Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130372e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3130372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          SBqvoZ0+kYvSJaNoRcKn+g3SYFTzfzKoz12RjfpIsaA=
Subject key identifier:   B8:0D:93:AC:2A:88:BB:94:D3:96:F4:83:60:16:AD:A2:ED:39:F8:8B
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       247607DF014ADF814B7C9A151E655F7F0BA112F3
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:22 +0000
ROA not before:           Tue 05 Mar 2024 18:09:22 +0000
ROA not after:            Tue 04 Mar 2025 18:14:22 +0000
asID:                     262191
IP address blocks:        190.242.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:76:07:df:01:4a:df:81:4b:7c:9a:15:1e:65:5f:7f:0b:a1:12:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:22 2024 GMT
            Not After : Mar  4 18:14:22 2025 GMT
        Subject: CN=B80D93AC2A88BB94D396F4836016ADA2ED39F88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:4e:08:d3:92:e6:86:6c:62:8b:11:1b:96:
                    05:4d:19:19:49:a1:a0:5d:d6:22:6a:f1:bc:be:bd:
                    42:ce:81:f3:4d:d4:3b:db:56:43:2b:7e:29:f6:2e:
                    ca:37:4e:8b:bb:13:ce:f7:97:4a:7f:74:a6:56:79:
                    4c:60:45:53:d6:44:19:ff:91:79:a2:3c:f6:63:cf:
                    e7:db:d2:7c:1e:ce:2a:89:81:be:04:ac:7b:f1:1b:
                    54:bf:2e:35:19:f3:16:34:0e:a3:da:22:e0:8c:e1:
                    51:eb:88:69:7d:ba:fe:46:9f:73:65:ef:71:68:92:
                    06:0c:4e:29:8e:24:63:21:34:46:dc:82:5b:f3:98:
                    55:4d:ad:bb:40:8a:4b:42:10:f4:ec:76:b4:09:6c:
                    ab:e7:fb:7a:95:25:9e:98:37:84:ea:36:f3:57:73:
                    d2:0d:d1:ff:92:f7:1b:ae:3c:4f:dd:a7:dc:96:49:
                    6c:32:99:2a:40:b4:39:55:bf:63:37:d7:52:d0:54:
                    a6:ff:b3:43:5f:ce:17:71:dc:26:41:d4:9c:b5:49:
                    dd:0c:c8:44:52:27:c4:ed:fd:4d:4a:ad:a0:37:26:
                    7d:bf:f2:f8:8d:ae:e0:22:25:be:9f:28:35:d9:16:
                    c2:f3:e7:e9:3a:e0:90:fb:01:49:2b:b3:70:b3:80:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0D:93:AC:2A:88:BB:94:D3:96:F4:83:60:16:AD:A2:ED:39:F8:8B
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:32:a4:37:d4:a1:b7:a7:43:9b:4d:2c:7f:91:3f:64:7c:6d:
         fb:35:8f:58:b2:4f:62:db:5a:f7:b2:c7:a0:aa:30:98:8d:46:
         b7:1a:d9:8a:80:e6:cc:a6:95:28:99:fe:13:06:5a:c1:77:21:
         82:c2:a1:0f:b2:5f:e6:e5:de:bd:92:9c:f8:b9:30:bf:6d:e5:
         d1:8e:fb:a0:51:d9:7a:32:2f:ce:98:a0:ab:9f:9d:97:7e:54:
         02:bb:11:2b:9d:c7:5d:77:e0:4d:c0:d1:c2:c8:92:66:4c:59:
         92:93:61:c6:e6:1e:2a:3c:49:da:93:d9:97:a8:d3:a4:5e:64:
         64:8e:a0:ad:54:1c:21:7d:85:e0:e2:e2:a5:3b:8b:95:3c:54:
         3a:8a:3b:67:1e:b8:af:d3:15:a5:d3:e9:a3:81:18:ad:38:07:
         1e:fa:58:4a:35:ae:45:7c:e8:56:20:a8:45:72:42:54:f8:6f:
         77:0d:77:a6:35:90:68:67:4d:41:22:ff:f9:43:71:f4:46:9f:
         05:88:a8:b4:0d:e2:ae:dd:8b:4e:84:54:04:a1:66:78:3a:54:
         61:80:4f:6f:d2:42:72:65:f6:ec:70:c4:f1:13:26:72:3e:d8:
         51:e7:61:88:a9:32:c5:d0:56:3a:c8:a9:15:aa:95:a4:dd:4e:
         eb:d1:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:38:20 2024 by rpki-client on console-ams.rpki-client.org