Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa
File:                     3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa (raw, json)
Hash identifier:          GgkxzJL3OLAMxkQ+YiRcJJ4wVyyDg9zM9wxVeBSufys=
Subject key identifier:   72:C9:13:16:B1:48:C2:FF:40:F3:37:49:A9:B7:90:33:BF:D6:1F:AC
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       08DF7153CA5F299D9E127E8C0BDA9D9BBF61C678
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa
Signing time:             Tue 04 Feb 2025 18:05:15 +0000
ROA not before:           Tue 04 Feb 2025 18:00:15 +0000
ROA not after:            Tue 03 Feb 2026 18:05:15 +0000
asID:                     10620
IP address blocks:        191.156.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:df:71:53:ca:5f:29:9d:9e:12:7e:8c:0b:da:9d:9b:bf:61:c6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:15 2025 GMT
            Not After : Feb  3 18:05:15 2026 GMT
        Subject: CN=72C91316B148C2FF40F33749A9B79033BFD61FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4f:be:ba:10:9c:b7:cc:98:da:ef:21:e3:f5:
                    c0:14:2c:ce:41:a6:18:a8:d2:29:16:f5:f1:fb:cf:
                    cf:84:3b:54:dc:51:76:d2:a1:3e:59:1b:8c:ce:b5:
                    7c:71:b2:da:80:0f:10:36:23:d1:81:65:c0:14:a7:
                    9b:f8:6c:e0:e2:3a:39:4d:c8:af:61:96:07:5c:5f:
                    d5:e5:43:e0:25:35:89:5b:9b:e9:c0:1e:f1:05:4b:
                    b6:5a:13:93:9d:16:44:08:23:f2:d3:f6:7b:e4:54:
                    f1:f1:f4:87:33:8a:c3:7f:7e:df:34:d7:f0:52:17:
                    35:72:af:eb:a7:fb:04:f5:7f:8f:b2:09:d0:13:b2:
                    ec:e3:15:7d:d1:98:ca:47:57:ec:34:b2:56:5f:e3:
                    b6:68:05:a4:64:e8:a5:f1:9e:48:5b:fe:d0:f8:37:
                    3b:50:8f:3b:8e:f1:f7:5d:6c:57:97:cb:7d:d5:3e:
                    e9:a3:25:b0:7e:fc:7c:ba:b8:a0:11:b1:cd:6d:2b:
                    0b:e3:d6:27:9c:40:d3:f6:c2:ad:5e:c9:fd:13:93:
                    b5:7a:97:02:c6:07:72:4b:1a:88:fb:e3:1e:56:11:
                    63:f4:c6:b1:0f:5d:bc:86:ec:fe:f3:2e:19:ec:9a:
                    80:0a:55:66:ee:57:c7:1e:ea:b9:3c:d0:4c:57:74:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C9:13:16:B1:48:C2:FF:40:F3:37:49:A9:B7:90:33:BF:D6:1F:AC
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:c3:6e:c6:f2:cd:5c:66:40:d6:3e:6f:f8:98:26:44:dc:
         fc:09:a6:69:1f:48:a5:be:cf:13:12:f7:52:a1:53:fe:d3:97:
         d9:eb:07:bb:99:93:e3:06:36:64:5d:9a:eb:7b:1b:4d:bd:60:
         6e:9b:95:24:13:96:50:cd:ff:7f:fb:9f:d6:1a:b6:b9:cd:ae:
         dc:f7:1d:1d:fa:11:d5:08:7f:94:86:32:fe:f3:43:e6:80:27:
         e8:1f:4d:a1:f7:0a:97:b2:75:04:c2:5b:2c:89:c5:5d:70:8a:
         90:f1:31:72:f2:1b:ab:0f:4f:36:82:4b:67:47:b1:b6:ef:69:
         e5:03:cd:5c:5d:43:5a:9c:cf:5c:8a:01:0b:2d:57:66:b8:a6:
         61:8b:7d:ee:e6:c5:e4:69:4a:96:d1:62:05:43:37:ad:50:8c:
         79:70:87:da:3e:dc:8b:83:c4:55:87:d6:cc:74:e3:a8:0f:98:
         8b:2f:3c:48:30:52:38:a0:98:1e:4a:b4:f2:8e:8e:9e:cf:32:
         b7:31:86:1c:6e:6b:27:ff:ac:2f:0c:62:05:af:50:03:f9:9c:
         56:1a:58:45:ea:32:46:5b:c7:f4:1d:fa:10:e3:12:29:60:04:
         24:65:eb:b1:f5:a1:f2:b1:5e:63:73:87:3d:44:d5:49:ba:2d:
         68:be:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:44 2025 by rpki-client