Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa
File:                     3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa (raw, json)
Hash identifier:          4UpWAeEJOqpy433IhUcpZvFCaKZ/NCwSHi6WRN+4++w=
Subject key identifier:   F6:83:D1:C5:D0:1B:51:10:7F:C9:B0:02:FF:A4:93:5B:26:83:44:03
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       39201664442AE77FC1BB89D8979CF6AD9F3E19
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:17 +0000
ROA not before:           Tue 04 Feb 2025 18:00:17 +0000
ROA not after:            Tue 03 Feb 2026 18:05:17 +0000
asID:                     26611
IP address blocks:        191.156.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:20:16:64:44:2a:e7:7f:c1:bb:89:d8:97:9c:f6:ad:9f:3e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:17 2025 GMT
            Not After : Feb  3 18:05:17 2026 GMT
        Subject: CN=F683D1C5D01B51107FC9B002FFA4935B26834403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:ac:dc:b1:99:ab:07:c4:be:1b:a3:b0:f5:
                    17:72:58:6c:c2:7b:92:49:5a:6e:36:b2:2f:61:a4:
                    7e:95:c2:61:d7:0d:f1:8f:b6:41:36:44:21:64:04:
                    af:be:a5:39:15:48:be:f2:5f:b2:8a:fa:89:e7:14:
                    ae:51:40:aa:41:7b:bb:fc:3c:0e:9a:77:e0:60:a7:
                    61:c8:53:9d:1e:bb:20:0d:11:0c:83:58:8b:07:23:
                    bd:3b:70:f6:ae:95:0b:87:7f:fe:74:f7:7f:96:07:
                    d4:50:ff:eb:63:2c:a7:d1:c0:86:be:6a:74:ab:25:
                    3f:30:0a:f7:f2:f7:b3:40:ae:dd:2e:f8:b7:7c:a8:
                    5e:83:84:ab:73:27:d1:a8:4f:43:ae:b5:67:c8:3c:
                    70:52:07:bc:49:ee:28:4a:03:12:3a:fd:e9:9a:b2:
                    d4:61:4b:72:ad:f7:9e:d2:c9:12:90:11:88:0b:44:
                    62:21:30:48:14:f1:ac:7d:e2:52:14:54:c1:33:45:
                    a7:28:7e:99:2b:c8:0f:06:a6:7e:58:7c:1a:40:af:
                    af:66:dd:96:52:c9:09:2e:45:19:d4:89:88:9d:c1:
                    9a:96:66:da:70:d2:fb:ea:e7:02:14:a7:14:97:22:
                    fb:c6:61:16:e9:55:9d:72:00:79:47:73:f1:32:bf:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:D1:C5:D0:1B:51:10:7F:C9:B0:02:FF:A4:93:5B:26:83:44:03
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:d3:dc:0d:eb:ad:f4:1d:24:12:ce:f8:c6:81:fa:2d:04:
         4a:e5:63:a0:60:da:ef:96:a9:79:82:03:96:5e:19:0e:83:9a:
         b5:c8:5d:5d:ec:ec:17:40:6f:18:08:16:4c:d6:20:ae:ea:c0:
         da:e1:3b:0d:0b:0b:63:b6:ca:56:4a:f1:a5:8c:8b:83:4a:ec:
         c0:5e:4b:03:6e:88:14:30:dc:08:0a:52:8f:4f:58:d3:f9:9f:
         aa:c8:9a:9f:8b:e3:94:1e:e9:29:2d:67:37:c8:6a:ec:4f:1d:
         fe:4c:3e:eb:72:01:5c:fe:d7:c6:93:b1:51:83:2a:95:46:88:
         89:1f:58:d7:37:dc:f1:60:e6:75:1b:39:42:b8:f5:53:ce:93:
         3c:70:57:61:2c:bd:40:60:ac:dc:45:6c:26:18:6f:f7:a9:ea:
         f7:d5:94:b1:04:9b:6b:d5:ba:e1:e2:a3:4a:04:21:94:08:83:
         38:fc:2c:88:27:cf:60:2c:90:5e:78:1c:ff:06:7a:b9:6d:8a:
         b7:f1:99:af:0a:47:e8:ba:96:49:5a:45:2b:6a:d6:72:a1:18:
         c6:1a:f6:2b:e9:9d:c9:01:1b:fb:dd:f6:bc:ed:de:ee:87:a0:
         6a:46:2e:8e:08:29:16:0e:05:26:13:01:18:a6:84:31:09:30:
         8e:29:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:25 2025 by rpki-client