Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e38302e302f32302d3234203d3e203236363131.roa
File:                     3139302e3133302e38302e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          X6xJM4eWKqGxogNVUL/XqS0r9GLbyz2TKv8KXeBXSEk=
Subject key identifier:   46:23:35:8B:E2:D8:71:46:26:1C:72:F5:5B:82:1E:BA:D2:86:09:BD
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       5246BD54F4AB1A1E7A836E5CC286D149EB26152B
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e38302e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:05 +0000
ROA not before:           Tue 04 Feb 2025 18:00:05 +0000
ROA not after:            Tue 03 Feb 2026 18:05:05 +0000
asID:                     26611
IP address blocks:        190.130.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:46:bd:54:f4:ab:1a:1e:7a:83:6e:5c:c2:86:d1:49:eb:26:15:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:05 2025 GMT
            Not After : Feb  3 18:05:05 2026 GMT
        Subject: CN=4623358BE2D87146261C72F55B821EBAD28609BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:0c:10:9a:67:19:3d:78:3b:9e:14:65:35:
                    56:8b:58:a9:68:57:6f:5c:b3:19:cb:06:7c:8e:03:
                    97:a3:3f:10:d4:91:49:dc:05:b6:a6:54:bb:f0:e6:
                    fa:6f:fe:9a:1e:fe:13:65:d2:93:e7:52:76:33:03:
                    ab:f8:40:42:a3:e5:66:32:2b:bd:61:f5:d1:17:7d:
                    9d:74:f7:2c:81:3b:bd:72:ea:fd:26:e1:82:b7:e9:
                    50:84:25:7f:5e:34:9e:e9:ad:31:ee:72:a1:f1:a7:
                    63:dd:2f:3d:2f:6a:c6:e6:08:97:28:da:db:da:42:
                    e5:5e:6c:da:43:e3:ca:0c:d3:3b:7c:30:31:d1:aa:
                    f6:0c:3c:88:d4:2f:36:85:62:55:08:1d:92:9a:7e:
                    42:8a:1e:04:f1:90:1e:3a:7f:7c:77:d2:1c:d6:98:
                    24:0f:18:50:df:74:e8:14:c1:b7:e7:fc:04:e8:0c:
                    3b:e4:13:6c:79:96:ce:9f:90:3e:67:15:75:fd:0b:
                    9f:3d:db:f8:33:7a:cc:52:89:40:42:18:64:39:5a:
                    9e:8e:08:c0:cc:26:9c:4b:99:9a:bd:0d:ee:bf:96:
                    ba:ca:0d:06:53:ee:8f:78:80:58:a6:59:cb:60:a5:
                    ba:c3:08:96:77:89:2b:dd:50:26:b9:eb:4e:45:a7:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:35:8B:E2:D8:71:46:26:1C:72:F5:5B:82:1E:BA:D2:86:09:BD
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e38302e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:50:fa:e2:10:55:68:ce:19:2b:c5:e1:76:de:39:16:2c:20:
         4f:81:97:a2:ae:b7:48:e8:62:8f:01:ae:cf:45:d0:ef:f9:16:
         58:b4:66:ff:3b:39:7a:2f:0b:bf:cf:f6:56:b7:8c:a9:81:9f:
         89:91:14:52:8b:ca:9d:25:76:a8:30:dc:a8:9c:46:8a:6e:36:
         6b:60:80:8f:9f:89:9b:11:ab:2f:cf:4d:16:fc:9d:b6:64:a9:
         2b:00:08:bc:9e:79:fb:a7:da:4a:82:3f:d6:44:2a:a7:bb:83:
         1a:51:a1:2f:5c:c5:77:52:33:c8:61:74:36:6d:10:f6:f3:e6:
         5e:cc:6e:5c:0b:75:7f:3b:5f:d2:8f:75:75:b8:5c:58:e2:78:
         5b:39:a8:62:ec:67:a5:bc:35:49:56:95:01:01:b0:23:1e:67:
         04:d2:c8:ed:81:87:83:e1:34:c9:88:22:bf:37:6e:a0:36:5e:
         a9:42:4f:37:6f:c0:0b:54:58:63:70:47:db:98:93:37:a3:da:
         98:a9:a7:a8:ea:dd:f6:a3:82:2f:71:91:45:dd:37:a1:5b:f3:
         b5:95:93:a3:83:df:73:6a:2f:c0:34:ed:34:ed:f7:38:8e:64:
         6e:67:bd:3e:55:87:ad:b8:8c:0f:a6:a3:f4:fe:db:f6:26:88:
         7e:c5:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:38 2025 by rpki-client