Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3232203d3e203236363131.roa
File:                     3139312e3135362e36342e302f32302d3232203d3e203236363131.roa (raw, json)
Hash identifier:          QMyDR3LQItEQESaA02HFtv6q9e7VqMH7n3PGc3n43uA=
Subject key identifier:   7C:96:5D:EF:BE:98:DC:D5:2F:14:E3:44:B3:BA:63:38:14:59:EC:BA
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       2EF2ED07128307CC99E0D7D2B7D5877077C2F767
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3232203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:14 +0000
ROA not before:           Tue 05 Mar 2024 17:56:14 +0000
ROA not after:            Tue 04 Mar 2025 18:01:14 +0000
asID:                     26611
IP address blocks:        191.156.64.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f2:ed:07:12:83:07:cc:99:e0:d7:d2:b7:d5:87:70:77:c2:f7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:14 2024 GMT
            Not After : Mar  4 18:01:14 2025 GMT
        Subject: CN=7C965DEFBE98DCD52F14E344B3BA63381459ECBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2b:86:92:c5:07:d9:57:33:be:fe:17:62:a3:
                    a3:e4:9a:95:d9:28:f0:64:76:50:1f:83:8d:90:34:
                    1f:b2:bc:74:5a:b7:d9:c0:f1:b0:1a:b5:1f:a1:f5:
                    c1:59:d8:27:05:5e:3b:72:a7:e3:68:0d:9c:2b:05:
                    05:15:4e:1f:51:84:3b:41:59:2b:90:73:bb:28:44:
                    b0:9f:15:a9:47:d7:8e:b3:9b:68:30:c8:44:8c:1a:
                    64:e1:57:16:70:b3:ef:2e:0c:f7:66:d2:4e:f5:dc:
                    a6:11:9a:8c:c1:50:dd:d9:dd:d9:a8:b7:62:64:51:
                    52:b8:99:da:59:e2:ec:35:3f:29:e4:fc:66:c0:22:
                    91:6c:7e:7e:ab:9b:8d:73:3f:b0:e0:10:a1:82:1d:
                    86:c9:35:53:4a:a2:63:fa:a7:98:37:03:52:65:57:
                    f0:95:61:b5:d1:dc:a7:5b:68:bd:1a:1c:f1:4a:f1:
                    57:91:a7:ac:2e:fd:04:32:8c:7e:76:25:a0:69:7b:
                    8c:b5:1c:35:eb:43:0b:31:f3:aa:15:d2:bc:b9:d5:
                    79:89:57:b3:02:99:ca:0e:71:fa:fa:cb:c4:72:0c:
                    91:1d:61:56:eb:c1:42:df:6a:92:0c:d5:a5:24:65:
                    59:ad:42:5f:4e:a0:39:b4:ea:5b:e4:1f:3a:51:49:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:5D:EF:BE:98:DC:D5:2F:14:E3:44:B3:BA:63:38:14:59:EC:BA
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3232203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:9e:be:c2:ab:8b:6b:fb:4d:97:a0:92:65:8a:06:41:51:6d:
         9e:49:9c:4c:f9:1d:db:dc:cc:ff:95:73:18:0c:6e:b3:b6:7d:
         9f:39:f6:43:5e:a9:4a:6f:1c:1d:b0:68:e9:ab:d7:cb:48:74:
         a1:90:01:62:02:76:90:0d:d7:a4:60:ed:cd:96:e4:ec:77:b1:
         c1:e3:88:87:5a:07:4e:02:0d:68:a9:6b:78:77:5a:d6:5f:28:
         3d:59:1b:57:07:1d:6c:21:bd:b8:e4:77:3a:4d:3d:44:08:db:
         de:e2:8f:3f:67:23:06:a5:57:56:2a:96:15:7b:ad:e6:e7:5b:
         77:f7:20:72:71:5a:be:c9:d1:5d:2b:d4:86:7d:e1:de:99:7b:
         ee:7e:ee:63:15:b6:92:28:b5:d5:4b:b6:cb:67:1a:50:44:bf:
         a0:73:e6:8d:af:0e:8c:98:a1:a4:94:43:60:d3:90:03:00:e9:
         b6:5d:7c:64:27:fb:25:31:75:a3:03:73:63:d8:cb:6d:a6:ec:
         06:d2:59:39:e8:d6:f5:00:54:6b:56:c2:e5:92:eb:9c:94:cf:
         42:83:ba:c0:7d:27:f7:9d:0b:54:95:a9:9b:18:e0:d3:ab:93:
         98:91:2f:8c:f1:9e:a6:75:15:8f:bb:98:64:3c:91:35:2a:a6:
         75:76:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org