Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234302e302f32342d3234203d3e203237383839.roa
File:                     3139302e37362e3234302e302f32342d3234203d3e203237383839.roa (raw, json)
Hash identifier:          psX6M0B10WXQUdgNdlEXUypLrg745Pdwz0fMEXkEnaA=
Subject key identifier:   32:A8:16:29:07:19:D4:89:55:7B:79:FD:B3:DE:E4:D1:89:0E:17:AE
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       2C61664E0FB36DEDBEA78D7D9EC97AF5962A4663
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234302e302f32342d3234203d3e203237383839.roa
Signing time:             Tue 05 Mar 2024 18:15:07 +0000
ROA not before:           Tue 05 Mar 2024 18:10:07 +0000
ROA not after:            Tue 04 Mar 2025 18:15:07 +0000
asID:                     27889
IP address blocks:        190.76.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:61:66:4e:0f:b3:6d:ed:be:a7:8d:7d:9e:c9:7a:f5:96:2a:46:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:07 2024 GMT
            Not After : Mar  4 18:15:07 2025 GMT
        Subject: CN=32A816290719D489557B79FDB3DEE4D1890E17AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:81:d9:ff:de:6c:2e:49:b7:bf:5e:d0:1d:
                    a8:20:b3:eb:9a:03:7e:92:db:c1:76:68:49:2f:94:
                    a9:19:b1:ff:d2:91:ad:09:2d:95:5b:d5:62:19:06:
                    d7:a1:99:2d:17:d3:81:ca:c1:1b:74:af:f1:fb:ce:
                    41:06:78:f3:14:07:95:68:13:c1:68:0d:39:fa:89:
                    70:68:3f:ac:44:e6:fc:c9:30:4b:37:86:80:bf:c6:
                    83:95:08:87:5b:16:ba:92:17:87:9f:96:7b:24:fd:
                    39:6e:e8:1d:a1:b7:9f:58:c6:2c:b0:bf:29:27:5f:
                    4b:76:93:96:c6:5b:1f:c1:cf:4b:4d:47:55:1d:87:
                    ea:c6:91:b2:d6:61:81:a5:82:45:e4:e0:2a:08:6a:
                    63:37:71:6c:37:11:b1:ea:4a:0f:73:35:4d:a9:0c:
                    27:47:51:8b:36:e5:e2:93:a1:30:b3:f8:9d:e0:e7:
                    62:9c:1a:5f:b0:11:77:77:5c:d0:ba:a0:93:d6:60:
                    8e:ea:17:ef:44:3b:44:f8:83:8d:8c:df:b1:9c:f6:
                    71:ab:e4:ed:14:a7:4d:71:ec:ce:6d:92:8f:f3:a1:
                    1d:76:e8:f3:18:1b:87:93:1b:27:55:3d:22:b2:23:
                    72:73:b9:15:06:ce:d4:3e:85:83:bf:08:af:a1:48:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:16:29:07:19:D4:89:55:7B:79:FD:B3:DE:E4:D1:89:0E:17:AE
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234302e302f32342d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:51:a8:34:89:77:89:39:a7:3d:57:19:70:c2:cc:8a:66:
         8a:ee:71:57:c4:fd:1d:dc:0f:5b:ad:83:f1:21:da:96:62:17:
         30:90:f5:dd:79:4c:bd:16:1c:fd:2b:bc:7d:a5:12:da:c8:48:
         5a:db:c3:ba:10:e4:ed:cc:78:e8:62:78:74:03:0f:3b:96:6d:
         af:48:43:69:f0:9c:d2:82:41:51:c3:fa:ff:4d:be:d6:0e:de:
         06:8a:2c:f8:bf:61:18:86:9f:b4:12:4d:52:f9:90:ba:ab:86:
         55:9e:94:54:55:ce:d6:fd:d9:dd:d7:2b:98:bd:5c:6c:94:c7:
         7a:76:93:aa:5e:f7:10:66:0a:1f:da:6e:62:c9:20:e8:e4:f5:
         cb:0e:48:42:6e:66:14:ee:a2:10:a6:4a:4c:e3:05:b9:f8:1e:
         cf:c6:71:68:94:e9:25:f3:02:a0:be:79:83:0a:4a:6c:65:ff:
         40:a1:b0:0b:5c:03:ec:83:5a:6a:ee:c7:c1:5b:8f:d3:81:b7:
         94:77:f4:fe:eb:a0:f3:b5:59:d5:44:42:a0:69:84:6d:2b:a6:
         ad:39:c2:fd:2b:40:54:3f:0e:f4:4d:6d:c6:82:cc:76:57:89:
         21:72:cf:a4:72:59:ee:8f:9c:a5:a2:ce:2c:ab:79:c6:81:7e:
         b1:55:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org