Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3234203d3e203236363131.roa
File:                     3139312e3135362e36342e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          HtRh2zwp7GUQiiMV3T1qGZh63G50SK2VfSQuLXtxMKU=
Subject key identifier:   91:F3:33:31:21:53:A3:30:AA:8A:EB:F6:65:5D:D8:F2:E7:FC:CC:A0
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       36F840938ADAE44641520E6F7821C705C41AE2A8
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:13 +0000
ROA not before:           Tue 04 Feb 2025 18:00:13 +0000
ROA not after:            Tue 03 Feb 2026 18:05:13 +0000
asID:                     26611
IP address blocks:        191.156.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f8:40:93:8a:da:e4:46:41:52:0e:6f:78:21:c7:05:c4:1a:e2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:13 2025 GMT
            Not After : Feb  3 18:05:13 2026 GMT
        Subject: CN=91F333312153A330AA8AEBF6655DD8F2E7FCCCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:aa:13:f8:6f:42:ad:33:03:eb:fc:2f:a6:
                    83:e8:68:f0:01:04:e4:88:66:8b:c9:67:10:b1:b1:
                    d4:66:bd:18:83:35:94:d2:76:99:86:1b:ca:9c:bf:
                    15:04:16:7d:2f:23:5c:4c:14:99:46:d6:48:ae:db:
                    73:26:5a:72:30:98:12:68:2f:a0:f7:85:4e:aa:68:
                    93:a2:58:21:a9:97:18:84:86:a4:5b:40:fd:0d:69:
                    74:1d:2a:bf:de:45:cf:51:e2:8e:20:6d:17:e9:3a:
                    00:cc:ca:e1:97:fd:4c:0d:8c:54:e2:c0:5d:cb:cb:
                    75:4f:d1:67:1d:4a:7b:9b:3c:67:af:a0:b1:23:cb:
                    31:9b:da:44:c7:36:7e:89:af:5f:80:e3:e1:21:44:
                    3c:69:e4:e9:b0:01:c0:f8:f2:af:12:a1:70:ce:cd:
                    ef:b9:f6:29:7e:00:19:77:eb:64:31:0b:c8:80:b4:
                    19:7b:ad:21:7b:fd:91:a3:63:65:0b:43:18:89:46:
                    61:76:4d:63:67:4f:83:63:ae:86:ff:ee:1b:cf:ec:
                    52:43:99:4b:26:24:d3:c0:a1:46:b4:b5:72:07:c1:
                    be:a3:a5:0a:3f:f6:73:37:44:63:ec:45:c0:39:eb:
                    52:6a:80:4e:03:4f:7b:08:b8:d3:06:32:39:14:42:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F3:33:31:21:53:A3:30:AA:8A:EB:F6:65:5D:D8:F2:E7:FC:CC:A0
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:01:09:9a:a0:1a:e8:42:e8:94:ca:44:f0:0c:d8:e6:08:97:
         12:a6:b5:df:01:ef:8d:6c:fd:38:36:5c:f9:95:c2:bd:69:10:
         e1:15:ab:03:c7:6c:ef:1d:3d:3f:5b:b5:68:97:fa:8a:0b:c3:
         aa:37:5a:d8:e5:38:d2:52:aa:bb:74:61:7a:86:5d:fa:8b:53:
         69:8f:c6:dc:0a:6f:c1:d2:bd:b2:90:b3:d5:9f:07:0a:80:0a:
         27:28:02:e0:0f:bd:1e:41:58:cb:82:72:ec:33:55:50:bd:66:
         0f:93:74:60:c6:af:34:43:cc:c1:b5:d3:52:0c:c6:55:f1:d5:
         1f:a4:9b:20:2e:8a:5c:ec:5b:00:79:fd:99:90:2d:a6:36:f8:
         5b:0e:70:62:3e:a9:b5:1f:f3:fd:d1:d2:fa:e9:8e:78:e0:4d:
         fa:ba:39:88:70:09:2a:21:c3:6e:39:24:76:89:56:df:bc:86:
         fb:90:84:04:00:21:92:80:b1:ca:a0:4c:c7:9e:fb:e2:53:77:
         43:62:a3:dd:d5:79:ce:5d:4d:9f:56:90:93:52:6d:1b:92:11:
         e8:50:8a:68:dc:f0:c8:44:5c:b8:58:0e:3a:70:51:c8:d3:c2:
         65:81:2b:43:f7:bb:96:38:5f:43:ac:32:ad:ce:10:57:13:ed:
         d8:eb:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:17 2025 by rpki-client