Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131312e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3131312e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          q6ssVI1wXI7wZrBruwVyz28FkoGeIaiuRvC+375IUYw=
Subject key identifier:   88:CE:D4:FB:30:38:6C:32:B9:D0:30:80:EF:93:B9:A8:DA:E3:BD:FC
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       4FC79768C8DDAC505D24788C9D86C8F42936025F
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131312e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:37 +0000
ROA not before:           Tue 05 Mar 2024 18:09:37 +0000
ROA not after:            Tue 04 Mar 2025 18:14:37 +0000
asID:                     262191
IP address blocks:        190.242.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c7:97:68:c8:dd:ac:50:5d:24:78:8c:9d:86:c8:f4:29:36:02:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:37 2024 GMT
            Not After : Mar  4 18:14:37 2025 GMT
        Subject: CN=88CED4FB30386C32B9D03080EF93B9A8DAE3BDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:66:67:b7:ae:50:d3:54:2d:4f:a1:96:2c:
                    66:89:0a:e8:1a:29:97:7b:04:59:fc:51:56:13:4a:
                    1f:bd:c9:80:5f:1e:6a:cb:77:c2:9e:c1:fa:a1:7c:
                    49:df:42:21:c3:48:3e:9c:70:8a:93:98:33:ee:73:
                    43:ea:cc:27:5d:cf:75:f8:0d:05:9c:15:c9:3d:38:
                    7f:f3:13:c5:99:88:2d:8e:3c:ca:69:e6:00:e7:e6:
                    e5:b5:d2:a0:c3:4e:bf:ea:a2:95:57:d9:c6:dc:fa:
                    80:c3:a8:1d:e7:1d:13:e5:b3:44:93:57:90:fc:bb:
                    83:c7:00:64:07:34:b8:ed:c0:67:79:a6:5b:2a:c5:
                    65:80:d0:05:79:3d:37:fd:31:74:65:70:67:78:a5:
                    a8:88:a8:28:68:ed:92:03:59:e9:fc:3b:2c:f8:1a:
                    e0:f0:d0:cb:f7:5a:9a:19:47:32:dc:36:17:40:31:
                    23:62:5c:61:17:6b:86:73:ff:49:da:54:4e:7c:d1:
                    98:af:28:8d:c4:f3:f0:67:c0:0f:a0:f6:e6:ca:67:
                    f3:ad:f9:32:16:cd:bd:57:21:d2:4a:b9:47:3e:41:
                    69:49:1d:e0:53:b5:e6:55:4f:f7:f7:f0:81:12:77:
                    7c:b7:0f:b3:33:97:26:bf:02:7e:1b:82:aa:51:b3:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CE:D4:FB:30:38:6C:32:B9:D0:30:80:EF:93:B9:A8:DA:E3:BD:FC
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131312e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:ce:71:c0:93:a9:e6:a6:38:69:22:ce:a5:a9:3b:a4:1c:bf:
         49:0f:45:d9:b8:4e:6b:04:a9:f0:1c:c6:6b:ae:be:db:a3:b0:
         53:3f:51:e9:2d:19:65:6d:ce:ca:a0:57:00:9b:2c:2d:06:01:
         19:cd:66:b1:b9:b8:7c:85:aa:bd:4e:69:77:c9:79:e8:2d:b0:
         ef:40:65:7a:95:84:7e:bd:68:dd:b0:5b:d5:e9:b8:de:15:8f:
         d3:1c:9d:7f:f8:b6:3d:98:4a:cc:0f:16:b5:a7:32:83:1a:b0:
         e0:42:43:8f:e3:0f:8b:6b:86:58:fb:cd:14:de:38:88:a7:aa:
         3d:16:a8:0c:be:27:a1:a6:31:88:c3:73:0c:93:09:be:99:81:
         14:7d:5d:eb:1c:4c:ba:b5:de:2b:de:a9:17:a5:ba:7c:6b:71:
         d8:e5:c8:83:89:3c:81:9a:a0:6b:0d:58:fc:17:75:80:c0:31:
         d4:ae:a3:b8:9d:c3:22:33:d1:e5:88:fc:73:3c:18:52:f7:ef:
         06:e9:5b:b3:79:61:2c:0f:85:12:5a:9c:fc:18:3d:6d:ce:d2:
         05:c5:68:f7:f6:63:48:db:ca:e3:86:a5:f3:d7:b1:32:17:62:
         27:e4:b3:1d:c7:b9:fc:89:42:cb:7b:05:d3:93:d1:79:e1:ec:
         cd:6a:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:01:46 2024 by rpki-client on console-ams.rpki-client.org