Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa
File:                     3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa (raw, json)
Hash identifier:          5vB/P+HsWEs+P9z50wKSSo3p81Cor3iMDk0zEfBdWGM=
Subject key identifier:   C9:AD:9A:51:64:4F:01:18:22:4D:2A:8B:BF:AC:E7:AB:2D:7C:E4:00
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       18BE3012C0DA0354611E70DCC1A1F73CD206CCEB
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:13 +0000
ROA not before:           Tue 05 Mar 2024 17:56:13 +0000
ROA not after:            Tue 04 Mar 2025 18:01:13 +0000
asID:                     26611
IP address blocks:        190.127.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:be:30:12:c0:da:03:54:61:1e:70:dc:c1:a1:f7:3c:d2:06:cc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:13 2024 GMT
            Not After : Mar  4 18:01:13 2025 GMT
        Subject: CN=C9AD9A51644F0118224D2A8BBFACE7AB2D7CE400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:2c:de:19:2e:cf:fa:b7:45:2f:f5:dd:4c:
                    11:f8:2b:6b:c1:b7:09:eb:77:77:03:be:e3:ce:63:
                    e6:dc:d8:bd:98:e5:88:f5:af:37:22:7d:b8:b7:67:
                    42:b1:db:c5:23:13:60:40:c6:82:b9:95:16:fa:ae:
                    b3:cc:3e:6e:89:84:e3:65:15:55:64:56:76:ec:2a:
                    4b:4a:38:1c:4b:81:29:f6:64:ae:52:98:73:0b:64:
                    51:74:c1:47:e6:60:73:99:57:f9:89:8d:87:6e:88:
                    03:ab:5e:71:09:68:38:16:aa:fe:e1:3d:40:f3:69:
                    ba:bd:c0:e7:a0:75:c9:a9:69:bf:9d:53:91:86:25:
                    40:b1:1a:63:c6:84:b9:e7:d1:f3:51:29:6f:18:ae:
                    4a:d3:d4:22:ea:33:1e:9b:0e:fa:6b:b0:d2:a0:8f:
                    6f:cd:4f:86:f9:20:2c:5b:a0:60:8c:a0:37:93:38:
                    a6:79:f9:46:43:65:fb:6e:60:00:9d:3e:61:c4:e6:
                    ea:39:e0:a3:06:22:ba:87:b0:ad:96:e6:c6:4f:02:
                    2d:a4:3d:8b:1e:99:96:17:c5:4b:d4:fd:a0:17:cd:
                    8f:c1:0f:56:c7:9d:52:23:ae:89:c8:3d:68:97:e3:
                    64:6b:9d:e3:fa:92:5c:b5:b1:4a:a6:90:b3:58:73:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AD:9A:51:64:4F:01:18:22:4D:2A:8B:BF:AC:E7:AB:2D:7C:E4:00
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:97:e3:2a:b5:d1:c6:0a:d5:29:ef:2d:fb:2f:47:8d:9d:da:
         c6:3d:a1:81:e5:b5:45:ad:81:44:cb:17:6f:65:b8:fc:15:a2:
         67:be:37:d6:41:a1:c1:ed:e1:49:41:20:f7:36:cf:d2:52:79:
         f0:7d:e6:cb:10:fb:48:75:c3:5c:7e:5e:e8:77:a5:18:e9:ad:
         c4:10:74:8b:90:7a:ca:7a:d3:5b:6d:00:b6:a7:80:e6:40:bf:
         2a:5a:bd:01:cd:d8:97:9a:7e:d9:81:55:3a:10:07:84:ea:55:
         c2:39:e7:93:cc:a6:c5:f6:24:fe:7e:85:c5:2f:7c:88:f1:fb:
         8b:2a:76:a0:e4:86:68:73:e3:1c:61:20:70:f1:83:40:9b:0b:
         2c:33:7d:3e:3e:a1:47:9c:e1:24:35:aa:52:a2:1d:16:8d:36:
         c8:0d:99:03:91:64:e4:fd:8e:54:e2:b6:c2:e3:ab:3b:a5:de:
         a1:c4:8b:f4:de:6f:89:b0:ad:08:b4:d5:04:76:a0:01:5c:e1:
         83:6a:34:a7:a9:bb:b1:1a:c5:f7:16:a9:bc:7c:ee:b7:74:37:
         7d:30:16:eb:77:37:d6:5c:52:09:e0:d4:cd:06:2a:2c:df:e2:
         f4:45:35:2a:b1:fa:da:50:ef:1a:7c:80:eb:db:7f:f1:19:36:
         e0:40:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org