Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa
File:                     3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa (raw, json)
Hash identifier:          dkM5jQOqQcgCLSDHHtACOCTYEnUjrYe2X21bQXFH37U=
Subject key identifier:   AC:78:4A:54:93:1F:6F:7E:24:B8:68:50:2F:2B:D1:9A:27:82:D2:54
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       3A98A342FE92B6F78418F3CDD8D373B268B17C0D
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:01 +0000
ROA not before:           Tue 05 Mar 2024 17:56:01 +0000
ROA not after:            Tue 04 Mar 2025 18:01:01 +0000
asID:                     26611
IP address blocks:        191.156.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:98:a3:42:fe:92:b6:f7:84:18:f3:cd:d8:d3:73:b2:68:b1:7c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:01 2024 GMT
            Not After : Mar  4 18:01:01 2025 GMT
        Subject: CN=AC784A54931F6F7E24B868502F2BD19A2782D254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:15:76:94:a8:48:9d:4c:da:69:0d:63:2e:
                    c5:a7:d0:51:b1:4d:b7:97:b1:60:e1:9b:f9:d3:3f:
                    b6:2e:fd:7c:68:97:e7:36:2b:88:ba:0a:e2:7d:4e:
                    ee:4c:e7:0f:92:92:a0:8a:6e:0c:4a:bd:a0:d7:ff:
                    43:1b:4c:63:47:02:ad:b2:58:24:26:98:b0:79:b7:
                    21:17:22:6c:c6:9b:73:97:ad:e4:ac:ca:5f:67:f5:
                    df:e8:8b:f0:7b:c6:ce:45:54:a2:54:5e:c1:4a:30:
                    3b:04:2a:b2:00:1a:19:a4:50:a3:c1:dc:4b:1a:b4:
                    33:c1:e2:2d:d0:5b:29:4e:6e:0a:39:f8:b0:78:ba:
                    42:96:98:4c:76:9e:0e:f8:48:75:7a:02:43:7c:1e:
                    30:05:83:60:4b:4a:05:75:7f:94:6c:e9:5c:ef:bb:
                    5b:6d:74:c2:b2:e2:59:1f:ed:75:3a:54:b0:0e:bd:
                    73:73:8e:a5:b4:31:37:16:fa:a2:b4:a9:dc:60:b1:
                    df:0f:52:bd:b8:cd:6f:e8:03:6f:05:fc:0d:58:da:
                    18:05:40:40:78:6c:47:4e:e8:a5:d7:0c:0f:a2:5d:
                    b6:51:36:84:ef:6d:3e:bb:d1:29:f3:a3:3c:08:0f:
                    a4:ad:b3:e7:28:76:d3:1e:22:e7:5a:d7:e7:06:51:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:4A:54:93:1F:6F:7E:24:B8:68:50:2F:2B:D1:9A:27:82:D2:54
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:14:86:15:b2:87:f5:86:50:91:c6:14:6f:a5:a7:d7:58:
         cc:4b:d5:a6:ba:b4:67:56:59:6f:ba:11:d2:a3:7a:15:d9:fe:
         0c:b2:c2:c7:4e:5f:e7:48:40:bc:9f:80:0a:b2:5d:43:44:cb:
         9a:87:9c:67:65:30:83:a5:b2:af:37:0a:32:db:9b:ff:7d:f3:
         e9:ee:66:fc:e9:60:7c:14:20:45:29:4a:3c:07:5c:a0:c4:7a:
         8a:82:bc:bc:0a:1f:70:e3:8f:6a:7c:99:4f:4c:70:97:a0:21:
         a1:de:23:34:31:a1:cd:96:9e:fe:8a:f5:13:ea:b6:25:31:0d:
         7d:11:0e:44:08:c4:47:5e:2a:7a:2c:0d:3d:9d:ee:72:44:96:
         05:47:87:c4:7c:ea:60:08:63:5a:d3:5e:58:d0:1f:49:e0:be:
         f3:83:04:14:f3:fb:63:e4:c8:6c:0c:b3:a6:1a:6d:eb:4c:6e:
         3b:5c:47:57:fb:57:13:d3:a9:98:d6:f4:60:5d:33:46:ee:e7:
         b1:97:c4:dc:64:b5:d9:9b:29:a0:c9:ec:67:43:ae:42:fb:b7:
         1f:8a:09:9d:39:75:89:f1:17:75:77:4e:c9:b7:29:29:04:9e:
         95:9c:2a:5b:80:46:91:d7:d4:f2:ef:ff:43:80:59:fa:88:a9:
         27:5c:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org