Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa
File:                     3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa (raw, json)
Hash identifier:          Hn6K9wP+ZLJkHmb8U5yVCoYYK+YClQWMbjJsatPc29c=
Subject key identifier:   5F:60:CF:4B:F7:AE:20:00:88:96:C0:17:40:8C:D3:8B:B4:E9:74:E1
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       383313310A7CF2FDD844C9BB0453B72811273009
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:13 +0000
ROA not before:           Tue 05 Mar 2024 17:56:13 +0000
ROA not after:            Tue 04 Mar 2025 18:01:13 +0000
asID:                     26611
IP address blocks:        191.156.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:33:13:31:0a:7c:f2:fd:d8:44:c9:bb:04:53:b7:28:11:27:30:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:13 2024 GMT
            Not After : Mar  4 18:01:13 2025 GMT
        Subject: CN=5F60CF4BF7AE20008896C017408CD38BB4E974E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:31:c5:12:c1:61:43:91:db:70:ed:a6:ce:
                    f9:59:1c:c9:f3:74:9c:3a:84:84:71:73:b8:f4:00:
                    27:24:87:64:f6:80:4f:97:32:62:14:e4:5a:b1:ad:
                    9d:c6:48:a3:60:e5:2b:23:86:97:66:69:e3:d6:58:
                    8f:ed:5e:87:6c:0a:17:b2:49:a5:09:0c:b0:d2:56:
                    84:6f:c1:54:de:ac:e6:53:37:a5:42:27:73:d9:ab:
                    fc:55:fa:9a:48:8e:61:b3:b3:4b:8d:55:75:7f:96:
                    f4:4b:7c:a7:2c:4d:dc:86:96:e5:63:1a:b8:38:9c:
                    65:03:56:e8:25:a5:4d:68:87:18:25:29:0a:d7:20:
                    35:25:5b:42:8b:e7:06:fc:d3:dd:0e:cd:e5:26:f9:
                    3e:0d:68:04:0a:13:7c:a1:ce:05:a3:df:4e:ef:29:
                    30:0a:e5:5a:e0:d1:e8:c9:66:e7:38:58:79:90:03:
                    e5:95:5b:b9:08:dc:c6:ca:93:ce:b1:95:21:53:16:
                    ca:62:3a:92:37:e8:e6:02:dd:a0:cc:42:f9:84:e6:
                    5f:95:dc:ce:43:42:3b:9c:cc:05:d8:5c:9a:0f:7d:
                    98:90:52:78:ec:25:ca:c8:a1:97:ba:ee:bd:2e:00:
                    f1:fd:40:a4:34:7f:38:51:e5:dc:df:3f:99:89:4b:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:CF:4B:F7:AE:20:00:88:96:C0:17:40:8C:D3:8B:B4:E9:74:E1
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3132382e302f31382d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:27:94:b4:e2:a5:1b:b5:45:65:95:9e:e6:cd:2f:3e:0f:d1:
         b7:b3:30:73:2a:cc:f6:93:91:13:89:ad:9e:ed:46:d0:82:ea:
         da:0e:81:1f:5b:fe:aa:05:a8:eb:6a:4e:82:8e:09:dd:c8:0e:
         b3:a7:a5:2c:a3:70:b4:72:00:10:22:ea:99:1d:d8:b9:49:7e:
         94:14:fe:2e:e2:55:e6:da:1d:d0:41:79:a8:2a:86:7f:43:b3:
         17:15:cc:7a:3d:be:08:ca:88:36:40:d2:5d:35:50:ca:19:05:
         93:02:8e:93:d3:ec:f5:4a:0f:2c:8c:36:47:9a:43:52:d4:56:
         fe:7c:dc:a1:dc:93:11:69:07:cc:b0:46:ee:a7:5b:e1:d5:43:
         f0:10:29:30:f3:a8:93:d5:b2:58:80:2f:d6:20:59:b7:9c:8f:
         b3:50:bd:80:14:c1:d2:f0:80:aa:2b:98:cd:9e:57:af:c0:b9:
         24:06:f8:c2:31:18:4e:da:58:79:1a:e7:94:07:78:c5:b4:8e:
         e8:0b:aa:f2:2e:6b:df:49:39:fa:ba:f3:dc:08:62:00:fb:02:
         ad:f4:c3:45:86:97:c8:c8:82:e1:34:0b:5a:7f:be:c7:8c:36:
         b9:b5:42:1e:ca:20:2b:c1:6c:26:48:3e:d6:0f:09:19:c6:d2:
         71:8e:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org