Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa
File:                     3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          2uyq+OPqZLK3Q7CtqUdbtS98vPZTwmmG1vcVPwN7GMU=
Subject key identifier:   29:72:53:FD:B1:44:57:B0:50:EC:DD:06:CC:72:AE:C7:27:25:9F:E2
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       5BE13F44CD21E15318C462B758696A1FE6C64CEE
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:00:59 +0000
ROA not before:           Tue 05 Mar 2024 17:55:59 +0000
ROA not after:            Tue 04 Mar 2025 18:00:59 +0000
asID:                     26611
IP address blocks:        191.156.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e1:3f:44:cd:21:e1:53:18:c4:62:b7:58:69:6a:1f:e6:c6:4c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:55:59 2024 GMT
            Not After : Mar  4 18:00:59 2025 GMT
        Subject: CN=297253FDB14457B050ECDD06CC72AEC727259FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:30:be:2d:16:e5:d6:b5:0a:7e:ad:e2:fe:
                    b8:dc:8c:99:7b:bc:69:5e:ce:3c:57:c1:7a:5d:92:
                    00:d0:92:8e:82:c5:df:37:90:3f:b4:60:fc:36:20:
                    61:65:a2:28:00:3c:36:da:e8:c0:65:3b:74:90:18:
                    c9:64:54:c4:b0:4b:c3:77:0b:12:3b:a2:37:7f:97:
                    44:83:fe:6e:f0:ee:38:73:d7:b0:85:30:72:1a:dd:
                    a1:89:fa:b7:29:b1:c4:20:9f:de:9e:8e:1e:bc:d4:
                    00:ea:8f:27:94:6e:3e:8f:5d:e8:42:25:52:fa:87:
                    69:70:94:53:b3:32:87:81:5f:20:15:51:d9:0e:a0:
                    03:d6:ee:2b:01:cd:72:d7:bc:9a:5e:94:ea:59:2e:
                    38:4c:ac:4f:0f:cc:59:9f:30:1b:9e:0d:bc:7a:2c:
                    97:40:4e:8b:ce:dd:bb:7d:be:17:08:07:36:00:92:
                    e4:81:21:7f:1b:0c:20:e3:00:2f:97:39:59:87:39:
                    1f:2a:70:ff:bb:13:3b:3d:42:ac:38:21:5f:c3:5d:
                    ae:ab:41:af:cd:1a:df:a9:c6:4a:98:f2:e3:b0:60:
                    ab:5c:0d:1a:97:06:13:3e:a3:26:ec:71:15:52:34:
                    5d:4f:7f:ec:82:4d:41:73:ec:e1:a1:3b:60:5d:f7:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:72:53:FD:B1:44:57:B0:50:EC:DD:06:CC:72:AE:C7:27:25:9F:E2
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:98:4b:cd:76:ca:85:b0:64:94:00:77:ac:36:12:fa:8d:f3:
         8e:8b:f4:c6:10:23:cd:60:99:7b:ae:b7:25:99:03:53:bb:f9:
         e4:52:a7:45:a7:87:41:df:d5:d6:81:80:3c:64:a5:18:c9:6b:
         84:b5:58:90:08:96:ea:e8:3e:dd:3b:7d:e0:f1:7f:45:d5:a1:
         ef:48:a7:df:fa:b5:ce:c5:0f:e0:2e:2f:c6:19:12:55:87:f2:
         f8:59:0d:8f:9e:a3:4b:7c:8d:6b:5b:70:17:ee:b3:fc:b6:bb:
         c5:d5:07:11:f5:ca:ee:b5:32:88:d9:44:d6:00:dc:6e:72:c6:
         69:f8:86:65:5f:91:29:96:58:7e:b1:b1:9b:b3:e9:c3:50:a0:
         9c:c5:6d:83:8f:43:03:db:ce:9b:dc:32:c2:a2:cf:6e:41:3e:
         eb:2c:ed:e4:87:2f:2d:da:bf:56:7e:50:cd:5b:97:98:a0:b1:
         27:5e:a5:65:90:f7:a8:b1:2a:4f:86:20:db:20:a6:03:04:e3:
         64:59:f8:b7:31:84:56:ad:49:eb:bb:cd:d1:c9:9b:17:a7:d9:
         88:d1:04:c0:1b:79:8e:55:7c:45:a2:4d:48:b3:d4:32:da:9b:
         c8:73:3c:53:b2:c3:1b:19:ad:9e:83:1d:34:01:a8:78:dd:7a:
         b2:2a:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:04 2024 by rpki-client on console-fra.rpki-client.org