Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa
File:                     3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          Jp83iDtdtrN/Hqpw2o1kGGXq0oXmTXBiRq5L3us+zXs=
Subject key identifier:   D4:D7:32:4A:4C:72:F9:12:DB:D2:29:62:42:9B:57:39:F8:8F:AD:89
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       0719CC2C0CCEA99EE4F3B9711A43358C19820AFA
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:09 +0000
ROA not before:           Tue 05 Mar 2024 17:56:09 +0000
ROA not after:            Tue 04 Mar 2025 18:01:09 +0000
asID:                     26611
IP address blocks:        190.130.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:19:cc:2c:0c:ce:a9:9e:e4:f3:b9:71:1a:43:35:8c:19:82:0a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:09 2024 GMT
            Not After : Mar  4 18:01:09 2025 GMT
        Subject: CN=D4D7324A4C72F912DBD22962429B5739F88FAD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:bf:78:4b:f8:81:33:a9:ce:59:76:d9:87:
                    67:ed:b8:c6:9a:03:d2:6e:75:fa:0c:4d:2b:b6:2d:
                    33:34:74:ca:34:26:25:3b:07:a0:be:cb:7a:4f:48:
                    5e:48:b4:0e:27:56:68:c7:4f:79:67:2a:44:25:43:
                    92:3f:da:f7:c6:d5:0e:0a:b7:0f:d7:b1:3f:3c:78:
                    75:8e:76:87:f8:24:c9:f5:20:0e:e4:0f:f0:be:36:
                    cd:e5:d9:cd:36:80:29:b6:0c:a8:31:cb:c9:30:4b:
                    0a:c3:da:f1:35:e8:09:ca:20:bf:47:ad:86:e3:ec:
                    ba:81:f4:64:8c:03:0d:0c:59:e4:e9:91:cf:33:02:
                    d6:96:e3:d5:89:e6:b7:5e:6d:2c:16:d2:fb:27:bb:
                    76:4e:0f:3f:7a:09:75:a4:ca:ad:5b:27:57:09:12:
                    f2:bc:f9:eb:26:9f:17:ee:61:d0:db:1c:be:2f:3d:
                    a1:d9:f3:02:53:5f:76:d8:34:d2:40:32:67:48:81:
                    1f:75:aa:1e:86:1c:42:9e:53:f5:0a:db:f9:d6:49:
                    dc:f3:fb:fa:60:77:5f:16:3a:04:54:d0:b1:6d:d1:
                    0f:39:67:07:c4:95:a3:d2:e6:b2:56:36:0c:e0:1d:
                    39:74:7a:48:bc:45:0c:4d:9f:77:68:70:ae:f5:20:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D7:32:4A:4C:72:F9:12:DB:D2:29:62:42:9B:57:39:F8:8F:AD:89
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:db:39:81:01:56:58:01:00:87:72:3c:7a:58:c7:24:4a:be:
         6a:de:2f:67:d9:ee:fe:ca:b0:51:b8:0f:98:04:73:f6:c1:a6:
         18:a6:bb:c3:54:8b:8a:31:a8:d5:d0:84:fd:89:35:94:1e:05:
         2a:a4:e2:67:9b:0c:6e:7d:9e:fa:81:07:12:53:cc:2b:c5:8f:
         22:0a:d5:f5:bd:94:df:6d:03:ed:10:86:a5:d9:de:33:52:af:
         e9:c8:35:96:df:0e:96:6d:ad:7d:37:18:6b:3d:8a:11:45:95:
         2d:b6:20:ab:04:5a:c3:b8:bb:ce:da:4b:5f:6e:6f:33:c6:78:
         40:ea:98:a4:e1:4f:b8:23:e6:54:2e:82:45:eb:10:f2:0f:a9:
         67:37:3f:0c:8c:62:c4:c3:74:ad:1d:e6:26:a4:cf:4e:7d:4c:
         46:ad:b4:c5:fd:fb:b4:41:f0:5a:2f:85:7d:ba:d1:c0:84:32:
         df:f9:64:88:80:e7:68:19:a5:18:82:e6:a0:05:91:48:9c:11:
         9b:8a:26:ce:7f:21:6d:41:b2:68:82:c2:c6:2d:76:ee:58:bc:
         1a:d4:40:48:73:96:20:9c:31:7e:62:59:fd:4c:18:db:cf:7c:
         a6:d1:27:d0:85:a8:e0:02:56:53:ff:a4:d9:a7:34:c4:01:f3:
         9a:ee:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:44:54 2024 by rpki-client on console-fra.rpki-client.org