Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa
File:                     3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          afzBiWYo0VYVGOMm8zVg9E7+++Tn9rDeITRLJGcfSds=
Subject key identifier:   BB:A4:76:27:13:D9:7B:14:DF:CA:81:FF:BF:30:CE:68:C9:10:C4:6B
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       FE9E87977326BDC392DEF942045B1D43F6953C
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:06 +0000
ROA not before:           Tue 04 Feb 2025 18:00:06 +0000
ROA not after:            Tue 03 Feb 2026 18:05:06 +0000
asID:                     26611
IP address blocks:        190.130.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fe:9e:87:97:73:26:bd:c3:92:de:f9:42:04:5b:1d:43:f6:95:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:06 2025 GMT
            Not After : Feb  3 18:05:06 2026 GMT
        Subject: CN=BBA4762713D97B14DFCA81FFBF30CE68C910C46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:af:8f:60:bc:3d:34:d3:b7:00:ce:17:f8:
                    f8:b8:37:64:90:ca:44:68:e0:19:41:5a:9a:bb:37:
                    aa:6d:55:c1:42:38:4d:4f:3f:60:46:8c:51:b1:32:
                    6d:6d:ed:a8:76:fa:7d:42:99:aa:84:1e:1c:f5:79:
                    b4:68:50:8b:2e:6f:e4:f2:bb:32:a6:48:10:88:c4:
                    32:05:4d:71:24:59:47:1b:4a:db:00:18:39:c7:d3:
                    e3:31:62:5b:83:1e:ba:bc:4f:94:1e:34:8c:8d:d5:
                    b0:46:41:25:e5:22:ff:38:a7:ee:91:95:72:2b:ac:
                    55:b6:ec:67:cd:da:b3:35:5a:0c:e3:25:03:5d:52:
                    70:93:e9:23:f6:03:74:22:0d:15:24:21:b0:54:6c:
                    32:67:d0:b3:d1:51:ee:9c:50:f1:00:c6:97:10:19:
                    56:91:08:3c:aa:5e:c7:50:05:4e:46:a6:e0:30:cf:
                    88:56:2e:09:ae:fe:be:5c:8a:23:7e:10:35:f9:c4:
                    cc:ba:80:63:95:4c:aa:3e:df:fb:fa:3a:95:24:15:
                    6c:53:3c:ef:df:b9:39:de:d9:d8:d2:f7:cd:67:85:
                    1c:08:66:74:a0:cd:7f:e5:b7:1e:95:08:b6:dd:12:
                    e4:7f:93:af:c8:9d:0f:a8:24:e3:23:33:ec:5d:2a:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A4:76:27:13:D9:7B:14:DF:CA:81:FF:BF:30:CE:68:C9:10:C4:6B
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131322e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:90:03:df:74:14:fa:49:e4:57:da:26:54:b9:b0:ce:0b:1a:
         02:24:2f:4a:4c:0a:56:e1:cd:26:14:28:7d:8a:1d:22:88:a1:
         31:d4:4e:40:e4:0e:5f:89:f6:bb:ac:a1:14:97:42:9d:1e:d8:
         6d:42:dc:66:ed:84:7d:5f:ad:ca:dd:61:23:b3:14:2d:a5:94:
         f2:f2:e9:88:09:ed:d2:11:8b:d1:60:a1:58:a6:26:d4:f0:38:
         b4:d2:c0:b7:f4:da:3f:bb:76:85:13:f8:f4:5a:9a:e2:00:05:
         61:f9:f3:9b:d7:25:88:71:7d:0c:e8:5a:54:f7:82:9a:9b:a9:
         08:5b:9a:6b:c1:f6:75:c7:a7:4e:c9:38:29:9b:a6:11:f9:6e:
         64:ec:8c:6e:c9:7d:ce:c6:3d:07:58:6b:bc:e7:91:c9:02:81:
         80:47:ce:85:05:35:ff:01:de:ce:82:98:83:e3:85:34:b3:61:
         17:2c:54:65:9d:c2:22:8c:18:71:b9:65:49:b7:43:b3:29:d6:
         64:42:dd:c3:ce:ec:66:7d:5e:88:c9:11:89:3e:90:7a:0c:c0:
         ad:d7:eb:18:24:77:bb:14:81:40:2f:76:38:b8:2f:cd:94:c9:
         e1:d6:44:5b:71:b7:a5:06:2f:9f:85:38:de:0e:e8:e2:ad:50:
         22:f8:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:13 2025 by rpki-client