Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa
File:                     3139302e3234332e302e302f31362d3136203d3e203236363131.roa (raw, json)
Hash identifier:          72NjjeaaJ5JPu4twq8uqZkstRfKQMgVhCI+df90vZ6I=
Subject key identifier:   06:40:D5:54:75:3E:C4:01:0F:D9:C3:BE:10:73:A7:85:EA:90:13:C3
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7521646998A5639C936972765C2A98705A0255FD
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:00:57 +0000
ROA not before:           Tue 05 Mar 2024 17:55:57 +0000
ROA not after:            Tue 04 Mar 2025 18:00:57 +0000
asID:                     26611
IP address blocks:        190.243.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:21:64:69:98:a5:63:9c:93:69:72:76:5c:2a:98:70:5a:02:55:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:55:57 2024 GMT
            Not After : Mar  4 18:00:57 2025 GMT
        Subject: CN=0640D554753EC4010FD9C3BE1073A785EA9013C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:f0:1f:d7:26:c6:ab:36:87:1b:b8:5a:23:
                    65:ce:98:fa:ed:cf:58:8a:64:ce:bb:2e:2d:13:eb:
                    a6:2b:05:9b:c1:e2:1a:ab:ed:55:21:a2:f4:61:e8:
                    52:c8:79:e5:9b:2d:42:7b:46:e6:48:30:48:80:b8:
                    11:1a:71:84:15:88:82:6c:c8:5d:9a:9e:c0:99:0a:
                    d8:8d:a0:63:5b:4f:40:43:b2:4b:55:41:a7:e6:00:
                    25:bb:56:6f:23:39:61:b0:2f:4b:e5:e5:54:a6:c6:
                    b5:94:e1:25:d6:1c:40:10:de:33:8e:1f:86:42:ac:
                    0d:1f:18:fe:8a:20:f1:cd:30:29:a6:70:35:77:25:
                    62:9a:04:ea:5e:9a:36:82:4c:7b:a4:04:fe:d0:68:
                    51:03:0d:c8:12:17:fa:41:05:e9:11:aa:e8:93:3f:
                    51:1d:10:8b:c1:fb:41:43:c7:d0:7a:70:c0:62:2f:
                    58:7a:6d:7d:6b:d0:3b:91:89:8c:0f:2b:cf:f3:da:
                    cf:16:9b:85:3e:77:ab:2b:43:0a:f9:0e:f0:24:1d:
                    e4:d3:29:b5:cd:0d:3f:b6:60:0f:4a:e5:ff:7f:fc:
                    20:ef:25:fc:c1:8d:30:9f:d4:df:27:1d:a8:36:02:
                    a0:eb:d1:a6:ea:d0:85:ce:5a:fa:ba:d9:e4:27:bc:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:D5:54:75:3E:C4:01:0F:D9:C3:BE:10:73:A7:85:EA:90:13:C3
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:98:57:76:63:0b:23:f5:2b:69:2b:9a:55:2b:7e:58:bb:
         6b:29:3a:9f:6f:0c:4d:fb:9e:4a:2a:69:a4:98:91:83:c8:8f:
         0e:f8:e9:b6:9a:6b:7b:db:aa:80:a4:5d:56:e0:1c:de:61:42:
         2f:28:f3:2f:c6:16:d2:1b:2d:e8:5f:82:e3:a3:85:a1:71:2d:
         38:31:7d:e7:0d:39:eb:ef:91:51:d8:35:8d:8d:da:d2:81:e1:
         ad:45:d7:1d:30:4c:e5:07:d8:94:f1:d8:0e:1b:e3:21:79:a3:
         aa:be:bb:d9:0e:c1:9c:ce:c1:f9:0d:34:4c:27:04:89:15:11:
         33:d2:07:0c:3e:29:b0:eb:d1:d7:35:d6:f0:50:d7:4d:fb:6c:
         2d:a1:69:4d:a9:bb:0c:d6:65:b2:7e:70:b5:54:2a:41:06:c1:
         e9:24:25:93:02:de:47:74:13:ac:46:09:7a:c3:a4:2c:75:96:
         5a:b8:c8:80:25:cd:68:35:0e:1c:ca:06:c5:d2:15:4c:66:3e:
         eb:72:d6:a5:44:78:42:c8:2d:04:c0:14:a4:e8:6f:21:60:89:
         7a:9b:c8:f5:18:6c:ac:66:a5:aa:4b:d7:2d:d3:60:e8:64:cb:
         5e:c3:5c:3e:f4:f7:d5:c6:f4:1a:f5:3c:48:b7:a0:59:34:df:
         99:0a:75:8a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUdSFkaZilY5yTaXJ2XCqYcFoCVf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU1NTdaFw0yNTAzMDQxODAwNTdaMDMxMTAvBgNV
BAMTKDA2NDBENTU0NzUzRUM0MDEwRkQ5QzNCRTEwNzNBNzg1RUE5MDEzQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QfAf1ybGqzaHG7haI2XOmPrt
z1iKZM67Li0T66YrBZvB4hqr7VUhovRh6FLIeeWbLUJ7RuZIMEiAuBEacYQViIJs
yF2ansCZCtiNoGNbT0BDsktVQafmACW7Vm8jOWGwL0vl5VSmxrWU4SXWHEAQ3jOO
H4ZCrA0fGP6KIPHNMCmmcDV3JWKaBOpemjaCTHukBP7QaFEDDcgSF/pBBekRquiT
P1EdEIvB+0FDx9B6cMBiL1h6bX1r0DuRiYwPK8/z2s8Wm4U+d6srQwr5DvAkHeTT
KbXNDT+2YA9K5f9//CDvJfzBjTCf1N8nHag2AqDr0abq0IXOWvq62eQnvISrAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUBkDVVHU+xAEP2cO+EHOnheqQE8MwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzIzNDMzMmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDMyMzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC+8zANBgkq
hkiG9w0BAQsFAAOCAQEAo5qYV3ZjCyP1K2krmlUrfli7ayk6n28MTfueSipppJiR
g8iPDvjptppre9uqgKRdVuAc3mFCLyjzL8YW0hst6F+C46OFoXEtODF95w056++R
Udg1jY3a0oHhrUXXHTBM5QfYlPHYDhvjIXmjqr672Q7BnM7B+Q00TCcEiRURM9IH
DD4psOvR1zXW8FDXTftsLaFpTam7DNZlsn5wtVQqQQbB6SQlkwLeR3QTrEYJesOk
LHWWWrjIgCXNaDUOHMoGxdIVTGY+63LWpUR4QsgtBMAUpOhvIWCJepvI9RhsrGal
qkvXLdNg6GTLXsNcPvT31cb0GvU8SLegWTTfmQp1ig==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org