Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa
File:                     3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          +rA/Q48IwCF6AQEPzK51JHW3/OxKl0M5NbwLfwujEQs=
Subject key identifier:   9E:9B:E5:C0:2F:78:A9:28:5D:E4:4F:83:B9:34:AC:9C:FE:45:EA:C7
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       13C895FDF2AA73FE17B4697F08FCDFA62181EE76
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:10 +0000
ROA not before:           Tue 05 Mar 2024 17:56:10 +0000
ROA not after:            Tue 04 Mar 2025 18:01:10 +0000
asID:                     26611
IP address blocks:        191.156.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c8:95:fd:f2:aa:73:fe:17:b4:69:7f:08:fc:df:a6:21:81:ee:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:10 2024 GMT
            Not After : Mar  4 18:01:10 2025 GMT
        Subject: CN=9E9BE5C02F78A9285DE44F83B934AC9CFE45EAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:3c:28:8f:8b:2e:53:4f:6e:a7:58:e8:01:
                    ee:de:60:ed:1d:09:b5:2f:87:55:84:22:61:b1:44:
                    4e:38:60:00:13:a4:1d:14:7d:20:8d:7d:5c:03:91:
                    8a:ae:95:74:1a:41:84:98:c8:d7:eb:d6:a6:ce:df:
                    3f:91:29:3d:06:60:ee:e7:0b:af:14:2f:4a:19:1f:
                    a7:0b:75:41:2a:30:6c:a5:ce:a2:17:40:73:83:b4:
                    34:b1:bc:0a:ba:24:f0:ac:34:6d:bb:36:19:09:21:
                    21:73:ad:8e:f4:6f:d8:0d:09:a0:b5:54:a8:99:e8:
                    5a:60:74:48:23:71:15:2b:06:6c:6f:50:5e:1f:3f:
                    4a:2c:49:76:22:4d:ed:01:52:c9:b8:9f:bb:ff:a4:
                    71:0e:d2:b9:57:d4:8d:c3:e1:3e:60:1e:c6:a4:62:
                    92:ad:e2:b5:4f:3f:0b:e9:db:fd:24:16:4e:b4:2a:
                    c3:98:de:03:ad:d9:7b:9d:26:76:44:77:06:7d:d3:
                    47:89:9c:a3:2f:34:ac:38:15:dd:51:e2:b6:bc:35:
                    10:ed:fb:04:fa:2b:d1:d1:c3:66:4b:a5:e8:9b:a1:
                    25:7f:82:b1:8f:51:ca:f8:66:ec:79:6b:c3:51:7b:
                    44:19:be:b1:04:a2:36:8a:fd:19:9b:4b:8d:5f:8e:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:E5:C0:2F:78:A9:28:5D:E4:4F:83:B9:34:AC:9C:FE:45:EA:C7
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:ff:40:7e:9f:7f:4f:72:b0:05:0a:92:52:d3:5c:5b:db:
         e5:6a:73:f0:f4:4e:02:cc:46:16:16:f8:72:4a:f0:3c:16:37:
         e0:f0:4a:c8:92:15:9a:9f:88:67:8a:5c:d5:05:5f:ac:3e:ae:
         45:03:e2:28:03:22:62:e7:46:59:60:10:75:71:a6:e7:39:c3:
         7e:de:da:1c:c4:ae:d6:af:c1:1b:45:4e:55:06:65:04:c4:25:
         ea:84:0a:37:c2:4e:25:09:29:fe:61:6c:0f:fa:9e:ad:6c:39:
         03:5b:bb:cf:e5:5b:3f:3e:ad:47:87:f6:a6:81:2a:e8:9c:e6:
         8f:8d:d5:d0:44:19:1f:9b:7d:12:10:70:f6:e4:c5:2b:17:d2:
         17:44:a2:c6:85:63:b8:53:0b:d5:62:1a:38:dc:43:47:53:40:
         f2:b8:80:dd:0f:7e:7f:76:19:5e:cf:11:3b:6a:4a:6c:76:bf:
         e3:f5:9d:a2:64:77:62:eb:c6:83:5a:fc:36:c5:3f:14:56:22:
         66:99:0e:c1:2c:14:00:91:ce:07:2f:38:99:6b:ec:7a:1d:4e:
         25:1b:f2:1a:11:19:4a:60:bb:c9:ce:a5:57:3f:cd:08:a3:69:
         66:8c:31:02:b5:e7:da:3e:ab:9d:1a:f4:1a:d8:05:04:98:22:
         57:b7:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org