Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e39362e302f32302d3234203d3e203236363131.roa
File:                     3139302e3133302e39362e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          kjkZBnZXyuepLihLdr60R4tsARVMQq8bmj4ffdgM+rY=
Subject key identifier:   93:8F:71:BD:C0:92:9D:6F:4E:63:2C:F8:E4:75:6C:14:85:E8:94:AD
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       6EFB66D28DEE0D73FD55E5D80E884ECA37E813DD
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e39362e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:06 +0000
ROA not before:           Tue 04 Feb 2025 18:00:06 +0000
ROA not after:            Tue 03 Feb 2026 18:05:06 +0000
asID:                     26611
IP address blocks:        190.130.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fb:66:d2:8d:ee:0d:73:fd:55:e5:d8:0e:88:4e:ca:37:e8:13:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:06 2025 GMT
            Not After : Feb  3 18:05:06 2026 GMT
        Subject: CN=938F71BDC0929D6F4E632CF8E4756C1485E894AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:ca:7d:f3:85:16:cd:e2:51:44:24:da:d3:
                    07:02:60:fa:30:b1:2a:a8:84:b7:10:64:f5:fe:23:
                    2d:a5:86:ae:d3:b1:82:3d:7a:41:31:13:5f:e9:24:
                    04:24:a6:7d:92:d4:f3:1f:b0:d0:1f:be:57:b0:ae:
                    f2:79:35:6f:7b:61:ee:c1:06:a2:30:10:59:e9:d8:
                    6f:5b:95:97:16:dd:78:6e:8e:c1:50:69:87:a4:b6:
                    a6:c4:b7:68:d4:1f:48:95:6a:3a:ca:1e:39:d1:b8:
                    fd:66:0c:cf:a0:2c:83:6d:81:3c:39:43:9c:f4:e2:
                    4f:dc:4a:24:f6:c0:69:80:63:f4:5b:85:ed:57:4b:
                    70:21:27:3a:89:2a:a2:4a:00:9c:bc:05:48:45:2d:
                    c0:6d:10:d4:aa:21:9e:af:f8:14:b0:13:4e:1f:68:
                    39:9f:80:0d:94:77:0f:89:c8:19:d9:36:20:07:52:
                    d3:86:dd:f3:95:6d:7f:17:03:d0:a9:0b:5f:c5:c3:
                    70:9b:71:ff:5a:37:ae:24:4c:67:8a:97:5c:9d:64:
                    86:83:f6:7b:5b:5b:45:1b:d9:05:83:fd:e5:18:fe:
                    50:5b:27:b0:03:e2:cb:95:c1:9d:7d:1e:ca:57:a9:
                    b7:cd:0d:ab:f7:1b:82:33:67:c4:e0:79:d6:60:0a:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8F:71:BD:C0:92:9D:6F:4E:63:2C:F8:E4:75:6C:14:85:E8:94:AD
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e39362e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:95:eb:28:64:47:88:4a:ef:7e:b2:e4:b1:23:5d:f6:2e:5d:
         a0:f6:34:7e:db:4e:0c:73:35:37:f9:8c:88:de:04:3d:57:fd:
         4c:84:e4:3e:67:e9:c3:84:7a:61:46:ca:83:d6:87:98:a9:bd:
         ba:df:d5:8b:08:cc:6f:37:c6:9d:2a:67:3a:7a:15:7d:24:31:
         b9:59:d9:0c:31:02:44:66:e7:6f:c7:af:f1:ac:51:f3:8c:7b:
         fc:a8:e5:23:50:c0:2d:5f:2f:07:30:bd:e0:05:fa:a9:20:bf:
         ae:87:b0:f8:eb:2f:21:64:2b:e3:10:97:5d:e5:38:59:94:6c:
         08:a9:56:92:f8:ee:9e:f8:55:0a:a6:1f:d3:38:a9:ba:44:e1:
         31:ef:fa:eb:df:3d:e9:91:ab:20:08:c7:be:39:52:d1:49:35:
         84:b6:ad:0b:36:8c:25:30:f3:67:5b:3d:7d:2a:7b:57:c4:17:
         7a:57:42:86:88:e1:a8:dc:c7:51:0f:9f:fc:49:a3:52:1d:51:
         56:45:b1:70:fc:0e:08:d5:c9:1f:5e:f8:af:e7:b7:89:de:3a:
         ea:38:b8:29:a1:c4:04:b8:42:7a:c3:f0:2a:09:ee:7e:0e:73:
         fc:5b:cd:ea:46:33:9e:f4:76:a2:06:21:51:42:58:e8:e3:f4:
         95:ef:be:9b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbvtm0o3uDXP9VeXYDohOyjfoE90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNTAyMDQxODAwMDZaFw0yNjAyMDMxODA1MDZaMDMxMTAvBgNV
BAMTKDkzOEY3MUJEQzA5MjlENkY0RTYzMkNGOEU0NzU2QzE0ODVFODk0QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkcp984UWzeJRRCTa0wcCYPow
sSqohLcQZPX+Iy2lhq7TsYI9ekExE1/pJAQkpn2S1PMfsNAfvlewrvJ5NW97Ye7B
BqIwEFnp2G9blZcW3XhujsFQaYektqbEt2jUH0iVajrKHjnRuP1mDM+gLINtgTw5
Q5z04k/cSiT2wGmAY/Rbhe1XS3AhJzqJKqJKAJy8BUhFLcBtENSqIZ6v+BSwE04f
aDmfgA2Udw+JyBnZNiAHUtOG3fOVbX8XA9CpC1/Fw3Cbcf9aN64kTGeKl1ydZIaD
9ntbW0Ub2QWD/eUY/lBbJ7AD4suVwZ19HspXqbfNDav3G4IzZ8TgedZgCjXlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUk49xvcCSnW9OYyz45HVsFIXolK0wHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMzMwMmUzOTM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL6CYDAN
BgkqhkiG9w0BAQsFAAOCAQEAkpXrKGRHiErvfrLksSNd9i5doPY0fttODHM1N/mM
iN4EPVf9TITkPmfpw4R6YUbKg9aHmKm9ut/ViwjMbzfGnSpnOnoVfSQxuVnZDDEC
RGbnb8ev8axR84x7/KjlI1DALV8vBzC94AX6qSC/roew+OsvIWQr4xCXXeU4WZRs
CKlWkvjunvhVCqYf0zipukThMe/669896ZGrIAjHvjlS0Uk1hLatCzaMJTDzZ1s9
fSp7V8QXeldChojhqNzHUQ+f/EmjUh1RVkWxcPwOCNXJH174r+e3id466ji4KaHE
BLhCesPwKgnufg5z/FvN6kYznvR2ogYhUUJY6OP0le++mw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:28 2025 by rpki-client