Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3234203d3e203236363131.roa
File:                     3139312e3135362e39362e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          ErjZG691MdPkvzZ/T2BeMHSQ96Zi0aGREFJ5j88X7TI=
Subject key identifier:   21:3A:E0:D4:E5:C8:17:38:C5:73:3F:67:70:61:45:81:76:7C:20:72
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       45089DD97E6DD491098236DFD1D77B08068BAE3B
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:08 +0000
ROA not before:           Tue 04 Feb 2025 18:00:08 +0000
ROA not after:            Tue 03 Feb 2026 18:05:08 +0000
asID:                     26611
IP address blocks:        191.156.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:08:9d:d9:7e:6d:d4:91:09:82:36:df:d1:d7:7b:08:06:8b:ae:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:08 2025 GMT
            Not After : Feb  3 18:05:08 2026 GMT
        Subject: CN=213AE0D4E5C81738C5733F6770614581767C2072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:5b:d3:a2:13:3d:a9:7e:86:d8:4b:8c:d7:
                    61:10:04:36:8f:da:1c:d3:5f:7a:5e:74:23:f6:49:
                    09:30:f3:21:0a:62:81:f1:0e:27:86:3d:27:c7:bb:
                    ca:f1:eb:2f:d0:65:d2:22:08:0e:57:7b:57:a2:84:
                    96:15:84:6b:7e:58:b4:ad:38:a4:c9:06:12:cd:d9:
                    94:91:34:9c:79:4c:69:28:0c:0c:ce:aa:03:e2:cb:
                    14:c1:ad:48:c6:e0:ec:8c:e2:22:20:de:bb:23:36:
                    01:b8:8e:f1:08:c8:b8:22:42:8d:6e:61:e1:8d:5e:
                    79:95:ab:20:aa:75:fc:e3:48:4f:bc:01:58:e3:41:
                    c1:80:cf:a6:07:7d:17:3a:41:b7:5e:95:cb:fa:f5:
                    b2:9d:4a:7e:58:b9:94:31:20:78:fb:a8:cf:a5:f4:
                    f5:11:0d:65:43:63:f1:3c:ef:0d:e9:a9:db:60:f0:
                    4e:51:b4:e6:7c:75:1e:50:f3:32:11:b6:cc:c7:84:
                    d1:20:1f:71:02:19:01:93:b5:d5:31:14:ef:09:5b:
                    1d:a5:60:a9:36:36:dc:44:1d:e3:47:82:43:54:15:
                    9e:b4:bf:cb:6f:ab:08:31:84:70:51:e1:d3:22:95:
                    6a:2a:1c:b6:a6:83:67:38:ab:fa:a7:68:c3:19:69:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3A:E0:D4:E5:C8:17:38:C5:73:3F:67:70:61:45:81:76:7C:20:72
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:5b:b3:f7:97:21:44:bd:06:64:81:b3:68:6b:6c:5d:a6:a5:
         3b:15:a1:bf:61:d0:20:9c:c0:4c:f5:ef:9b:b5:30:dd:f3:8d:
         dc:90:00:98:10:a1:41:23:15:bc:f9:50:17:f3:2c:f6:03:ed:
         7e:31:e3:0b:cb:3a:84:28:c9:fd:ce:fc:9c:1f:ef:0a:71:5c:
         a5:1f:12:3c:a5:ce:82:70:44:d9:a0:46:f4:2e:ad:e5:63:06:
         3b:43:e2:70:b0:62:aa:55:e7:e8:1e:5e:f5:49:80:bd:fa:44:
         11:f0:a7:24:f2:96:40:70:98:7e:55:43:bf:37:fc:e3:ed:7d:
         26:7b:1e:63:e0:1b:d3:20:e2:45:80:5e:eb:6b:a5:7d:89:a2:
         30:2d:5b:24:e6:f6:84:d8:8d:a2:fa:cd:db:74:ca:d1:c7:de:
         13:51:74:af:d3:3e:61:86:b6:c0:04:bc:7e:94:57:d8:ab:4f:
         66:4e:c1:23:4e:e2:cb:ce:6d:48:60:f7:e3:45:10:d5:aa:9c:
         aa:24:54:47:1d:6b:c9:65:a3:a7:bc:27:8a:01:41:fd:cb:07:
         6d:38:b1:32:f6:21:a4:9c:a5:ae:b3:9c:6e:40:a4:8d:13:ec:
         1b:3b:79:87:59:c6:17:bc:2b:33:37:56:96:e3:e8:ff:6f:d3:
         1b:93:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:46 2025 by rpki-client