Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e37322e302f32312d3234203d3e203236363131.roa
File:                     3139302e3133302e37322e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          eFgc/+HUE3Wok38pQB8+AiXmvjemIEkWeANZSCsX2Co=
Subject key identifier:   95:95:78:AE:31:0D:A4:DE:68:CE:80:C3:EA:11:DB:C5:56:1A:E7:39
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       4D25D8C217499D069E4881076156745C7E8431B6
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e37322e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:07 +0000
ROA not before:           Tue 05 Mar 2024 17:56:07 +0000
ROA not after:            Tue 04 Mar 2025 18:01:07 +0000
asID:                     26611
IP address blocks:        190.130.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:25:d8:c2:17:49:9d:06:9e:48:81:07:61:56:74:5c:7e:84:31:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:07 2024 GMT
            Not After : Mar  4 18:01:07 2025 GMT
        Subject: CN=959578AE310DA4DE68CE80C3EA11DBC5561AE739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c2:da:94:12:b6:db:b9:0d:b4:fe:de:dd:34:
                    97:5d:88:e6:92:39:04:c4:53:6e:f9:cc:33:03:8e:
                    57:67:09:97:55:1b:95:97:7f:7d:1d:64:7e:1f:bf:
                    5d:95:85:6b:bd:6f:48:46:60:a4:58:16:a5:7e:49:
                    5d:0d:6e:a5:e9:fc:4d:8c:a7:aa:a3:f3:f1:22:ae:
                    a8:a9:17:d2:00:e5:ca:42:6d:96:1d:2e:c5:f6:74:
                    1f:c6:37:54:d0:9a:49:86:7d:4f:3b:bf:43:8c:ef:
                    fe:25:34:58:3f:f6:ff:1f:15:d9:1e:51:87:2a:5d:
                    fe:0e:56:84:5f:32:26:3e:1c:f4:cb:6d:48:94:c6:
                    0d:b1:3d:5a:89:21:e3:2e:d3:41:19:55:99:03:d0:
                    82:fd:3d:95:39:25:57:53:c3:7a:71:7e:fd:06:e6:
                    17:16:0b:80:d0:31:7a:f7:dd:c7:f9:bc:b8:90:05:
                    47:16:3b:f8:24:3d:fc:66:0c:46:60:2f:49:e9:51:
                    bd:69:06:24:68:dc:84:8e:68:bb:97:e7:5d:e0:36:
                    bf:22:a9:6e:19:22:50:02:1a:2a:34:77:96:cd:6d:
                    d8:5f:70:3a:91:3d:50:2b:30:6e:05:a6:b7:ae:cd:
                    a6:00:32:28:98:4c:27:09:3d:d6:cc:a8:68:f8:9e:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:78:AE:31:0D:A4:DE:68:CE:80:C3:EA:11:DB:C5:56:1A:E7:39
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e37322e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:74:c1:5e:b6:8b:8f:30:bc:1c:a0:d7:b0:90:2b:2a:02:
         02:15:4e:1b:f3:eb:3b:91:1f:43:a1:6f:fb:68:7e:41:76:49:
         ee:4f:0b:9d:f6:84:e8:b7:f1:b6:16:d0:63:57:f6:06:e9:8f:
         6e:2a:ee:7c:05:09:3a:55:e1:41:92:ba:87:11:fb:04:02:80:
         e4:79:4f:6a:66:5e:db:0b:6f:74:47:6b:44:9a:54:1b:3d:94:
         d6:bb:35:16:dd:59:ac:1f:df:30:14:ca:b7:5a:10:36:11:34:
         fe:40:b8:b5:02:ab:53:13:09:36:75:ee:a1:eb:0a:83:f4:f1:
         93:ba:5a:fd:28:eb:69:b0:b6:0f:de:97:af:20:1b:a6:cd:73:
         97:51:49:4c:92:29:5c:0c:9a:92:fd:b2:ec:d1:d8:39:67:43:
         6a:cd:86:82:ca:68:cd:e7:a6:26:a9:d5:38:93:e6:44:64:02:
         24:aa:ab:f4:69:af:98:9c:25:09:e2:f9:d0:31:4b:27:73:5e:
         8f:3a:ff:a0:e3:bf:13:67:ad:de:01:c2:cd:58:8e:7e:e6:5c:
         90:01:f5:08:2a:4c:1c:af:25:2f:7c:0c:2b:34:72:54:05:c3:
         53:f7:19:30:37:7d:e5:4b:15:63:37:ea:62:88:bc:e4:fe:00:
         5b:e3:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:44:54 2024 by rpki-client on console-fra.rpki-client.org