Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa
File:                     3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa (raw, json)
Hash identifier:          jxEc+scYZZs7TIl1m3XYhGksiOX/0nYrPu1sIgih+04=
Subject key identifier:   08:CD:E5:82:DD:84:D8:BF:C2:FF:4C:37:D6:33:0B:87:BE:5D:96:90
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       6BA31C2EA9092E437DE5E8CC3518F6438F064DCE
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa
Signing time:             Thu 09 Jan 2025 20:05:00 +0000
ROA not before:           Thu 09 Jan 2025 20:00:00 +0000
ROA not after:            Thu 08 Jan 2026 20:05:00 +0000
asID:                     13489
IP address blocks:        191.103.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:1c:2e:a9:09:2e:43:7d:e5:e8:cc:35:18:f6:43:8f:06:4d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  9 20:00:00 2025 GMT
            Not After : Jan  8 20:05:00 2026 GMT
        Subject: CN=08CDE582DD84D8BFC2FF4C37D6330B87BE5D9690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:46:95:62:3e:4f:b9:e6:2e:66:21:c5:c1:
                    ff:26:f5:b6:b7:ee:2c:4c:9d:e2:f2:36:01:b8:f6:
                    fe:c6:a7:5e:d2:c9:77:d0:ba:30:13:35:20:13:c8:
                    63:14:89:6d:28:87:ee:9e:45:b3:1a:c6:f6:00:b7:
                    3e:4c:87:bf:2d:62:3e:71:75:c1:0b:38:a0:e9:5f:
                    5c:c1:ee:a7:6d:58:a8:65:bf:15:72:6b:e3:07:6e:
                    df:46:8f:05:af:bc:7a:ef:04:2a:28:25:de:f4:e5:
                    04:4e:46:42:03:91:1a:6b:62:d6:db:9b:16:bf:db:
                    60:8c:53:65:46:1c:6c:53:08:5e:1c:73:1b:af:e0:
                    60:62:44:38:9b:7d:f3:67:18:67:57:81:34:d2:f9:
                    52:d1:57:76:e8:b1:e7:4a:aa:52:bc:bf:d7:6e:b8:
                    77:7a:c9:ea:f2:81:28:f1:08:09:88:34:10:d1:58:
                    8c:42:69:de:71:a8:81:e8:ac:dd:14:48:b0:08:29:
                    d6:a6:61:59:03:e1:35:49:d1:3e:fe:bb:a9:e5:75:
                    89:a7:35:59:85:85:5e:c4:50:0d:75:23:1e:58:a0:
                    bd:bd:70:1a:d9:4d:f8:3d:b0:d6:39:e7:df:e3:47:
                    a6:5d:49:33:20:95:4c:b0:a8:df:77:94:11:d1:a4:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:E5:82:DD:84:D8:BF:C2:FF:4C:37:D6:33:0B:87:BE:5D:96:90
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a0:76:65:ae:d0:f3:85:be:7e:b0:29:0a:23:8d:67:41:d1:5d:
         67:31:40:dc:f4:a6:37:a1:1a:51:57:19:06:2c:0d:3d:34:42:
         51:f3:56:4e:94:6c:fd:7d:5a:e1:7b:f1:2e:e7:3d:13:df:9e:
         a4:bf:d5:ef:67:b2:e8:f7:aa:db:73:98:36:c3:89:ab:0b:6c:
         75:0d:fb:07:c1:e2:e0:fc:36:60:66:2c:82:17:57:77:8d:73:
         8f:79:ed:eb:71:e7:2a:dc:e0:4c:7f:f3:1c:d3:be:9e:e4:3a:
         46:03:e3:83:01:ec:66:4c:ed:4b:86:ac:5d:86:f2:20:17:ad:
         12:13:e9:e9:88:10:df:ca:76:f0:ec:e8:99:7e:61:af:b4:c9:
         1c:62:97:3f:17:ac:22:02:07:c6:06:fe:bd:ff:23:2e:38:79:
         32:ec:cb:a5:f2:61:da:7d:4f:46:c8:04:a3:f1:40:27:ba:d7:
         a4:f9:ff:f8:74:b3:4f:44:01:ec:13:af:64:1f:1b:11:d2:4a:
         61:50:16:15:ef:c3:d8:9c:db:29:c8:58:37:9b:ce:5a:d5:61:
         ed:4a:8d:af:f7:17:ea:94:f3:c5:d9:6d:6a:4d:ca:f6:85:f7:
         83:86:41:43:3e:b0:c8:70:87:7c:00:3b:c8:ae:e7:51:ac:d9:
         43:46:de:88
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUa6McLqkJLkN95ejMNRj2Q48GTc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNTAxMDkyMDAwMDBaFw0yNjAxMDgyMDA1MDBaMDMxMTAvBgNV
BAMTKDA4Q0RFNTgyREQ4NEQ4QkZDMkZGNEMzN0Q2MzMwQjg3QkU1RDk2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWkaVYj5PueYuZiHFwf8m9ba3
7ixMneLyNgG49v7Gp17SyXfQujATNSATyGMUiW0oh+6eRbMaxvYAtz5Mh78tYj5x
dcELOKDpX1zB7qdtWKhlvxVya+MHbt9GjwWvvHrvBCooJd705QRORkIDkRprYtbb
mxa/22CMU2VGHGxTCF4ccxuv4GBiRDibffNnGGdXgTTS+VLRV3bosedKqlK8v9du
uHd6yerygSjxCAmINBDRWIxCad5xqIHorN0USLAIKdamYVkD4TVJ0T7+u6nldYmn
NVmFhV7EUA11Ix5YoL29cBrZTfg9sNY559/jR6ZdSTMglUywqN93lBHRpKPbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCM3lgt2E2L/C/0w31jMLh75dlpAwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMTJlMzEzMDMzMmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMTM3MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHv2eA
MA0GCSqGSIb3DQEBCwUAA4IBAQCgdmWu0POFvn6wKQojjWdB0V1nMUDc9KY3oRpR
VxkGLA09NEJR81ZOlGz9fVrhe/Eu5z0T356kv9XvZ7Lo96rbc5g2w4mrC2x1DfsH
weLg/DZgZiyCF1d3jXOPee3rcecq3OBMf/Mc076e5DpGA+ODAexmTO1LhqxdhvIg
F60SE+npiBDfynbw7OiZfmGvtMkcYpc/F6wiAgfGBv69/yMuOHky7Mul8mHafU9G
yASj8UAnutek+f/4dLNPRAHsE69kHxsR0kphUBYV78PYnNspyFg3m85a1WHtSo2v
9xfqlPPF2W1qTcr2hfeDhkFDPrDIcId8ADvIrudRrNlDRt6I
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:10 2025 by rpki-client