Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3233372e302f32342d3234203d3e203236363131.roa
File:                     3139302e3132372e3233372e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          KogxwAwzgLPmco4uTQmrLw9qQONDLjdRMRZZbtDVAyA=
Subject key identifier:   65:4F:1F:38:18:85:CB:DD:AB:45:82:26:2F:E0:CC:99:9B:CC:24:F9
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       4AFC9638EB2CF4297FA0F409ED8A50523AA8E592
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3233372e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:15 +0000
ROA not before:           Tue 05 Mar 2024 17:56:15 +0000
ROA not after:            Tue 04 Mar 2025 18:01:15 +0000
asID:                     26611
IP address blocks:        190.127.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:96:38:eb:2c:f4:29:7f:a0:f4:09:ed:8a:50:52:3a:a8:e5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:15 2024 GMT
            Not After : Mar  4 18:01:15 2025 GMT
        Subject: CN=654F1F381885CBDDAB4582262FE0CC999BCC24F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:0b:1c:c8:40:7b:11:00:51:5b:dc:cc:11:
                    c7:e5:b0:6f:3e:59:38:cc:fa:dd:9d:8f:b8:0c:99:
                    86:72:4e:ed:ed:f4:6d:a0:dc:52:69:06:27:b6:5f:
                    b8:b2:03:b1:5a:68:cc:0d:0e:ac:30:a0:51:7b:50:
                    66:e8:96:47:73:ae:39:5c:a9:a0:9e:db:7a:14:92:
                    6e:e2:59:9f:cd:31:53:69:40:06:0a:00:3a:6b:d7:
                    7b:af:7a:1b:03:64:5a:ab:8e:d9:5b:fd:7b:19:11:
                    ef:c6:50:09:60:8d:88:6f:e3:9b:f9:26:96:e0:81:
                    0e:d2:32:6f:e9:74:4e:ea:fe:c2:05:cb:f9:0c:4f:
                    c2:71:8f:95:6f:64:be:b8:15:cb:8d:a9:0a:33:d9:
                    0d:d9:cf:1e:b1:a1:c0:1d:b1:dd:c0:09:d8:24:8d:
                    b9:34:22:72:95:c5:43:3a:15:0c:99:02:c8:61:86:
                    91:07:51:f1:6b:73:10:23:d0:be:b5:68:dc:c1:4d:
                    2c:49:54:1f:52:3c:15:5b:40:de:b5:29:09:c4:08:
                    22:01:4e:a1:7d:3f:1d:5e:67:43:d6:c3:53:fa:a1:
                    5a:f3:37:69:76:a2:7a:5f:af:59:53:b3:38:2b:a3:
                    7d:cb:8a:58:b5:ca:40:00:cf:9c:b3:a1:53:8c:f5:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4F:1F:38:18:85:CB:DD:AB:45:82:26:2F:E0:CC:99:9B:CC:24:F9
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3233372e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:92:2a:0a:1c:4f:63:f4:c0:f6:31:80:fd:34:b7:df:13:
         b3:61:ae:b4:b6:91:ff:81:33:23:8a:c4:76:b0:42:fa:c5:93:
         6f:f2:7c:48:e1:94:c3:f5:51:6e:a9:6b:c1:c2:60:43:21:c3:
         ce:6a:c3:30:bb:08:93:e4:96:d7:ca:d9:ac:d1:97:b6:6b:33:
         0f:d6:89:64:96:87:f6:21:55:fb:a0:97:51:98:d6:b5:07:a4:
         02:0a:26:1c:b0:0d:2f:ac:15:df:78:10:08:10:9e:62:dd:e2:
         fc:b4:96:41:d3:d3:a8:9c:c8:a3:c4:e3:de:6c:14:69:c5:16:
         3d:c7:4f:2c:09:6d:70:dc:1c:63:ec:fe:91:57:5b:c5:88:27:
         f0:23:26:ee:57:11:c6:f6:e1:9f:b5:6d:7b:b0:59:6e:d0:3e:
         82:f2:54:bc:b2:7d:75:02:af:1e:c9:88:0e:de:f9:de:91:e3:
         9a:03:49:48:63:f1:05:f0:21:8c:07:14:d1:f2:cb:12:ca:25:
         c8:c6:be:0a:b3:d8:ce:77:1c:ff:0b:3b:3e:ab:7a:26:6e:93:
         f0:3d:90:b9:0e:87:25:41:09:4d:52:da:da:49:68:ea:3e:fd:
         73:b2:5a:1e:55:c1:84:72:f2:46:3d:31:9d:9f:8c:2c:0b:56:
         19:b2:39:9a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSvyWOOss9Cl/oPQJ7YpQUjqo5ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MTVaFw0yNTAzMDQxODAxMTVaMDMxMTAvBgNV
BAMTKDY1NEYxRjM4MTg4NUNCRERBQjQ1ODIyNjJGRTBDQzk5OUJDQzI0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLQscyEB7EQBRW9zMEcflsG8+
WTjM+t2dj7gMmYZyTu3t9G2g3FJpBie2X7iyA7FaaMwNDqwwoFF7UGbolkdzrjlc
qaCe23oUkm7iWZ/NMVNpQAYKADpr13uvehsDZFqrjtlb/XsZEe/GUAlgjYhv45v5
JpbggQ7SMm/pdE7q/sIFy/kMT8Jxj5VvZL64FcuNqQoz2Q3Zzx6xocAdsd3ACdgk
jbk0InKVxUM6FQyZAshhhpEHUfFrcxAj0L61aNzBTSxJVB9SPBVbQN61KQnECCIB
TqF9Px1eZ0PWw1P6oVrzN2l2onpfr1lTszgro33Lili1ykAAz5yzoVOM9TvTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZU8fOBiFy92rRYImL+DMmZvMJPkwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMjM3MmUzMjMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvn/t
MA0GCSqGSIb3DQEBCwUAA4IBAQBt+ZIqChxPY/TA9jGA/TS33xOzYa60tpH/gTMj
isR2sEL6xZNv8nxI4ZTD9VFuqWvBwmBDIcPOasMwuwiT5JbXytms0Ze2azMP1olk
lof2IVX7oJdRmNa1B6QCCiYcsA0vrBXfeBAIEJ5i3eL8tJZB09OonMijxOPebBRp
xRY9x08sCW1w3Bxj7P6RV1vFiCfwIybuVxHG9uGftW17sFlu0D6C8lS8sn11Aq8e
yYgO3vnekeOaA0lIY/EF8CGMBxTR8ssSyiXIxr4Ks9jOdxz/Czs+q3ombpPwPZC5
DoclQQlNUtraSWjqPv1zsloeVcGEcvJGPTGdn4wsC1YZsjma
-----END CERTIFICATE-----
Generated at Sat May 4 15:54:25 2024 by rpki-client on console-ams.rpki-client.org