Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3234203d3e203236363131.roa
File:                     3139302e3234332e302e302f31362d3234203d3e203236363131.roa (raw, json)
Hash identifier:          1qzLXZOcCkoAlFjz+JBOaLpFyrXMupgJGJgYSY/QXiU=
Subject key identifier:   C5:6A:DA:90:B7:CE:65:91:4C:94:9B:B1:F6:35:5B:21:CD:1C:15:FA
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       068300780A4D611C42E934ABD9AA608FF60934E3
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:07 +0000
ROA not before:           Tue 04 Feb 2025 18:00:07 +0000
ROA not after:            Tue 03 Feb 2026 18:05:07 +0000
asID:                     26611
IP address blocks:        190.243.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:83:00:78:0a:4d:61:1c:42:e9:34:ab:d9:aa:60:8f:f6:09:34:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:07 2025 GMT
            Not After : Feb  3 18:05:07 2026 GMT
        Subject: CN=C56ADA90B7CE65914C949BB1F6355B21CD1C15FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:a0:3a:68:04:96:3f:ca:c5:6b:a5:b3:09:
                    c5:f6:6f:62:65:6e:3c:c4:0e:09:e2:46:2d:a5:f7:
                    63:ac:8b:dd:a1:12:9b:40:44:d5:a3:b6:2b:9c:29:
                    af:74:a6:98:01:a2:77:09:38:a9:89:fd:9a:f6:3b:
                    02:a2:6b:32:37:1b:20:94:48:0e:22:7c:3d:b1:4e:
                    c6:30:18:a6:3a:54:ed:b2:58:f8:e4:e7:65:9d:b0:
                    86:e1:59:82:4f:d7:6b:c5:d7:20:f4:fc:8c:c6:95:
                    7d:11:99:b1:73:e6:83:30:a2:df:72:e3:0f:7a:ad:
                    d6:0b:f8:be:77:4c:40:bb:11:ce:0c:05:6f:63:b0:
                    24:53:eb:3d:9e:f6:13:15:10:70:db:43:28:58:f0:
                    6c:ec:4b:02:ef:a0:bd:90:ec:bf:2f:57:05:2c:09:
                    16:22:4a:0a:72:47:f0:92:3b:24:10:03:06:a7:fd:
                    04:d8:37:b9:0b:e3:13:52:01:3f:73:d5:87:9f:d8:
                    d7:d1:06:8a:a0:04:63:4c:3a:4f:c8:b5:42:68:37:
                    27:7c:a5:f9:e8:d9:3b:1c:fe:47:45:15:77:50:39:
                    81:35:ce:a4:8b:57:c8:43:68:8b:18:c8:7f:67:a0:
                    b1:87:82:a8:2d:69:e9:23:df:84:42:22:7e:67:db:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:DA:90:B7:CE:65:91:4C:94:9B:B1:F6:35:5B:21:CD:1C:15:FA
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:d6:36:2a:e7:82:f7:8a:cd:59:ba:d2:4a:31:51:a4:67:b8:
         e9:8d:f1:ed:aa:7b:f6:7f:3b:32:65:23:8e:7f:f9:f4:ca:f0:
         07:c3:05:3b:26:f4:f0:ff:4e:1a:aa:50:6a:8f:5b:f9:87:d1:
         cc:20:b2:31:8f:ef:82:a1:0a:13:63:85:1e:43:14:78:c0:0a:
         84:4b:c0:d6:ed:6b:4b:86:0a:a3:06:fe:90:8c:76:3f:bb:47:
         d6:9f:a8:24:69:b9:9d:f2:42:7c:59:24:5a:a5:e7:14:c3:2b:
         83:68:4a:82:21:15:53:9e:01:06:15:a6:b6:d7:73:8b:84:a1:
         f7:93:46:21:4d:6b:72:60:1a:38:64:c9:d4:7c:a4:01:ac:2b:
         a3:0b:e7:18:0d:13:33:a9:d3:fa:f0:5a:ee:7c:fe:7b:26:ea:
         17:ea:58:df:94:44:ba:51:56:ee:3a:e5:c4:0b:f2:c3:bb:f0:
         f0:48:8f:80:cb:07:22:09:1d:ae:e3:29:79:ef:99:1a:01:ea:
         d6:82:40:be:e9:c7:33:f1:19:3a:fc:7e:ea:97:21:34:9d:42:
         09:cf:e7:90:35:7f:c2:a8:35:97:ae:b5:84:1a:2b:38:b1:95:
         2f:41:0f:e5:74:80:83:bf:4f:5b:92:58:24:fc:fe:bd:86:71:
         82:73:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:49 2025 by rpki-client