Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131362e302f32322d3234203d3e203236363131.roa
File:                     3139302e3133302e3131362e302f32322d3234203d3e203236363131.roa (raw, json)
Hash identifier:          XjuwDbt1eOpGhFcTFOUKWHlpmC4vJ8KnCyrWdmvd1X4=
Subject key identifier:   DD:95:D7:02:83:7E:C9:FF:4C:AC:A3:BB:6B:9D:01:B0:18:D8:95:F5
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       35F2AD5F3069766B802E88FB8A606D2CC1744C12
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131362e302f32322d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:13 +0000
ROA not before:           Tue 05 Mar 2024 17:56:13 +0000
ROA not after:            Tue 04 Mar 2025 18:01:13 +0000
asID:                     26611
IP address blocks:        190.130.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f2:ad:5f:30:69:76:6b:80:2e:88:fb:8a:60:6d:2c:c1:74:4c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:13 2024 GMT
            Not After : Mar  4 18:01:13 2025 GMT
        Subject: CN=DD95D702837EC9FF4CACA3BB6B9D01B018D895F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:0c:26:9d:db:d2:28:67:c6:78:33:4f:53:
                    f3:91:34:10:a3:ce:9a:85:df:76:7e:23:ee:47:d0:
                    71:d1:ed:67:e8:66:5a:e2:e8:a5:a8:4e:53:d0:b2:
                    44:63:12:17:f3:8a:f8:99:81:e0:5e:1e:2c:04:cf:
                    16:52:41:8a:1a:d0:98:0f:59:08:ee:fa:23:02:19:
                    8d:bd:62:86:be:1e:89:f5:b1:64:60:1e:9a:f0:f6:
                    7e:b1:4a:3a:02:8c:c1:87:0b:74:52:1f:1c:c6:a3:
                    5f:6e:b0:ae:35:76:5a:37:4e:54:fe:46:ea:5d:62:
                    82:e9:34:b9:d6:86:b4:e7:57:7d:92:1c:d1:07:7c:
                    42:85:97:a3:84:55:d9:38:ca:f7:b5:b1:2e:22:a5:
                    4d:e0:60:e0:18:96:5c:48:aa:dd:92:ce:de:83:a4:
                    d8:c5:74:3e:74:ba:25:fe:fc:61:d1:5e:dc:37:91:
                    21:f8:d9:47:68:aa:44:d8:73:e1:6e:9f:6d:c3:d0:
                    b6:da:98:fb:68:c1:06:2c:cc:f6:51:6b:c6:8b:9d:
                    e1:9b:14:42:c3:04:b4:84:a6:28:4d:5b:be:26:de:
                    c7:e4:47:1a:0c:06:19:06:c0:dc:2d:20:02:ad:37:
                    c8:5f:26:da:17:41:b7:ae:47:e4:ff:0b:2e:76:99:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:95:D7:02:83:7E:C9:FF:4C:AC:A3:BB:6B:9D:01:B0:18:D8:95:F5
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131362e302f32322d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:fd:e3:03:20:25:a3:73:c3:ff:79:07:5c:5c:60:f4:7f:
         1c:68:fa:e6:5e:a6:4f:72:d1:56:08:91:45:96:51:37:f7:25:
         9c:bc:81:cc:96:74:18:bd:18:d9:33:33:13:e4:ff:b4:75:9c:
         ac:41:8c:8b:41:83:77:69:05:15:5e:87:da:cf:59:61:29:91:
         c1:f8:29:79:55:d1:5f:1a:8a:41:f2:77:08:24:08:42:cd:60:
         0c:3b:9e:a9:cb:34:ec:15:3b:2d:0a:66:1f:a4:1c:3a:29:aa:
         d7:4c:74:80:92:93:61:76:a4:2c:da:52:cc:17:cc:79:8c:73:
         ea:31:27:92:9a:62:c6:43:65:13:da:8a:8c:46:72:05:4f:5e:
         a6:eb:3d:fb:95:6b:c1:13:c0:4a:ad:30:e7:a5:fb:0a:ca:61:
         56:78:e7:7a:12:13:46:a1:4b:e3:e6:b2:d9:cf:24:a4:00:66:
         88:67:25:1f:43:51:1f:1d:19:77:fb:84:c1:a9:c1:d3:36:f7:
         84:5d:fe:f3:84:8f:e3:94:27:f1:0b:86:3c:cc:35:de:5c:52:
         78:f9:7b:81:92:8f:f6:87:eb:ec:25:32:b5:a2:e5:0e:6e:f8:
         ea:6b:08:c9:1e:ad:11:a3:49:04:ea:8f:e7:06:8f:83:ba:98:
         23:56:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org