Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa
File:                     3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa (raw, json)
Hash identifier:          6/GEUfhY6yNWrOneE96KvIp3ffRPuO6qZIjYmZ+twRc=
Subject key identifier:   9E:1B:88:F7:22:82:E2:A8:42:6C:01:6C:CD:24:06:35:3C:C0:21:A9
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       746239A5E809DA46AF5FDE6ACC6DB0567E70ABD1
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa
Signing time:             Tue 05 Mar 2024 18:01:14 +0000
ROA not before:           Tue 05 Mar 2024 17:56:14 +0000
ROA not after:            Tue 04 Mar 2025 18:01:14 +0000
asID:                     10620
IP address blocks:        191.156.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:39:a5:e8:09:da:46:af:5f:de:6a:cc:6d:b0:56:7e:70:ab:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:14 2024 GMT
            Not After : Mar  4 18:01:14 2025 GMT
        Subject: CN=9E1B88F72282E2A8426C016CCD2406353CC021A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:a5:85:f7:6f:d9:78:b2:2c:7c:d3:f0:82:
                    c1:ec:2b:f9:0b:b1:cc:45:56:3b:67:88:cd:6b:7e:
                    be:02:4c:da:59:41:00:82:c9:35:9c:af:e6:ea:23:
                    c3:5c:d4:c1:44:26:60:97:37:c9:64:4a:32:7e:64:
                    92:95:95:cc:7f:e2:88:26:51:e3:d8:18:2c:36:91:
                    a2:f0:6b:f8:38:5f:28:a9:6d:5b:70:84:18:ae:16:
                    77:ac:13:4c:8f:ab:87:e7:fa:67:83:3a:16:b9:02:
                    5b:b5:dc:03:00:dd:ed:48:9e:ad:74:34:0b:60:5a:
                    4e:05:d1:64:9b:64:83:5d:d2:ff:4c:6b:46:7e:4d:
                    8a:7c:47:67:7e:ed:46:17:4f:57:27:4f:90:21:61:
                    28:9e:29:77:df:43:97:93:f7:38:3b:20:c0:a3:30:
                    a4:f7:a8:44:63:e5:f5:51:91:0e:28:02:7e:e0:c6:
                    2d:e1:76:21:77:a4:d9:5a:43:ad:55:bf:05:e9:0c:
                    4d:30:2c:b9:45:86:5d:f2:8d:e1:5f:a1:d8:01:f6:
                    78:32:18:59:0e:3e:a5:de:31:2e:ca:a6:a9:39:f9:
                    30:89:08:31:a3:35:50:fd:01:a5:1d:be:be:d8:ce:
                    1d:0f:27:2b:22:2e:98:21:87:9c:f7:01:18:f4:66:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1B:88:F7:22:82:E2:A8:42:6C:01:6C:CD:24:06:35:3C:C0:21:A9
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f4:05:15:20:35:b0:bf:80:e1:14:bc:bc:a9:d5:5b:1a:64:
         7c:ef:17:97:84:cd:d5:33:3a:72:9b:4a:4b:c8:ab:50:ae:76:
         60:38:6f:d9:29:25:9d:98:47:cf:92:31:33:4e:96:ee:9a:1c:
         f8:29:0f:3d:e9:e8:8d:49:98:c5:39:6b:e6:02:35:61:20:de:
         02:6b:67:8b:d9:5c:55:43:06:dd:5d:25:cb:52:3d:d9:44:4a:
         f4:5a:41:c0:4f:44:ce:fe:13:04:bc:9d:c1:d7:ef:25:cb:e7:
         3c:5c:e3:e9:57:11:a1:ca:52:c7:ae:a0:0b:fd:a4:92:f1:7b:
         a6:a5:39:52:6f:80:b3:1d:89:47:b3:2d:89:58:47:cc:da:1b:
         c7:04:6e:39:c5:d1:02:f8:d3:68:fd:81:70:34:27:f9:36:4d:
         1c:c4:17:9a:67:8f:d3:b9:30:65:31:36:df:09:d7:e0:c5:e9:
         e4:fe:95:4c:ae:d7:3b:fb:c6:34:f5:60:3c:19:20:fa:49:62:
         fc:d6:8c:f7:e0:92:9e:1c:80:11:c0:b3:5f:ee:f2:7f:c1:68:
         78:35:da:bb:2b:0f:29:a8:dc:8a:ad:ec:1e:4c:12:91:b4:e6:
         2c:a9:84:93:47:0b:0a:60:9f:d6:d6:6e:d8:a2:02:87:93:b9:
         ed:55:cd:1d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdGI5pegJ2kavX95qzG2wVn5wq9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MTRaFw0yNTAzMDQxODAxMTRaMDMxMTAvBgNV
BAMTKDlFMUI4OEY3MjI4MkUyQTg0MjZDMDE2Q0NEMjQwNjM1M0NDMDIxQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBqWF92/ZeLIsfNPwgsHsK/kL
scxFVjtniM1rfr4CTNpZQQCCyTWcr+bqI8Nc1MFEJmCXN8lkSjJ+ZJKVlcx/4ogm
UePYGCw2kaLwa/g4XyipbVtwhBiuFnesE0yPq4fn+meDOha5Alu13AMA3e1Inq10
NAtgWk4F0WSbZINd0v9Ma0Z+TYp8R2d+7UYXT1cnT5AhYSieKXffQ5eT9zg7IMCj
MKT3qERj5fVRkQ4oAn7gxi3hdiF3pNlaQ61VvwXpDE0wLLlFhl3yjeFfodgB9ngy
GFkOPqXeMS7Kpqk5+TCJCDGjNVD9AaUdvr7Yzh0PJysiLpghh5z3ARj0Zmt9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnhuI9yKC4qhCbAFszSQGNTzAIakwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzMjMxMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMwMzYzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv5zX
MA0GCSqGSIb3DQEBCwUAA4IBAQAK9AUVIDWwv4DhFLy8qdVbGmR87xeXhM3VMzpy
m0pLyKtQrnZgOG/ZKSWdmEfPkjEzTpbumhz4KQ896eiNSZjFOWvmAjVhIN4Ca2eL
2VxVQwbdXSXLUj3ZREr0WkHAT0TO/hMEvJ3B1+8ly+c8XOPpVxGhylLHrqAL/aSS
8XumpTlSb4CzHYlHsy2JWEfM2hvHBG45xdEC+NNo/YFwNCf5Nk0cxBeaZ4/TuTBl
MTbfCdfgxenk/pVMrtc7+8Y09WA8GSD6SWL81oz34JKeHIARwLNf7vJ/wWh4Ndq7
Kw8pqNyKreweTBKRtOYsqYSTRwsKYJ/W1m7YogKHk7ntVc0d
-----END CERTIFICATE-----
Generated at Mon Jun 24 23:49:25 2024 by rpki-client on console-fra.rpki-client.org