Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130332e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3130332e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          Ub5jxUprHHHUrtT2mKnn0wyC9LWEGJM4xMz9vpzqYr0=
Subject key identifier:   B2:C4:02:11:EC:B7:0C:63:FA:9B:75:1A:D9:E3:7D:86:2E:45:E6:7E
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       79F66681E6712100BA390CC2C0EE266B7703D313
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130332e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:31 +0000
ROA not before:           Tue 05 Mar 2024 18:09:31 +0000
ROA not after:            Tue 04 Mar 2025 18:14:31 +0000
asID:                     262191
IP address blocks:        190.242.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Jun 2024 18:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f6:66:81:e6:71:21:00:ba:39:0c:c2:c0:ee:26:6b:77:03:d3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:31 2024 GMT
            Not After : Mar  4 18:14:31 2025 GMT
        Subject: CN=B2C40211ECB70C63FA9B751AD9E37D862E45E67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:bb:92:13:da:e7:5e:33:45:e3:fe:e4:24:
                    23:f5:e5:f7:55:7c:a3:47:e5:b4:87:56:87:28:17:
                    fa:a3:8d:e2:5f:d3:72:84:5e:5a:ac:01:7c:7a:62:
                    0e:b9:cd:fc:04:32:bd:1e:62:26:19:3d:25:ca:75:
                    56:bc:6b:6b:06:6e:aa:ab:23:de:47:b4:96:5b:b7:
                    38:ba:9b:d9:e8:3d:66:d6:36:d4:63:61:87:34:25:
                    62:1a:69:d2:c4:5f:a0:be:5d:b8:35:66:5a:61:03:
                    ff:e8:b4:e5:8f:35:56:1f:dd:66:6a:05:63:6f:cf:
                    c2:1d:33:f4:26:a1:6c:e9:aa:33:4b:d2:32:59:1c:
                    7e:61:65:e5:1d:69:07:11:35:a8:de:53:d6:0a:79:
                    db:29:a1:20:ca:79:68:a3:f7:98:f0:4d:81:5c:17:
                    99:5a:9d:2d:55:25:39:95:8f:0e:ec:42:9c:33:57:
                    8e:18:0d:79:33:c7:59:34:bb:cc:af:80:96:4c:09:
                    e8:b0:d3:9f:af:75:ea:69:0c:5a:48:7d:24:0e:99:
                    4b:db:ba:92:fe:75:57:d4:74:1b:af:a8:05:0d:f0:
                    44:36:6c:12:ba:be:f8:aa:89:70:7c:cf:21:cc:98:
                    c8:03:69:ea:40:ec:82:d0:6a:7e:55:e6:4a:31:01:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C4:02:11:EC:B7:0C:63:FA:9B:75:1A:D9:E3:7D:86:2E:45:E6:7E
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130332e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:65:95:bc:78:ad:f9:aa:94:8a:98:78:66:1d:35:0a:14:
         69:9c:47:4d:e1:14:81:4e:1b:22:c3:6e:69:a9:7b:1d:76:da:
         35:98:99:05:18:65:c9:fd:d7:f0:53:09:1b:ea:6d:13:a2:0f:
         70:8a:9a:e6:25:70:45:83:29:c6:c6:88:30:ec:6a:47:32:05:
         57:aa:6b:4e:00:cb:c0:25:b8:80:79:0a:8b:43:b2:b6:86:22:
         da:a2:fd:c7:25:fa:52:a4:7e:18:fb:4c:34:26:f0:ba:3a:b8:
         61:82:6d:ca:2a:18:12:af:2a:ac:5e:d2:aa:19:a0:31:39:47:
         46:ad:7d:5d:87:fd:27:fd:e4:fc:4a:d5:f5:f2:cc:2e:4c:28:
         d2:bd:42:98:1d:0e:50:dd:c7:b9:63:e4:ee:dd:e4:f9:e2:cd:
         06:61:4c:b5:8c:fc:70:15:24:ef:3e:e9:6c:40:12:2c:c6:27:
         22:9f:f0:a4:2b:93:76:e4:15:03:db:eb:83:d6:c5:68:c7:3f:
         47:bf:c3:50:71:74:bb:f7:d5:ca:3e:a0:0e:2a:17:a3:ff:b4:
         c3:e4:36:4c:ed:e0:40:b4:da:48:96:6f:a6:b7:fb:db:d6:f8:
         bc:cd:d4:2a:39:38:45:4a:7d:29:e8:3a:3d:6c:45:c1:ba:7e:
         cc:f2:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:03:40 2024 by rpki-client on console-ams.rpki-client.org