Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131302e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3131302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          /Wne0JUdXA8uFnGHslymU1gUrPTY3QdgN/5EPUugwWk=
Subject key identifier:   AD:97:7B:28:DA:28:1E:B1:9B:9A:6C:E6:4E:0C:5A:8D:B4:7F:CB:65
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       61E11DBE79DE8193DEF897550E970960BCC8CC8E
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:43 +0000
ROA not before:           Tue 05 Mar 2024 18:09:43 +0000
ROA not after:            Tue 04 Mar 2025 18:14:43 +0000
asID:                     262191
IP address blocks:        190.242.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Jun 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e1:1d:be:79:de:81:93:de:f8:97:55:0e:97:09:60:bc:c8:cc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:43 2024 GMT
            Not After : Mar  4 18:14:43 2025 GMT
        Subject: CN=AD977B28DA281EB19B9A6CE64E0C5A8DB47FCB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:21:1f:f4:82:90:3d:6e:70:d5:ae:2c:43:
                    51:2f:47:c8:b9:8f:ae:97:cb:c2:62:20:b2:de:e4:
                    ed:f0:a1:2d:ee:52:ae:d6:c1:23:ff:f5:68:04:07:
                    99:1e:b4:66:77:aa:dd:69:59:80:06:d3:27:e7:59:
                    ac:10:4e:bf:36:e1:87:57:2d:31:5c:ce:3a:5a:f2:
                    2c:ad:ee:c8:e8:c4:ff:45:ea:7b:c4:ca:9d:74:ac:
                    27:bd:43:2c:43:95:03:f9:b1:c6:7d:6c:17:5e:b2:
                    99:40:09:84:9c:93:26:a9:c3:c8:c1:5f:ed:b3:7e:
                    dc:b3:64:9e:72:f7:a7:06:82:7d:f4:68:c9:d0:69:
                    60:8a:0f:f5:15:fc:55:24:99:50:7f:c8:21:8b:e9:
                    3b:8a:06:4f:03:d4:b4:26:76:fb:73:3b:05:f1:0b:
                    e9:a5:41:d1:98:f1:4d:19:76:c3:ab:e8:de:f0:52:
                    6b:e7:fe:41:36:9d:fb:30:2f:f4:2a:a7:ca:ed:33:
                    6c:63:0c:31:51:e2:23:32:65:bd:5f:6c:dc:8b:06:
                    e1:9e:86:49:38:a8:b6:dc:11:9d:81:6c:31:aa:df:
                    a7:2e:b7:95:c4:59:c7:61:92:1a:ca:f2:eb:d5:9b:
                    b1:f6:c7:77:64:d9:35:8b:30:4b:cd:fa:63:14:9c:
                    b5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:97:7B:28:DA:28:1E:B1:9B:9A:6C:E6:4E:0C:5A:8D:B4:7F:CB:65
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:09:4c:c0:34:9e:21:03:30:42:9d:70:91:3d:c9:1c:d8:
         e5:9a:d6:b0:03:21:97:3f:ff:d8:0f:63:42:a1:3a:d0:65:fe:
         b7:a2:a9:50:eb:f3:a5:ca:27:df:d5:a2:15:0b:56:c2:79:b1:
         af:26:38:ef:d0:db:71:9c:ce:6b:4b:63:07:65:01:72:de:c5:
         39:96:e1:c5:5f:3b:29:a3:58:7c:d7:0e:65:86:44:f2:14:e0:
         93:4b:3e:35:ef:cd:f6:6c:cc:47:f9:5f:ec:74:b4:f0:f2:45:
         df:54:31:3a:70:0d:8b:6f:10:d7:ba:0c:1f:ba:89:8c:7e:16:
         43:0e:88:c7:cd:67:52:43:89:8f:8e:02:78:f5:e0:04:79:82:
         0d:7e:d3:cd:91:82:20:0f:62:25:7e:32:62:30:cd:b1:1f:25:
         f8:93:fe:32:4a:fc:48:2e:38:4e:a9:2f:81:66:c6:f7:9b:89:
         53:cf:10:82:c2:29:f6:61:80:d1:9e:2e:c4:ca:6e:c0:03:31:
         2c:16:bc:a9:5a:46:b9:ea:64:ed:5c:03:71:01:45:e3:08:c0:
         ca:cf:91:8c:ce:dc:a6:b9:f1:ba:00:79:76:c3:ae:1c:dc:5a:
         d0:7a:08:b9:72:f2:e3:58:6a:dd:42:8d:a9:ad:d0:03:2c:24:
         51:57:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:10:54 2024 by rpki-client on console-ams.rpki-client.org