Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa
File:                     3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          xd9uXSADlJCX2OOG4qcsoRt2rscr+50e5y3r/KW1NZE=
Subject key identifier:   D7:3D:4D:D2:44:1C:66:36:2D:DC:02:7F:3D:A0:2F:31:F8:3C:71:AE
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       043D1F95D8AF80C8A718A0337F779956C61B35CF
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:01 +0000
ROA not before:           Tue 04 Feb 2025 18:00:01 +0000
ROA not after:            Tue 03 Feb 2026 18:05:01 +0000
asID:                     26611
IP address blocks:        191.156.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:1f:95:d8:af:80:c8:a7:18:a0:33:7f:77:99:56:c6:1b:35:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:01 2025 GMT
            Not After : Feb  3 18:05:01 2026 GMT
        Subject: CN=D73D4DD2441C66362DDC027F3DA02F31F83C71AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:58:3a:59:21:f9:3a:42:c4:20:ca:e5:9e:
                    20:b5:38:e8:ba:ef:5f:f9:8e:9c:3c:2a:95:a7:ab:
                    d2:a1:cf:4d:28:73:2b:8e:5b:4b:1a:c4:8f:ff:e3:
                    ad:a5:d9:49:98:48:81:3f:e9:b7:fa:84:0a:9d:89:
                    ac:07:a0:0b:0f:13:4e:06:17:10:fa:9f:fd:7f:95:
                    fa:bc:87:6c:a8:bf:e3:08:f6:81:59:ad:fb:ac:0c:
                    25:27:fb:34:0f:87:ea:05:ea:e1:39:6b:42:7a:90:
                    65:b9:e3:1e:1f:51:dc:52:c8:92:9c:b4:42:f9:04:
                    2f:90:cc:17:9c:94:e6:a4:aa:5c:0b:3b:a9:b6:c3:
                    79:62:78:00:6f:6c:0d:85:f5:0e:4c:25:92:4b:66:
                    09:77:7e:6d:1e:fa:2c:d7:99:ec:4b:ac:10:ba:4d:
                    bf:d2:ea:bd:0d:16:01:41:c5:c6:6a:17:64:ab:be:
                    bf:09:0b:84:2d:99:9d:b6:b2:4d:a3:f4:9d:98:d4:
                    6d:34:44:74:f6:46:d7:91:91:4b:e4:49:67:11:2b:
                    2e:68:83:95:61:a2:c0:df:d6:ec:32:23:53:20:01:
                    d3:12:e2:0d:c2:00:11:98:7e:32:c7:6e:f9:94:14:
                    77:db:a9:fe:e3:f7:9f:1b:cc:31:41:75:c4:7a:2f:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:4D:D2:44:1C:66:36:2D:DC:02:7F:3D:A0:2F:31:F8:3C:71:AE
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3230382e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:10:ae:ab:8c:17:5f:42:0b:d4:ce:6b:53:ff:5e:76:3a:95:
         18:b4:f3:57:2a:bf:d6:45:e5:ce:8b:27:6b:f9:3a:b3:6d:a0:
         61:7a:a2:4a:ae:22:ab:a9:f1:49:fa:28:71:f3:dc:b4:69:0f:
         23:3d:0c:84:dd:25:f7:72:f7:17:4f:10:36:db:aa:b1:40:4e:
         1c:5f:4c:bb:db:d0:25:0c:6d:3b:ef:f3:28:78:89:c9:b0:a0:
         a2:45:98:ea:13:0a:69:66:2a:36:6c:06:ca:0f:bb:fe:4e:fe:
         e0:26:e3:56:c7:1d:00:98:8a:70:16:78:60:a9:ec:5d:a6:32:
         ca:b1:6d:9d:0c:83:58:1c:35:93:90:b4:0c:f4:42:7d:29:6c:
         b1:c4:e2:30:20:1c:b9:5c:e7:16:c4:66:70:73:87:0f:0e:67:
         32:e6:b7:60:ea:9f:f0:84:9a:d8:81:9c:0c:21:01:ae:91:3a:
         81:ba:22:a8:ea:b8:f8:88:9c:74:39:0d:86:4a:0a:ab:92:be:
         8e:bb:91:1c:0f:6a:da:ca:b7:ce:7b:03:04:74:27:9c:a4:2d:
         2b:c1:07:45:72:c9:e4:b1:b5:4c:7e:6f:3b:92:b9:73:3d:88:
         dc:72:09:2a:99:af:9b:78:17:80:5b:18:e5:e7:da:32:44:c1:
         12:9c:3f:ee
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBD0fldivgMinGKAzf3eZVsYbNc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNTAyMDQxODAwMDFaFw0yNjAyMDMxODA1MDFaMDMxMTAvBgNV
BAMTKEQ3M0Q0REQyNDQxQzY2MzYyRERDMDI3RjNEQTAyRjMxRjgzQzcxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7Fg6WSH5OkLEIMrlniC1OOi6
71/5jpw8KpWnq9Khz00ocyuOW0saxI//462l2UmYSIE/6bf6hAqdiawHoAsPE04G
FxD6n/1/lfq8h2yov+MI9oFZrfusDCUn+zQPh+oF6uE5a0J6kGW54x4fUdxSyJKc
tEL5BC+QzBeclOakqlwLO6m2w3lieABvbA2F9Q5MJZJLZgl3fm0e+izXmexLrBC6
Tb/S6r0NFgFBxcZqF2Srvr8JC4QtmZ22sk2j9J2Y1G00RHT2RteRkUvkSWcRKy5o
g5VhosDf1uwyI1MgAdMS4g3CABGYfjLHbvmUFHfbqf7j958bzDFBdcR6L+fpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1z1N0kQcZjYt3AJ/PaAvMfg8ca4wHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzMjMwMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDv5zQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAnEK6rjBdfQgvUzmtT/152OpUYtPNXKr/WReXO
iydr+TqzbaBheqJKriKrqfFJ+ihx89y0aQ8jPQyE3SX3cvcXTxA226qxQE4cX0y7
29AlDG077/MoeInJsKCiRZjqEwppZio2bAbKD7v+Tv7gJuNWxx0AmIpwFnhgqexd
pjLKsW2dDINYHDWTkLQM9EJ9KWyxxOIwIBy5XOcWxGZwc4cPDmcy5rdg6p/whJrY
gZwMIQGukTqBuiKo6rj4iJx0OQ2GSgqrkr6Ou5EcD2rayrfOewMEdCecpC0rwQdF
csnksbVMfm87krlzPYjccgkqma+beBeAWxjl59oyRMESnD/u
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:14 2025 by rpki-client