Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e31322e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e31322e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          o5E0XewqaiGjXgU1jXFwRI4ptS1NzFHhKhdWY6IeMMQ=
Subject key identifier:   BB:82:8C:EB:80:94:75:1B:12:EC:40:44:DB:8D:45:5F:E8:91:FA:7B
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       251CFA0C1851CC742A3631B4E704D32CF566220B
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e31322e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:30 +0000
ROA not before:           Tue 05 Mar 2024 18:09:30 +0000
ROA not after:            Tue 04 Mar 2025 18:14:30 +0000
asID:                     23520
IP address blocks:        190.242.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1c:fa:0c:18:51:cc:74:2a:36:31:b4:e7:04:d3:2c:f5:66:22:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:30 2024 GMT
            Not After : Mar  4 18:14:30 2025 GMT
        Subject: CN=BB828CEB8094751B12EC4044DB8D455FE891FA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:5a:60:32:47:15:97:cb:90:70:44:7a:63:
                    db:06:99:9e:fe:5d:ed:d1:f6:8f:9f:6d:98:db:84:
                    0c:56:cf:37:0e:cf:47:76:ff:06:89:3d:22:7e:71:
                    92:42:0d:f1:cd:c1:8f:26:33:5f:33:77:33:bc:4e:
                    5e:3d:2b:c0:46:80:5f:85:bb:e7:24:d1:ef:7a:08:
                    52:04:8f:56:2a:d6:02:28:85:f5:0c:0f:dc:1e:87:
                    23:b4:bf:69:f6:2c:59:e2:1d:6a:6a:c5:6c:ba:a7:
                    70:16:b5:9b:57:5f:c8:2f:7b:e2:a9:80:54:38:19:
                    0f:b3:be:f6:9a:c2:6c:86:53:b4:bb:14:3c:ff:51:
                    27:68:c8:cc:26:79:9a:56:ee:7f:c4:0a:7a:d0:53:
                    dd:c0:e1:33:f8:99:a1:9e:1a:f6:7a:0e:45:a6:56:
                    fd:ed:21:0f:4c:f4:77:d9:eb:52:96:34:39:f2:98:
                    ac:f5:2e:c3:ab:fc:27:4e:5c:04:a3:71:6d:4d:1a:
                    1c:61:ac:62:93:23:0f:01:a8:fc:53:a2:9a:4d:bf:
                    0d:ca:b4:da:e4:64:2d:61:bb:48:51:67:92:c4:07:
                    76:c8:c4:37:72:b3:35:9c:3e:d0:a0:83:40:b3:5b:
                    ce:3e:b4:58:b7:72:3e:45:61:74:da:e4:dd:81:92:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:82:8C:EB:80:94:75:1B:12:EC:40:44:DB:8D:45:5F:E8:91:FA:7B
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e31322e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:86:d9:ca:2f:0f:63:4a:56:02:fd:e8:31:2c:88:0a:7a:a3:
         a9:35:dc:92:cf:42:dd:62:88:9b:df:04:f4:c1:7b:95:e3:b1:
         e7:6b:f3:b0:f8:f9:1f:5e:70:e1:ee:ef:c9:97:c2:ee:16:52:
         51:d2:b9:68:bc:df:cf:e9:df:58:34:58:f5:d1:73:2a:09:e4:
         42:0d:4d:b0:1f:25:32:d4:ac:57:71:b2:3c:01:b3:8f:c3:55:
         3e:f4:0e:81:86:b8:a9:f3:50:d8:82:5e:4b:30:c6:fc:4c:af:
         9e:09:f3:ab:03:06:12:52:7f:3d:5b:02:ec:3d:b7:6a:5d:69:
         17:d7:59:de:96:09:dd:27:dd:58:0c:e0:32:d8:5b:cf:2b:c4:
         95:5f:db:c4:31:ea:58:4f:0a:ca:23:65:f3:5f:3f:2d:9e:0c:
         3c:ee:50:70:58:6e:37:91:cc:d4:00:91:e7:7f:61:2c:20:a8:
         ec:da:68:7a:3d:3b:f0:d1:91:c5:eb:ea:10:f1:ae:f0:e2:ce:
         19:cd:55:ef:a0:ad:d4:93:4f:66:72:34:44:11:5b:98:71:5e:
         50:b6:ed:7f:77:97:5d:f0:f3:16:93:b8:a8:d8:27:0c:a2:b7:
         7c:be:86:4c:38:be:8a:cf:eb:7c:9c:29:7c:bf:c5:96:f3:90:
         70:0c:6c:fb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJRz6DBhRzHQqNjG05wTTLPVmIgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE
QjBEQjc4NDAeFw0yNDAzMDUxODA5MzBaFw0yNTAzMDQxODE0MzBaMDMxMTAvBgNV
BAMTKEJCODI4Q0VCODA5NDc1MUIxMkVDNDA0NERCOEQ0NTVGRTg5MUZBN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1FpgMkcVl8uQcER6Y9sGmZ7+
Xe3R9o+fbZjbhAxWzzcOz0d2/waJPSJ+cZJCDfHNwY8mM18zdzO8Tl49K8BGgF+F
u+ck0e96CFIEj1Yq1gIohfUMD9wehyO0v2n2LFniHWpqxWy6p3AWtZtXX8gve+Kp
gFQ4GQ+zvvaawmyGU7S7FDz/USdoyMwmeZpW7n/ECnrQU93A4TP4maGeGvZ6DkWm
Vv3tIQ9M9HfZ61KWNDnymKz1LsOr/CdOXASjcW1NGhxhrGKTIw8BqPxToppNvw3K
tNrkZC1hu0hRZ5LEB3bIxDdyszWcPtCgg0CzW84+tFi3cj5FYXTa5N2BkrDlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUu4KM64CUdRsS7EBE241FX+iR+nswHwYDVR0j
BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD
NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0
NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE
QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFNjM2RjkwRTcyM0NBMTU5RjhERjUxQjI4M0EyQTA1QzVBNDAzRDhF
NEE0NjYxQjlEODZEODkyREI2MkQwMi8wLzMxMzkzMDJlMzIzNDMyMmUzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM1MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7yDDAN
BgkqhkiG9w0BAQsFAAOCAQEAxYbZyi8PY0pWAv3oMSyICnqjqTXcks9C3WKIm98E
9MF7leOx52vzsPj5H15w4e7vyZfC7hZSUdK5aLzfz+nfWDRY9dFzKgnkQg1NsB8l
MtSsV3GyPAGzj8NVPvQOgYa4qfNQ2IJeSzDG/EyvngnzqwMGElJ/PVsC7D23al1p
F9dZ3pYJ3SfdWAzgMthbzyvElV/bxDHqWE8KyiNl818/LZ4MPO5QcFhuN5HM1ACR
539hLCCo7Npoej078NGRxevqEPGu8OLOGc1V76Ct1JNPZnI0RBFbmHFeULbtf3eX
XfDzFpO4qNgnDKK3fL6GTDi+is/rfJwpfL/FlvOQcAxs+w==
-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org