Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203134303830.roa
File:                     3139302e3133302e36342e302f31382d3234203d3e203134303830.roa (raw, json)
Hash identifier:          rjkybWgCea/ZnzfVLS6H/1TItkFlNkPluqjZnLI2OS4=
Subject key identifier:   E7:81:DB:3F:A7:D2:4B:A6:0F:11:3C:83:F2:6A:C1:EC:0E:D6:9E:D6
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       5EF192C39961AE065689782498267425F8898A0A
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:01:01 +0000
ROA not before:           Tue 05 Mar 2024 17:56:01 +0000
ROA not after:            Tue 04 Mar 2025 18:01:01 +0000
asID:                     14080
IP address blocks:        190.130.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f1:92:c3:99:61:ae:06:56:89:78:24:98:26:74:25:f8:89:8a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:01 2024 GMT
            Not After : Mar  4 18:01:01 2025 GMT
        Subject: CN=E781DB3FA7D24BA60F113C83F26AC1EC0ED69ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:d4:09:68:1f:aa:b3:66:61:ea:67:8e:9b:
                    45:7e:23:0d:17:df:ba:3f:1c:3e:d2:e4:e0:d6:d7:
                    40:c1:42:aa:fb:9c:ed:98:5c:96:a4:4b:0f:db:2c:
                    f9:e1:e8:c2:df:cd:f3:ba:35:73:08:ec:c6:20:a6:
                    ae:00:44:eb:c3:d9:7b:82:aa:e1:22:5b:cd:6a:5a:
                    10:87:c4:8d:bf:88:27:32:ec:f7:20:3f:f8:d8:09:
                    7a:0e:d8:5e:26:c7:43:3a:8a:a9:35:d2:29:21:2b:
                    2e:4f:1e:95:0d:00:68:75:32:6e:ac:9e:4b:5a:1e:
                    38:50:e6:d4:e7:2c:84:7f:58:03:38:4d:a2:f2:78:
                    6a:01:d0:1b:60:55:df:61:ce:97:46:5b:fb:94:08:
                    f3:82:99:52:04:23:b3:92:f8:31:73:0a:df:d3:87:
                    e8:71:01:55:6e:d6:58:49:83:b3:b9:00:a9:68:10:
                    03:d8:50:0c:ba:0e:7d:fc:5c:d9:16:ff:1c:00:dd:
                    be:cb:48:63:de:5f:0f:31:6c:f7:01:33:45:c2:e5:
                    dd:2c:56:d7:79:ec:a9:c0:c8:b5:1b:9f:81:45:db:
                    3b:d3:64:62:22:1b:0b:af:07:91:75:22:33:3f:c2:
                    fb:d1:da:d0:93:9e:d7:92:37:25:c6:cb:7a:ed:8e:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:81:DB:3F:A7:D2:4B:A6:0F:11:3C:83:F2:6A:C1:EC:0E:D6:9E:D6
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:8c:5f:1f:16:17:24:bd:7f:d2:fd:02:6a:19:d5:de:a8:
         be:ff:d5:d1:c0:ba:39:e3:32:90:e6:f7:9b:05:0e:6b:68:b1:
         21:d9:70:55:06:c0:d7:4f:12:16:4d:15:a4:ab:86:32:25:28:
         eb:cd:93:40:7e:fc:77:51:26:a9:9a:18:04:a1:0b:17:1c:97:
         95:7f:1b:8c:cd:ec:38:38:ec:80:35:e0:72:7d:3e:13:d6:9c:
         11:1b:29:2b:60:c4:1d:15:ef:ec:6e:45:56:0f:6f:fc:48:eb:
         30:14:43:5a:9f:b9:d9:e5:c1:12:88:53:66:5d:ac:54:34:40:
         43:b1:01:56:ad:0e:c0:50:fe:71:68:41:27:fc:17:80:c3:bd:
         25:b2:76:60:40:c5:7c:39:7c:99:5e:81:4e:ec:26:0f:b0:eb:
         1a:ad:da:6c:21:71:1b:e2:72:1c:c0:1d:1a:03:82:0f:a2:e1:
         ba:33:35:de:f9:72:8f:63:06:bc:2b:a4:13:15:9e:f2:f1:6a:
         10:0b:40:fd:27:fc:83:f4:43:94:14:d9:db:31:24:25:17:1a:
         48:00:39:1a:e5:70:a7:cf:f5:04:cb:ee:e8:bd:c4:de:43:61:
         05:41:b2:ec:b0:46:d6:78:98:16:f0:a2:af:04:58:db:66:39:
         b9:7e:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org