Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130322e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3130322e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          jnQB5IuJRxUgISyqd/MuBC/VbuO58GwjgbJcdBEyKXc=
Subject key identifier:   35:10:47:F7:E4:24:D5:CF:B7:B5:E8:0C:54:37:6A:BB:EA:3B:BF:1D
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       683D3C6376C187E4A9428E313854363309D2CB9E
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130322e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:34 +0000
ROA not before:           Tue 05 Mar 2024 18:09:34 +0000
ROA not after:            Tue 04 Mar 2025 18:14:34 +0000
asID:                     23520
IP address blocks:        190.242.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3d:3c:63:76:c1:87:e4:a9:42:8e:31:38:54:36:33:09:d2:cb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:34 2024 GMT
            Not After : Mar  4 18:14:34 2025 GMT
        Subject: CN=351047F7E424D5CFB7B5E80C54376ABBEA3BBF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:2c:a9:52:44:20:5a:e7:2a:99:aa:09:21:
                    e8:fd:26:e0:99:b5:85:3d:81:d8:17:ea:a8:83:14:
                    67:d8:ec:f6:51:26:29:8f:f7:ca:bc:06:a8:97:6e:
                    14:1c:9d:9a:22:2d:86:47:52:ec:52:67:1e:7f:62:
                    dc:e0:ec:84:dd:a6:30:23:83:f2:ca:6d:07:e1:4e:
                    b8:da:48:ea:67:81:9f:2f:9b:ff:6f:52:24:0c:49:
                    2a:45:a6:ad:55:27:31:cd:c7:4b:47:62:9a:96:e0:
                    ff:91:f6:15:d4:68:f5:dd:68:34:dc:6c:ea:77:54:
                    ee:81:c1:f7:d9:32:c7:8d:ef:f8:81:6d:01:64:9c:
                    58:c2:bb:78:93:98:60:d6:bd:d7:f1:db:b8:4b:cb:
                    ee:fd:d4:10:e3:9f:ab:1a:ac:4b:e4:15:49:5b:02:
                    5e:ee:6b:82:b4:93:b1:51:b2:7c:5d:37:2e:be:41:
                    b3:2c:05:6f:af:05:bc:34:a7:84:13:eb:09:aa:3e:
                    f8:d0:28:96:f8:00:64:d3:1e:b8:78:f4:23:4c:0c:
                    7f:05:ab:69:ad:d0:c5:fb:81:92:e3:65:8f:bb:41:
                    7e:1a:9f:73:35:f8:d3:79:80:83:0b:c3:12:d0:94:
                    93:72:40:88:74:a5:df:c5:57:51:5d:49:79:36:2c:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:10:47:F7:E4:24:D5:CF:B7:B5:E8:0C:54:37:6A:BB:EA:3B:BF:1D
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130322e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:10:1b:d1:23:ad:df:7c:9d:4f:c4:50:ba:10:99:29:c1:81:
         cf:2c:23:04:aa:9f:5d:cf:e6:7c:98:a2:6a:86:4a:06:a2:d7:
         5a:22:9f:ad:d6:3a:51:18:ad:d9:67:48:bd:74:66:8b:75:88:
         40:12:8d:78:2b:af:ab:6c:bf:16:a6:20:85:47:4d:eb:fb:91:
         8f:75:38:b3:4d:f9:59:f4:19:57:68:61:77:f6:61:81:f1:8d:
         8d:70:00:7d:28:ac:fa:98:8e:60:8c:a7:b8:dd:57:cd:16:99:
         8f:c0:1a:55:7f:a8:ad:b1:17:3c:a0:a9:2c:4a:b3:ab:0e:de:
         1c:60:43:47:c9:99:2a:a4:7d:54:6f:f0:27:cf:a9:19:2f:44:
         7f:a3:99:3c:b7:86:b7:08:c5:ef:7a:b8:c1:34:f0:92:71:57:
         bb:50:62:17:cc:9e:20:d6:ee:1a:51:97:12:8f:bf:cc:c7:04:
         1d:f3:fa:f6:9d:5e:b5:d0:32:b9:51:6e:48:43:eb:92:ca:a5:
         ad:cd:75:92:94:50:5e:38:df:72:f8:e6:83:31:5f:ae:84:77:
         3f:4f:95:3d:eb:4a:d0:ea:47:ba:31:71:68:10:f5:da:da:1e:
         7a:14:ab:38:76:39:bb:61:ea:49:4c:25:1d:fb:33:2d:c4:43:
         17:13:15:58
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaD08Y3bBh+SpQo4xOFQ2MwnSy54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE
QjBEQjc4NDAeFw0yNDAzMDUxODA5MzRaFw0yNTAzMDQxODE0MzRaMDMxMTAvBgNV
BAMTKDM1MTA0N0Y3RTQyNEQ1Q0ZCN0I1RTgwQzU0Mzc2QUJCRUEzQkJGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMACypUkQgWucqmaoJIej9JuCZ
tYU9gdgX6qiDFGfY7PZRJimP98q8BqiXbhQcnZoiLYZHUuxSZx5/Ytzg7ITdpjAj
g/LKbQfhTrjaSOpngZ8vm/9vUiQMSSpFpq1VJzHNx0tHYpqW4P+R9hXUaPXdaDTc
bOp3VO6BwffZMseN7/iBbQFknFjCu3iTmGDWvdfx27hLy+791BDjn6sarEvkFUlb
Al7ua4K0k7FRsnxdNy6+QbMsBW+vBbw0p4QT6wmqPvjQKJb4AGTTHrh49CNMDH8F
q2mt0MX7gZLjZY+7QX4an3M1+NN5gIMLwxLQlJNyQIh0pd/FV1FdSXk2LFAfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNRBH9+Qk1c+3tegMVDdqu+o7vx0wHwYDVR0j
BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD
NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0
NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE
QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFNjM2RjkwRTcyM0NBMTU5RjhERjUxQjI4M0EyQTA1QzVBNDAzRDhF
NEE0NjYxQjlEODZEODkyREI2MkQwMi8wLzMxMzkzMDJlMzIzNDMyMmUzMTMwMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzUzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvvJm
MA0GCSqGSIb3DQEBCwUAA4IBAQDaEBvRI63ffJ1PxFC6EJkpwYHPLCMEqp9dz+Z8
mKJqhkoGotdaIp+t1jpRGK3ZZ0i9dGaLdYhAEo14K6+rbL8WpiCFR03r+5GPdTiz
TflZ9BlXaGF39mGB8Y2NcAB9KKz6mI5gjKe43VfNFpmPwBpVf6itsRc8oKksSrOr
Dt4cYENHyZkqpH1Ub/Anz6kZL0R/o5k8t4a3CMXverjBNPCScVe7UGIXzJ4g1u4a
UZcSj7/MxwQd8/r2nV610DK5UW5IQ+uSyqWtzXWSlFBeON9y+OaDMV+uhHc/T5U9
60rQ6ke6MXFoEPXa2h56FKs4djm7YepJTCUd+zMtxEMXExVY
-----END CERTIFICATE-----
Generated at Thu May 2 17:40:15 2024 by rpki-client on console-fra.rpki-client.org