06:
                    f4:c2:8c:01:08:b3:fc:b6:c6:bb:f9:ea:1c:6b:4c:
                    99:0a:7d:ab:e5:fc:03:83:25:72:06:10:27:c9:6e:
                    4b:71:c5:40:e1:a7:c9:7d:a4:c8:2e:56:13:ac:64:
                    03:b0:60:9e:13:4b:17:a2:e6:34:a7:cd:fb:8b:b8:
                    fc:ee:2a:5f:10:23:6c:3b:da:90:be:c2:ef:b0:45:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2D:21:8F:01:27:C4:C8:83:A0:FB:B4:AD:93:10:3B:5D:3E:BF:09
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3233342e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:1b:2b:0a:7d:a3:27:22:46:32:74:f7:bf:c8:04:10:5a:
         0c:44:f7:15:51:f0:8b:80:2e:f5:a6:51:38:fd:d8:ae:06:3e:
         2a:fe:c9:42:91:53:93:18:1a:8f:1a:f7:cc:b3:0e:fc:99:4d:
         7e:53:a9:78:71:0e:44:4b:39:fb:22:9e:73:33:40:30:79:dc:
         f8:ed:33:e0:a5:ed:c3:97:8d:2d:90:ea:50:aa:ef:52:b5:e3:
         6b:14:14:e9:00:64:0e:a0:42:29:48:43:f2:99:d7:f8:64:92:
         77:8f:fe:8f:1e:67:3c:4b:4e:12:cd:e1:20:32:8b:27:b3:f5:
         ef:5a:6d:46:8f:55:74:64:e3:37:8f:af:e9:57:c4:47:28:24:
         46:20:34:e9:b1:f2:58:95:88:dd:0e:8d:31:c4:d1:12:3c:25:
         c2:ab:fc:5e:af:ca:7b:0c:c1:78:07:48:62:7c:d3:cd:4b:fb:
         de:b1:47:33:53:a5:40:a7:ce:c5:82:29:7d:47:61:d5:28:56:
         1a:22:49:b0:eb:ad:2d:ce:eb:ad:2b:21:45:ea:7d:ce:97:dd:
         7e:94:57:8e:a5:7d:f8:1b:66:84:55:67:72:37:a1:87:aa:d8:
         2d:de:2b:11:a5:90:4e:ba:1f:23:e9:02:3a:b3:76:d9:d5:02:
         47:04:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org