Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203236363131.roa
File:                     3139302e3133302e36342e302f31382d3234203d3e203236363131.roa (raw, json)
Hash identifier:          3AvbFZaA1dIUfc5/SlAM+iww4zJBW+fCJPv4g6HIPEQ=
Subject key identifier:   A1:3B:1E:5D:E6:76:D5:91:A7:52:56:34:43:3B:AD:8A:B8:D1:A4:29
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7EAB877D203DE71A038628EA6741C7DC529A0E9C
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:10 +0000
ROA not before:           Tue 05 Mar 2024 17:56:10 +0000
ROA not after:            Tue 04 Mar 2025 18:01:10 +0000
asID:                     26611
IP address blocks:        190.130.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ab:87:7d:20:3d:e7:1a:03:86:28:ea:67:41:c7:dc:52:9a:0e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:10 2024 GMT
            Not After : Mar  4 18:01:10 2025 GMT
        Subject: CN=A13B1E5DE676D591A7525634433BAD8AB8D1A429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:7a:52:88:d6:62:56:37:06:2b:35:1e:5f:
                    aa:dc:36:17:39:47:5b:df:62:59:2e:8b:44:22:d5:
                    c7:99:4d:55:15:44:ac:fe:42:38:bd:af:d6:40:3b:
                    af:8e:41:64:bb:ca:d6:4c:8d:46:59:da:cf:5d:16:
                    49:06:f2:6e:8d:4e:60:0c:23:44:26:cd:9a:e7:7c:
                    d0:e6:3c:af:32:f8:84:12:a7:95:df:e5:47:91:07:
                    65:d6:0f:5f:f6:9e:48:4e:5d:79:d4:eb:15:f6:7a:
                    26:45:da:4f:59:32:1a:7a:58:f1:41:ec:d7:f1:4d:
                    c9:78:eb:5a:2c:4a:e7:d6:5d:d6:1f:d1:09:7c:ae:
                    d6:76:2b:73:f7:da:69:50:e3:27:a8:e4:11:e6:e6:
                    7d:8f:69:0e:47:50:e5:ca:9e:eb:25:b5:5b:38:29:
                    58:bf:95:3e:62:80:d8:22:21:20:70:d3:6c:1d:74:
                    fa:5f:32:f7:a1:9b:e1:e7:00:ea:9c:b2:f5:fb:09:
                    82:d9:02:44:ab:cd:36:a7:e8:62:f8:ea:7c:6c:ff:
                    bb:86:cc:81:de:9b:79:17:eb:c5:90:73:ab:82:63:
                    b7:8b:e8:15:d1:54:89:aa:45:d2:a4:8b:75:74:a5:
                    57:06:cb:91:3c:58:8a:34:ef:02:ff:50:a7:ea:5a:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3B:1E:5D:E6:76:D5:91:A7:52:56:34:43:3B:AD:8A:B8:D1:A4:29
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:4c:53:df:8d:61:d9:c6:30:4e:87:9c:80:b2:68:1c:93:f9:
         d6:f9:f7:12:7d:52:af:04:6d:a7:a2:8c:2e:31:60:6a:54:a0:
         a7:c5:3a:b2:cf:cb:8c:9f:62:96:b1:ef:88:f4:59:89:a4:a9:
         b1:4f:bf:8c:ad:13:cd:a4:e6:f9:d6:2b:36:50:71:27:2d:a6:
         05:c1:94:62:f2:e7:bb:2f:8c:3a:22:57:91:56:10:97:11:4b:
         8a:ed:02:a3:dd:e1:1c:39:1c:8c:fd:c9:d6:82:76:da:e1:5a:
         5f:85:55:60:2b:f4:09:a5:bf:00:1e:a7:50:fc:91:3b:09:a2:
         65:56:9c:3d:29:0b:9e:1c:73:46:1a:f0:64:0a:2d:2a:2a:13:
         d0:eb:51:5a:b7:60:85:89:63:13:e6:60:90:18:f4:bd:a4:6b:
         2f:ad:b6:69:0d:0b:9d:a8:53:5d:13:c6:b3:97:61:89:36:08:
         e8:cc:0d:ff:d7:12:5d:89:4f:c5:88:b4:04:80:6e:31:41:c9:
         32:77:d6:a2:b1:08:41:7e:d7:ed:d2:19:4d:32:bd:6f:83:3d:
         3b:ec:b0:02:7f:5b:fc:36:8e:81:e5:0f:dc:c8:79:68:3b:92:
         59:25:46:7b:91:a9:66:86:c1:6d:fa:d6:32:25:89:df:b6:90:
         7f:86:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:44:54 2024 by rpki-client on console-fra.rpki-client.org