Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          nApkQznhFQd39ft3xl6S7zNvfNLOCJ+80WnFD/MxN7k=
Subject key identifier:   E7:53:A0:E8:B4:78:3B:73:E5:F5:B5:F2:94:2C:25:02:81:7F:12:0D
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       3D90B3A58C99E09064D5087EDC41CD6C22791E52
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:42 +0000
ROA not before:           Tue 05 Mar 2024 18:09:42 +0000
ROA not after:            Tue 04 Mar 2025 18:14:42 +0000
asID:                     23520
IP address blocks:        190.242.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 14:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:90:b3:a5:8c:99:e0:90:64:d5:08:7e:dc:41:cd:6c:22:79:1e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:42 2024 GMT
            Not After : Mar  4 18:14:42 2025 GMT
        Subject: CN=E753A0E8B4783B73E5F5B5F2942C2502817F120D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:73:0f:d7:14:5c:4b:a1:a6:15:3a:a8:4d:
                    b2:4f:04:ab:18:ef:4e:05:5a:3e:aa:5f:0f:9b:23:
                    1f:66:87:19:d0:ff:d5:33:07:b8:d3:af:74:0b:21:
                    8e:88:56:d1:60:e3:4f:f2:a8:84:26:57:26:de:a4:
                    72:82:25:49:cc:9f:17:f0:79:e9:b2:b1:52:f6:ca:
                    55:04:4b:db:bd:7e:fd:cd:a1:51:42:04:91:4d:4b:
                    2e:24:d3:fc:e0:d3:0a:7d:e1:7b:3f:38:1d:df:f6:
                    04:9e:b3:8a:4a:4d:9c:e2:d1:2f:a7:3d:72:40:ba:
                    50:c7:36:89:91:53:2f:6d:2a:bd:a8:f8:a7:04:08:
                    e6:74:c2:0c:e9:29:b1:7a:b7:0b:78:59:1c:f8:e1:
                    10:f1:25:c4:bc:5c:84:70:74:ae:05:47:89:13:9e:
                    46:e6:0c:c1:cf:97:d7:b4:70:6b:26:e3:d6:d5:3d:
                    d8:27:4e:0f:db:2d:db:34:60:83:2b:54:cd:a5:1a:
                    f8:3c:38:1c:b7:c1:6d:d0:90:57:a1:3c:a3:75:28:
                    6a:93:17:44:50:b4:43:84:82:a2:66:e2:fc:ac:3e:
                    e2:4f:40:1f:17:26:f2:ff:14:dc:bd:39:8d:ce:01:
                    56:d4:e1:0c:65:ac:f7:57:6e:8c:1a:5f:b0:12:31:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:A0:E8:B4:78:3B:73:E5:F5:B5:F2:94:2C:25:02:81:7F:12:0D
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:95:01:94:ed:48:69:b7:67:63:30:44:6d:32:43:f4:3e:94:
         c4:7c:4c:9d:b7:d0:12:74:2a:d4:c8:71:22:e5:6b:cb:22:eb:
         c3:2f:84:92:9d:4f:ae:60:ff:0f:b1:4a:2b:b2:16:70:b6:9f:
         80:69:0c:0f:90:72:03:e6:7b:90:08:24:15:3e:72:4b:c0:1c:
         5f:ea:4a:ad:65:82:ba:60:72:44:e6:33:97:d1:bf:65:18:65:
         1d:8a:a8:19:07:e3:93:f9:c7:4a:6b:ba:22:d0:ea:76:42:5f:
         52:84:8c:91:cd:11:d1:69:ca:45:98:e5:3d:ab:c6:c9:43:6d:
         45:a5:19:44:f0:1c:96:47:37:8c:16:37:77:c8:0f:61:5f:f5:
         b3:eb:01:b0:10:64:0f:38:31:bb:b2:8b:c9:bc:8a:1c:dc:dc:
         f3:c4:a5:5e:a5:05:e3:25:5c:d4:53:0d:8c:09:46:05:f7:ba:
         65:3e:af:f9:af:9f:60:98:c3:34:f6:6d:aa:6e:7f:49:f9:2d:
         d3:a5:52:f1:cf:2c:48:a7:5f:b6:b5:4a:08:88:f8:04:88:49:
         66:bf:92:e2:1f:cb:72:f9:83:90:47:98:2c:b1:0f:fb:06:46:
         70:55:33:8b:34:08:e8:03:e7:f8:17:3c:aa:48:0b:b0:0e:48:
         26:2b:f7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:28:25 2024 by rpki-client on console-fra.rpki-client.org