Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3234203d3e203236363131.roa
File:                     3139312e3135362e33322e302f31392d3234203d3e203236363131.roa (raw, json)
Hash identifier:          flLI3RSI1kClgVAPiGgS26+jx2djyVZnU41Gw3QjhJs=
Subject key identifier:   BD:FE:54:08:9B:28:D9:BF:D6:C8:87:56:0B:29:AE:ED:01:7E:35:66
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       602D7C9C4CFB4FC72FF545B3768A561ECD990AD3
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:04 +0000
ROA not before:           Tue 05 Mar 2024 17:56:04 +0000
ROA not after:            Tue 04 Mar 2025 18:01:04 +0000
asID:                     26611
IP address blocks:        191.156.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2d:7c:9c:4c:fb:4f:c7:2f:f5:45:b3:76:8a:56:1e:cd:99:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:04 2024 GMT
            Not After : Mar  4 18:01:04 2025 GMT
        Subject: CN=BDFE54089B28D9BFD6C887560B29AEED017E3566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:96:63:0c:8b:03:4d:d3:f3:0d:28:65:f7:
                    e2:c1:25:d4:c2:06:4a:d0:74:39:cb:01:6e:3a:91:
                    23:fb:1a:98:de:7f:a6:5e:5a:87:f3:b6:f6:07:42:
                    78:a2:9a:90:17:80:1c:28:70:b3:d1:32:58:f8:39:
                    1a:37:7f:93:ba:37:40:d8:24:c3:4c:38:e7:59:aa:
                    6e:14:9a:f5:cc:4a:88:5b:65:eb:81:94:2f:5d:87:
                    25:6c:52:0c:d3:f1:e0:3e:7e:66:54:60:bb:fd:c1:
                    d8:7c:07:3b:aa:ce:db:72:59:5e:25:ed:c6:5e:41:
                    6c:f4:da:ad:cd:fa:b5:ad:73:38:3d:26:7c:65:39:
                    04:2c:52:8d:21:cd:ce:be:31:7c:8d:80:b0:38:62:
                    aa:86:2b:6f:1b:d9:31:b4:98:7e:dd:0a:c1:34:4c:
                    4c:d4:b0:03:dc:36:09:7e:1a:f5:61:43:ef:f7:74:
                    c5:73:ba:d2:57:71:aa:92:83:61:4d:7f:3c:62:c4:
                    d9:f8:dc:aa:55:38:c9:69:46:3d:c2:c5:d5:f1:d9:
                    2e:e5:ea:36:98:67:a7:bc:78:6b:79:72:6b:97:80:
                    60:4b:96:21:57:6b:53:a4:ad:c0:a1:95:8f:f3:0e:
                    9c:fc:55:18:25:90:e1:e9:3f:1a:84:0c:3e:c7:aa:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FE:54:08:9B:28:D9:BF:D6:C8:87:56:0B:29:AE:ED:01:7E:35:66
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:ae:3e:ad:78:86:7f:f9:ee:af:f2:00:f4:77:c7:76:c3:
         fe:cb:54:47:d5:ef:f3:69:9d:c8:70:82:f3:13:27:50:70:34:
         08:f1:02:b8:8d:bc:b5:42:4a:50:49:fa:b8:82:57:25:c4:53:
         59:b4:33:9a:0c:9f:05:01:d1:6c:8f:b7:d9:f1:ba:d8:de:d6:
         19:58:cb:d8:c7:c2:b4:d4:58:56:a4:e8:36:bd:12:fb:e0:6d:
         bf:b6:df:63:37:a1:b2:1a:f5:0b:89:d0:20:86:7f:5e:46:9f:
         cb:dd:92:2c:ac:26:ef:57:49:1c:8d:52:7f:22:38:90:45:6f:
         8c:d0:7e:5f:99:1b:e3:ff:e8:a4:07:0f:41:49:26:54:4b:8f:
         d9:4d:07:09:9b:67:d9:5d:8a:3b:9b:f0:d5:10:a4:c3:2e:97:
         57:3e:f5:c9:f1:0e:4d:a8:32:65:a6:4b:73:b8:60:2a:38:85:
         4f:f4:b5:9c:93:0d:a9:19:e9:7c:3f:5e:20:d0:a3:61:fd:cc:
         3e:09:dc:e8:0a:58:57:60:58:f7:ee:ec:fe:0e:6b:77:72:9f:
         f7:27:de:8e:08:64:15:b4:13:d3:94:83:01:b9:62:02:a5:51:
         5a:f6:66:13:35:29:b0:04:c9:6f:30:0a:ed:d5:b5:53:ea:f3:
         79:c4:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:44:54 2024 by rpki-client on console-fra.rpki-client.org