Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3232203d3e203236363131.roa
File:                     3139312e3135362e33322e302f31392d3232203d3e203236363131.roa (raw, json)
Hash identifier:          hx0GM3mAA6p7MvsksvVQ4ZCv5TEg83IT0nQOg0HzPVg=
Subject key identifier:   E5:00:47:2B:EC:3C:87:F0:DD:F6:59:7B:4F:E5:8D:51:09:9E:00:0E
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       2550EA893FC2873E235532A19AD8D41A59D1C72B
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3232203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:15 +0000
ROA not before:           Tue 05 Mar 2024 17:56:15 +0000
ROA not after:            Tue 04 Mar 2025 18:01:15 +0000
asID:                     26611
IP address blocks:        191.156.32.0/19 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:50:ea:89:3f:c2:87:3e:23:55:32:a1:9a:d8:d4:1a:59:d1:c7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:15 2024 GMT
            Not After : Mar  4 18:01:15 2025 GMT
        Subject: CN=E500472BEC3C87F0DDF6597B4FE58D51099E000E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:b1:bb:8e:ff:94:c3:0a:bc:2d:f5:38:48:
                    3d:48:15:52:77:90:3e:7f:4c:a4:92:bb:fd:0b:70:
                    cf:b2:9d:89:d3:13:58:6f:3c:65:0d:04:9b:4c:ca:
                    d4:00:b3:3b:8e:c6:82:3b:a9:d4:45:93:ff:6c:25:
                    f9:72:ff:a5:85:00:92:de:3d:6b:1c:1a:2c:c9:1b:
                    3a:0a:9f:8c:f8:2e:5f:6a:a2:d4:ec:ff:ed:11:d7:
                    82:e3:24:ca:fa:c8:2b:77:dd:08:90:ae:8a:09:94:
                    45:36:c5:5a:8f:d6:dc:f4:02:4c:0c:55:ce:d9:dd:
                    c9:8d:d1:59:92:f0:2e:34:8b:2c:05:fe:59:82:2a:
                    d2:2f:e8:aa:85:2b:26:6d:a4:54:fa:d0:08:cf:d5:
                    0f:85:9f:2c:5f:8a:0f:61:4d:db:c5:9c:9d:21:b7:
                    09:c2:41:fa:2e:a3:e2:1b:e8:1e:b4:aa:f1:f9:fb:
                    7a:3e:c3:71:ee:6d:2b:20:83:b4:49:24:7d:87:d1:
                    62:d7:91:d0:cd:33:5c:8c:cf:74:86:9f:f2:4c:2a:
                    3d:d0:c6:8c:b9:d8:76:c2:56:f5:54:9a:19:20:3a:
                    80:d7:f5:88:eb:48:25:df:24:22:1d:a5:88:b9:37:
                    d8:94:c7:be:3b:ed:da:47:22:d0:da:95:88:48:a9:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:00:47:2B:EC:3C:87:F0:DD:F6:59:7B:4F:E5:8D:51:09:9E:00:0E
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3232203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:76:03:ba:94:bf:68:f6:7e:12:1c:ca:33:8d:f0:1c:c1:e0:
         70:f2:7d:86:f3:fd:37:a4:76:9e:31:04:f1:b9:a9:12:ce:1d:
         34:65:ee:bd:dd:b3:84:e6:3f:60:28:d7:67:78:b5:49:b1:ad:
         b9:d9:4e:cf:7c:02:f6:4d:f2:ad:00:fa:a5:ba:58:03:79:db:
         14:b7:90:db:54:b2:63:47:cb:81:79:00:3b:55:fb:9b:82:d1:
         09:63:53:60:73:cb:81:62:dc:0e:57:60:14:87:1a:3c:37:b5:
         92:b5:62:51:fc:43:fe:26:16:f5:6c:d1:3d:0a:4e:92:b3:13:
         62:bd:59:de:6f:3e:c7:33:44:2a:2a:17:f7:c1:d9:38:2b:63:
         80:ca:35:49:4c:02:bb:b5:4b:75:e8:40:f1:51:2a:41:48:f3:
         b6:87:0e:d3:e1:fc:eb:15:07:01:2f:37:ff:15:13:f5:57:0c:
         34:68:45:07:fb:94:66:3d:d1:3a:07:08:46:8d:21:d1:4f:e6:
         97:79:db:f6:df:9b:c1:6f:2a:0e:ea:7d:08:a1:4a:e1:62:0c:
         8e:7f:33:c0:20:60:cd:c5:25:2a:09:25:53:0a:24:23:79:f3:
         c8:e9:ca:76:05:60:5c:d6:f3:f5:73:5f:16:30:72:35:d9:85:
         0a:29:67:a5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJVDqiT/Chz4jVTKhmtjUGlnRxyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MTVaFw0yNTAzMDQxODAxMTVaMDMxMTAvBgNV
BAMTKEU1MDA0NzJCRUMzQzg3RjBEREY2NTk3QjRGRTU4RDUxMDk5RTAwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfbG7jv+Uwwq8LfU4SD1IFVJ3
kD5/TKSSu/0LcM+ynYnTE1hvPGUNBJtMytQAszuOxoI7qdRFk/9sJfly/6WFAJLe
PWscGizJGzoKn4z4Ll9qotTs/+0R14LjJMr6yCt33QiQrooJlEU2xVqP1tz0AkwM
Vc7Z3cmN0VmS8C40iywF/lmCKtIv6KqFKyZtpFT60AjP1Q+Fnyxfig9hTdvFnJ0h
twnCQfouo+Ib6B60qvH5+3o+w3HubSsgg7RJJH2H0WLXkdDNM1yMz3SGn/JMKj3Q
xoy52HbCVvVUmhkgOoDX9YjrSCXfJCIdpYi5N9iUx7477dpHItDalYhIqS9LAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5QBHK+w8h/Dd9ll7T+WNUQmeAA4wHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzMzMyMmUz
MDJmMzEzOTJkMzIzMjIwM2QzZTIwMzIzNjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb+cIDAN
BgkqhkiG9w0BAQsFAAOCAQEANnYDupS/aPZ+EhzKM43wHMHgcPJ9hvP9N6R2njEE
8bmpEs4dNGXuvd2zhOY/YCjXZ3i1SbGtudlOz3wC9k3yrQD6pbpYA3nbFLeQ21Sy
Y0fLgXkAO1X7m4LRCWNTYHPLgWLcDldgFIcaPDe1krViUfxD/iYW9WzRPQpOkrMT
Yr1Z3m8+xzNEKioX98HZOCtjgMo1SUwCu7VLdehA8VEqQUjztocO0+H86xUHAS83
/xUT9VcMNGhFB/uUZj3ROgcIRo0h0U/ml3nb9t+bwW8qDup9CKFK4WIMjn8zwCBg
zcUlKgklUwokI3nzyOnKdgVgXNbz9XNfFjByNdmFCilnpQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org