Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130342e302f32332d3234203d3e20323632313931.roa
File:                     3139302e3234322e3130342e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          e/fHXhHXg+R8h57+1j8HrYhFdNvFjFoG9zoskRBjYLs=
Subject key identifier:   69:62:D1:5A:82:B3:BC:D6:2B:D4:8A:AE:F5:2B:7D:4E:69:BF:E7:BC
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       4022E3CAE0BFE919433DD76CE2527AC1EE60B3D1
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130342e302f32332d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:36 +0000
ROA not before:           Tue 05 Mar 2024 18:09:36 +0000
ROA not after:            Tue 04 Mar 2025 18:14:36 +0000
asID:                     262191
IP address blocks:        190.242.104.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:e3:ca:e0:bf:e9:19:43:3d:d7:6c:e2:52:7a:c1:ee:60:b3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:36 2024 GMT
            Not After : Mar  4 18:14:36 2025 GMT
        Subject: CN=6962D15A82B3BCD62BD48AAEF52B7D4E69BFE7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:30:e5:f9:35:48:32:93:23:7c:4c:50:ea:
                    2e:e3:04:04:ab:f2:e3:52:18:a3:c3:0e:9d:ed:0b:
                    3a:59:02:11:3d:bb:de:c3:17:3d:2b:d4:8d:cd:ab:
                    03:0f:42:2d:ee:d6:7b:2d:1b:17:49:68:9e:62:5f:
                    44:90:4e:6c:98:1d:ab:f9:ea:a9:d0:f8:99:26:0e:
                    c3:b0:36:47:d3:b1:44:52:2f:1b:75:b5:7b:56:c5:
                    b4:86:9e:34:c6:8f:bf:77:7e:58:fa:1a:51:3d:44:
                    2e:00:1e:77:6d:c0:5a:0d:d7:4e:53:24:26:92:9b:
                    c5:41:95:a5:4a:73:e7:1e:72:f4:22:27:eb:9f:86:
                    a8:77:c4:36:42:8b:b1:29:d7:18:ae:92:4e:ad:70:
                    85:76:2a:5b:43:63:37:32:df:da:6f:d0:7e:be:c7:
                    b4:10:f6:d1:88:3c:fe:91:36:b1:41:ab:10:13:7a:
                    b0:15:37:36:ad:21:c8:47:8c:8e:64:8a:ca:dc:12:
                    c8:5e:9a:e0:07:a5:ef:d9:d6:7f:d8:4c:e0:f3:37:
                    6d:fe:1f:1b:8a:aa:85:02:c5:68:9b:22:ad:d7:df:
                    07:74:1a:74:c3:2c:06:2c:55:67:e3:d0:bf:fa:5d:
                    67:63:cf:28:81:43:96:b0:ec:72:8e:ad:42:c1:08:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:D1:5A:82:B3:BC:D6:2B:D4:8A:AE:F5:2B:7D:4E:69:BF:E7:BC
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130342e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:43:b3:dd:1d:11:b1:5c:6f:82:ea:39:cc:84:c2:a7:80:
         d8:27:31:7e:22:88:ed:7f:36:e4:5c:fc:75:02:98:70:51:84:
         eb:02:80:3f:27:e3:70:57:3d:30:4f:6a:8c:68:3e:38:ff:6b:
         d6:6c:a8:16:4e:b2:f5:0b:ad:ed:ba:59:1e:3e:49:e8:b0:cf:
         82:9b:f5:38:be:d9:1d:9e:50:e4:9a:53:41:a9:0b:00:5a:a7:
         6e:ae:6b:ea:1f:24:30:3b:e5:3d:68:64:e2:b3:63:7b:08:92:
         73:35:bc:4e:d5:a7:b5:fe:7a:98:cc:f6:66:5d:ae:a8:eb:fd:
         2a:01:ec:ac:00:b3:5a:58:b9:b8:26:ba:07:c0:96:8e:49:e3:
         16:86:b1:17:06:b4:fb:f3:44:10:7e:34:35:e2:8d:ac:51:0c:
         a0:20:fe:d1:cf:b3:8d:4a:e0:14:60:ce:82:03:ae:ed:d8:e4:
         2a:d3:a8:7e:0d:92:fa:1f:7a:8c:6c:be:6f:09:0a:45:12:a1:
         22:4a:25:f2:c2:63:c7:e1:6d:db:87:e9:1e:7c:29:67:61:5b:
         bb:b4:ab:58:7a:6f:e6:b8:0e:f8:a6:a5:dd:07:04:e9:f5:ed:
         8b:29:dc:fb:9c:2d:58:f7:d0:a4:81:03:20:82:f4:54:4e:1e:
         c7:35:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:07:39 2024 by rpki-client on console-fra.rpki-client.org