Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
File:                     3139312e3135322e302e302f31342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          gm3KHkfa4ZJfy9Nz9o3fqbt6ADAcPf6qx3hfjaubHTc=
Subject key identifier:   9D:4A:3A:0C:24:F0:64:50:AF:66:6C:29:C7:C3:2F:D6:08:64:B9:AA
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       62EB0949C2402586E82E2B411D1990D805F04D3E
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:05 +0000
ROA not before:           Tue 04 Feb 2025 18:00:05 +0000
ROA not after:            Tue 03 Feb 2026 18:05:05 +0000
asID:                     26611
IP address blocks:        191.152.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:eb:09:49:c2:40:25:86:e8:2e:2b:41:1d:19:90:d8:05:f0:4d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:05 2025 GMT
            Not After : Feb  3 18:05:05 2026 GMT
        Subject: CN=9D4A3A0C24F06450AF666C29C7C32FD60864B9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:18:03:ff:7f:f5:f0:e3:1c:52:5f:02:33:
                    bb:42:15:13:14:08:f8:bc:fb:e7:5d:b4:e5:96:cf:
                    72:e6:41:98:b8:7e:93:c3:26:78:9e:a4:d0:51:f0:
                    ad:06:f9:66:d6:c3:2e:53:22:f2:82:47:48:c7:58:
                    39:ac:b5:47:36:5c:c8:a9:9a:6e:90:ce:f5:54:41:
                    ee:5b:39:b0:03:57:33:76:b1:b3:92:92:3f:fd:c2:
                    fc:7d:9f:31:fb:66:90:63:3f:d8:af:ae:96:76:9e:
                    90:d4:a6:07:49:61:fa:db:d6:4b:ad:3b:da:82:e8:
                    ef:7b:71:b7:8b:9d:5c:f0:7e:f3:84:7d:7c:74:44:
                    b5:b3:4f:31:ec:2f:e1:f9:36:ed:2a:ac:32:69:e3:
                    01:ca:d8:44:70:bb:d6:aa:82:03:70:3c:74:57:bc:
                    f5:19:09:85:b9:f4:8f:6c:2e:57:c4:b6:a6:72:c4:
                    35:77:46:3b:55:1f:b8:bc:10:38:be:a9:03:0d:eb:
                    b9:e1:bd:91:b7:75:48:db:d6:dc:da:8e:f1:57:e9:
                    cf:e1:a1:5e:19:24:1b:e2:c7:3d:c7:cd:1f:c0:af:
                    06:29:e9:ab:a2:ae:cc:1d:bb:b2:8e:c9:85:63:71:
                    4f:d9:05:b7:3e:68:d4:61:fc:20:be:af:ef:88:b4:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:3A:0C:24:F0:64:50:AF:66:6C:29:C7:C3:2F:D6:08:64:B9:AA
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.152.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:65:cd:95:85:ca:ae:af:75:01:44:f7:f5:b1:c0:61:65:
         f5:a2:23:9a:93:3c:68:6c:b2:be:79:78:78:69:bd:5c:d2:cb:
         de:aa:2a:73:f7:6c:b7:0e:95:ee:f5:73:4b:22:75:25:7e:87:
         42:f6:af:d6:f6:70:55:be:d4:10:99:b7:ae:33:bb:c8:1d:a9:
         85:77:82:28:58:48:f3:7d:b6:15:0c:ae:f5:d1:be:6a:91:19:
         5c:05:34:8a:b2:6f:5f:da:4a:b8:c8:91:d4:ca:45:fc:cc:f2:
         64:71:4d:df:fc:ab:bc:75:a0:f9:46:01:3c:39:71:68:19:58:
         c2:e4:f2:a8:20:56:d4:e4:55:76:f0:8b:88:a5:eb:a3:2d:a1:
         19:c9:47:f7:de:d8:6e:67:ba:2e:3b:ad:a8:a8:50:43:51:db:
         98:bb:4a:8b:c7:e8:b9:82:dd:7b:19:43:a3:c8:4d:09:94:46:
         5e:17:99:7a:f9:6a:da:df:b9:5d:5a:be:4c:d1:db:50:43:99:
         f9:ac:a9:f2:b8:40:01:a0:09:af:83:e4:91:0f:4c:d1:4e:47:
         9b:4c:7c:e8:34:92:fe:86:bc:c9:95:49:7e:9a:a3:9b:2b:53:
         27:f0:8e:5c:80:2b:64:ba:f5:0d:87:40:7d:47:4f:b4:55:cc:
         96:0b:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:44 2025 by rpki-client