Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3132332e302f32342d3234203d3e203236363131.roa
File:                     3139302e3133302e3132332e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          0ECiswdP49+YmaTmpLEaEiDiwOAX1dzruKi+Saa7GlM=
Subject key identifier:   79:87:0D:77:EC:73:87:51:25:CF:FC:F1:2B:81:53:ED:9F:0E:6F:C4
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       12D61DD08F66F5689C91650BD3FF2640B63463F7
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3132332e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:06 +0000
ROA not before:           Tue 05 Mar 2024 17:56:06 +0000
ROA not after:            Tue 04 Mar 2025 18:01:06 +0000
asID:                     26611
IP address blocks:        190.130.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d6:1d:d0:8f:66:f5:68:9c:91:65:0b:d3:ff:26:40:b6:34:63:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:06 2024 GMT
            Not After : Mar  4 18:01:06 2025 GMT
        Subject: CN=79870D77EC73875125CFFCF12B8153ED9F0E6FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:55:1a:99:5e:74:d4:fd:ce:f0:59:b5:fc:
                    a0:65:60:b8:9b:21:17:de:93:54:94:5f:02:16:52:
                    ac:ee:03:bb:8d:cc:50:8b:12:a2:ba:09:82:62:35:
                    5b:20:c0:51:10:de:2c:40:80:0b:44:44:72:a2:ba:
                    0a:06:fb:53:91:7d:ae:47:1a:15:7e:2c:b9:b1:40:
                    49:69:c4:ba:62:a4:52:60:42:de:73:70:c0:1b:f2:
                    88:78:06:c7:1a:4c:b7:56:c1:fe:6b:b0:13:4e:38:
                    31:f3:cc:f7:0f:15:13:46:ab:e9:11:71:e1:51:9c:
                    1a:01:7b:09:69:31:95:19:45:c4:00:dc:e9:6e:08:
                    89:f2:b2:dd:fc:f2:b8:da:6d:78:ac:35:af:7b:10:
                    4c:5a:40:2a:21:6b:04:23:c9:b2:fa:f9:e7:fe:be:
                    cd:72:66:b3:5f:c2:7e:28:a1:2b:43:3c:4f:5d:ae:
                    32:77:b3:74:90:41:b3:66:ef:24:a1:00:ec:58:4d:
                    18:8f:c7:31:2d:e4:06:7d:ec:77:0a:c8:29:ca:c8:
                    c3:f6:a6:0e:30:22:5b:ed:c6:2d:df:84:7f:91:83:
                    70:bd:07:eb:3c:b2:75:58:25:4c:8c:34:fe:b4:0f:
                    d1:37:b5:5a:7a:e2:70:b8:d3:11:a1:d2:df:69:d1:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:0D:77:EC:73:87:51:25:CF:FC:F1:2B:81:53:ED:9F:0E:6F:C4
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3132332e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:87:87:ec:2c:a5:2b:de:fb:10:29:20:ad:38:66:16:88:
         e2:cf:31:40:77:69:0f:4c:1c:73:52:09:00:be:64:53:70:ab:
         5d:30:f0:79:b2:71:75:12:4c:e8:e5:f2:ca:43:88:2d:37:b6:
         e4:c7:3f:92:05:80:37:a3:c1:39:d6:7c:26:f9:ad:86:48:30:
         16:0c:76:a0:70:20:cc:77:19:3d:7e:d5:e7:f2:a1:d2:9e:08:
         b4:6d:9e:1a:0b:0e:62:52:12:4d:52:d0:cf:35:ec:23:94:06:
         b9:12:3d:83:26:41:c0:3e:9e:3c:a0:6a:dd:96:25:ba:50:dc:
         d1:49:7b:71:8a:91:65:03:7c:0a:63:14:0c:8c:6a:32:1b:50:
         3d:ae:eb:9a:33:05:00:5a:13:fe:76:ca:18:de:25:9b:fd:ed:
         d0:6b:b9:3d:b2:55:51:47:bc:0a:51:3d:23:d4:26:09:df:d5:
         5d:8d:f9:e7:4b:9c:2a:94:95:02:52:93:6f:85:4e:81:ab:57:
         a1:c3:d3:83:74:f9:16:19:0f:f2:a1:1d:87:21:14:eb:09:63:
         80:74:64:e8:9f:29:25:8e:5d:f3:d1:49:14:26:8d:f7:44:af:
         26:e9:1f:b7:97:48:e8:b8:43:59:43:50:97:e4:e7:3a:f2:a0:
         25:47:88:c0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEtYd0I9m9WickWUL0/8mQLY0Y/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MDZaFw0yNTAzMDQxODAxMDZaMDMxMTAvBgNV
BAMTKDc5ODcwRDc3RUM3Mzg3NTEyNUNGRkNGMTJCODE1M0VEOUYwRTZGQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGVUamV501P3O8Fm1/KBlYLib
IRfek1SUXwIWUqzuA7uNzFCLEqK6CYJiNVsgwFEQ3ixAgAtERHKiugoG+1ORfa5H
GhV+LLmxQElpxLpipFJgQt5zcMAb8oh4BscaTLdWwf5rsBNOODHzzPcPFRNGq+kR
ceFRnBoBewlpMZUZRcQA3OluCInyst388rjabXisNa97EExaQCohawQjybL6+ef+
vs1yZrNfwn4ooStDPE9drjJ3s3SQQbNm7yShAOxYTRiPxzEt5AZ97HcKyCnKyMP2
pg4wIlvtxi3fhH+Rg3C9B+s8snVYJUyMNP60D9E3tVp64nC40xGh0t9p0TwXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeYcNd+xzh1Elz/zxK4FT7Z8Ob8QwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMzMwMmUzMTMyMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvoJ7
MA0GCSqGSIb3DQEBCwUAA4IBAQAGG4eH7CylK977ECkgrThmFojizzFAd2kPTBxz
UgkAvmRTcKtdMPB5snF1Ekzo5fLKQ4gtN7bkxz+SBYA3o8E51nwm+a2GSDAWDHag
cCDMdxk9ftXn8qHSngi0bZ4aCw5iUhJNUtDPNewjlAa5Ej2DJkHAPp48oGrdliW6
UNzRSXtxipFlA3wKYxQMjGoyG1A9ruuaMwUAWhP+dsoY3iWb/e3Qa7k9slVRR7wK
UT0j1CYJ39VdjfnnS5wqlJUCUpNvhU6Bq1ehw9ODdPkWGQ/yoR2HIRTrCWOAdGTo
nykljl3z0UkUJo33RK8m6R+3l0jouENZQ1CX5Oc68qAlR4jA
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org