Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131322e302f32332d3234203d3e20323632313931.roa
File:                     3139302e3234322e3131322e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          qA6+geJRkGZ2+DKi+PxMgcZS++y+8VECQnKCf7ZeVPA=
Subject key identifier:   AC:08:69:2E:EC:67:DB:DE:A7:45:38:F9:81:B5:5C:93:8C:E3:5B:8E
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       170F9F6976ED839F51080972D3DF3FD344142A50
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131322e302f32332d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:37 +0000
ROA not before:           Tue 05 Mar 2024 18:09:37 +0000
ROA not after:            Tue 04 Mar 2025 18:14:37 +0000
asID:                     262191
IP address blocks:        190.242.112.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Jun 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0f:9f:69:76:ed:83:9f:51:08:09:72:d3:df:3f:d3:44:14:2a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:37 2024 GMT
            Not After : Mar  4 18:14:37 2025 GMT
        Subject: CN=AC08692EEC67DBDEA74538F981B55C938CE35B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:f5:e9:79:26:78:94:86:cd:2c:27:8b:10:
                    06:90:28:a9:f6:21:4b:b7:ca:c8:cf:67:73:ed:de:
                    2f:cb:3d:c3:f8:dd:65:b1:bc:87:90:32:68:dc:70:
                    51:a5:c9:fa:36:49:c5:e7:a9:9b:51:09:1c:fa:b9:
                    00:33:f8:31:e0:d9:65:06:96:84:c7:12:42:51:09:
                    38:e9:92:4c:f7:cb:6a:52:dd:e3:ca:d3:7d:95:c5:
                    a1:0b:17:1a:58:5c:14:b7:4a:be:c8:26:99:b0:c9:
                    a8:97:d7:6d:59:bf:a3:c9:16:b2:02:df:24:6c:f0:
                    ec:49:3b:fe:40:fb:ac:ba:9b:52:f9:55:bf:5b:61:
                    80:3a:df:76:4d:9f:0a:79:ef:1d:f4:dc:d7:c4:db:
                    71:f0:3c:bf:93:c6:ce:e5:2f:d3:74:ad:25:5f:af:
                    a3:47:8b:3a:c2:ab:f7:f3:f3:5c:38:cb:28:17:25:
                    b1:60:6b:83:f4:83:df:3a:d1:a3:71:50:7a:a4:e6:
                    90:a5:43:27:98:4b:e3:a1:e1:24:58:32:9e:8f:87:
                    0e:3c:60:a9:60:61:5f:25:6e:17:aa:ef:eb:33:dc:
                    26:6e:d4:93:9e:82:a2:78:f0:97:ec:0a:3e:dd:c6:
                    39:0e:95:b2:a5:e4:30:78:21:de:91:ee:53:8a:48:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:69:2E:EC:67:DB:DE:A7:45:38:F9:81:B5:5C:93:8C:E3:5B:8E
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131322e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:66:0a:b2:6d:c5:5b:40:fe:3a:30:2b:23:19:3d:16:6a:f0:
         49:7d:3d:46:09:9d:0a:e1:34:10:a4:6b:02:6e:02:81:3e:71:
         e5:3d:21:b1:9c:b2:d5:ce:85:62:91:8c:18:8f:13:9e:1b:8b:
         bb:b2:b6:b7:e2:c3:90:b8:a9:0a:bf:83:3f:5f:74:45:f1:97:
         60:66:ed:28:c4:3b:0a:7f:fa:ff:09:09:00:3b:73:ec:a3:29:
         aa:a2:f6:6b:5e:9c:c2:1d:0e:ee:1f:09:4e:f1:7f:5d:c6:98:
         5a:ac:79:4e:e2:ca:12:0d:e6:57:d9:d0:39:fb:08:57:46:b9:
         45:2f:3c:01:eb:61:20:7a:55:48:7b:ba:6e:3d:bd:4b:10:5d:
         2c:b2:db:08:67:90:e6:87:78:4e:81:8a:69:6d:89:63:d8:08:
         35:af:56:d0:cc:ed:2f:e2:5a:63:75:3d:72:3b:37:99:65:6a:
         c1:ab:fb:1c:fb:46:ce:98:f5:2b:27:84:23:a5:72:79:af:83:
         55:ce:c0:67:01:a8:b2:7f:9d:c7:85:de:c4:a2:fb:4e:33:7d:
         30:57:72:ca:56:0d:73:fd:5c:f5:9d:e2:b9:e5:23:09:1c:1f:
         a0:fa:ae:02:7d:a9:82:4b:a8:53:60:0a:da:c3:92:ea:e5:4b:
         1a:1a:75:3f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFw+faXbtg59RCAly098/00QUKlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE
QjBEQjc4NDAeFw0yNDAzMDUxODA5MzdaFw0yNTAzMDQxODE0MzdaMDMxMTAvBgNV
BAMTKEFDMDg2OTJFRUM2N0RCREVBNzQ1MzhGOTgxQjU1QzkzOENFMzVCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2PXpeSZ4lIbNLCeLEAaQKKn2
IUu3ysjPZ3Pt3i/LPcP43WWxvIeQMmjccFGlyfo2ScXnqZtRCRz6uQAz+DHg2WUG
loTHEkJRCTjpkkz3y2pS3ePK032VxaELFxpYXBS3Sr7IJpmwyaiX121Zv6PJFrIC
3yRs8OxJO/5A+6y6m1L5Vb9bYYA633ZNnwp57x303NfE23HwPL+Txs7lL9N0rSVf
r6NHizrCq/fz81w4yygXJbFga4P0g9860aNxUHqk5pClQyeYS+Oh4SRYMp6Phw48
YKlgYV8lbheq7+sz3CZu1JOegqJ48JfsCj7dxjkOlbKl5DB4Id6R7lOKSEmDAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUrAhpLuxn296nRTj5gbVck4zjW44wHwYDVR0j
BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD
NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0
NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE
QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFNjM2RjkwRTcyM0NBMTU5RjhERjUxQjI4M0EyQTA1QzVBNDAzRDhF
NEE0NjYxQjlEODZEODkyREI2MkQwMi8wLzMxMzkzMDJlMzIzNDMyMmUzMTMxMzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
8nAwDQYJKoZIhvcNAQELBQADggEBAGFmCrJtxVtA/jowKyMZPRZq8El9PUYJnQrh
NBCkawJuAoE+ceU9IbGcstXOhWKRjBiPE54bi7uytrfiw5C4qQq/gz9fdEXxl2Bm
7SjEOwp/+v8JCQA7c+yjKaqi9mtenMIdDu4fCU7xf13GmFqseU7iyhIN5lfZ0Dn7
CFdGuUUvPAHrYSB6VUh7um49vUsQXSyy2whnkOaHeE6BimltiWPYCDWvVtDM7S/i
WmN1PXI7N5llasGr+xz7Rs6Y9SsnhCOlcnmvg1XOwGcBqLJ/nceF3sSi+04zfTBX
cspWDXP9XPWd4rnlIwkcH6D6rgJ9qYJLqFNgCtrDkurlSxoadT8=
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:44:22 2024 by rpki-client on console-fra.rpki-client.org