Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235322e302f32342d3234203d3e203236363131.roa
File:                     3139302e3132372e3235322e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          R+R3ynCJMdXgm3XGtMZUh8Wv4Ezf0wmfldmASP0U378=
Subject key identifier:   CA:11:A9:3C:4B:90:C2:9C:A2:61:2A:7E:20:69:E4:74:F9:87:A3:9E
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       6B0A5D18ED2186662331D03B5CC78AD192311580
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235322e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:06 +0000
ROA not before:           Tue 05 Mar 2024 17:56:06 +0000
ROA not after:            Tue 04 Mar 2025 18:01:06 +0000
asID:                     26611
IP address blocks:        190.127.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0a:5d:18:ed:21:86:66:23:31:d0:3b:5c:c7:8a:d1:92:31:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:06 2024 GMT
            Not After : Mar  4 18:01:06 2025 GMT
        Subject: CN=CA11A93C4B90C29CA2612A7E2069E474F987A39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:f9:5f:f2:90:06:4e:63:b4:c0:a4:6e:50:
                    2b:54:31:07:ea:c3:a6:00:e6:5c:86:44:61:ce:9e:
                    fc:bf:3b:7e:98:a2:66:72:3c:11:0b:b9:07:3b:2d:
                    c3:bf:25:d1:1c:44:f9:a7:96:dd:d9:ac:6f:07:72:
                    05:9f:41:a4:fa:fd:e4:29:f6:4d:3f:2b:60:d2:af:
                    29:99:4e:58:72:f7:95:9a:25:a9:be:5f:35:dd:43:
                    ea:39:db:9a:ce:53:c2:01:d2:cf:c7:5c:4d:12:5e:
                    77:14:e9:16:b6:72:6b:26:97:4d:fc:dd:63:b4:fa:
                    15:f9:13:32:4e:12:68:1e:e8:aa:d1:35:38:e8:cc:
                    79:43:41:9f:95:c4:14:89:17:c3:80:58:04:ac:24:
                    c1:8d:64:37:6f:74:a1:52:2f:0c:2d:d4:c4:3f:a8:
                    d7:ac:50:96:02:33:fe:47:66:d0:65:50:1f:b4:b4:
                    3b:70:ea:a6:13:49:20:39:a4:5c:96:59:6e:4a:55:
                    59:a1:55:e5:a0:df:09:48:b6:0f:73:7c:20:15:5e:
                    c5:5e:67:b9:58:e9:53:ce:94:27:55:e8:ed:be:3d:
                    dc:4f:44:b2:f0:5f:2e:79:63:d6:78:33:ae:a8:ef:
                    47:18:9c:cc:c5:a2:53:8e:ad:a6:d1:c8:29:1d:cc:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:11:A9:3C:4B:90:C2:9C:A2:61:2A:7E:20:69:E4:74:F9:87:A3:9E
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235322e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3b:8a:d9:cf:05:31:13:95:ce:c2:12:53:98:c5:83:40:9a:
         20:61:5a:c5:60:50:a4:4d:a9:77:83:b7:d9:e8:42:1e:c4:a7:
         72:77:30:da:f9:2c:a8:00:76:c3:35:22:df:1c:e1:86:a4:bb:
         dd:4e:bd:e9:e7:da:24:fc:23:f7:3a:df:f0:91:3d:40:65:55:
         c7:78:7d:11:40:e9:30:47:19:3e:fd:2a:04:82:95:d6:ed:53:
         7a:e5:0a:db:04:3a:08:d5:65:f0:75:d2:e8:94:49:df:a1:12:
         87:5f:f9:68:ad:8b:9e:90:01:f8:2c:97:9a:00:7e:92:48:eb:
         78:c6:e7:5b:84:6c:67:9b:69:21:7e:f3:40:a5:63:8b:06:aa:
         a7:1f:e7:6b:70:0a:8a:5f:af:ad:31:6a:79:7d:4e:3b:e3:7a:
         0d:54:63:2f:5c:7a:4d:de:f4:47:2c:24:b1:8f:67:bd:09:50:
         01:d1:b4:98:9c:35:34:c1:94:e8:b7:58:3c:14:15:dc:39:43:
         33:9d:04:ec:5a:f4:eb:df:d6:db:19:ee:fd:9b:ee:cc:91:f1:
         a0:8f:68:c1:70:5a:d6:4a:d0:43:59:0c:6f:a5:37:22:67:f2:
         af:81:23:d5:50:69:d2:24:69:10:c3:77:43:96:65:a1:6c:70:
         b0:fc:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:54:25 2024 by rpki-client on console-ams.rpki-client.org