Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3132352e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3132352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          KN96YokjJpHvSzKSO5DjgYB6+0M3y0Vcqv5oqzjzy0E=
Subject key identifier:   C0:19:89:A0:12:EB:F3:C2:E0:D0:4D:C6:27:CC:EA:B1:23:B2:50:8C
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       656AA59AE4D0B7AB947192E76D7F61914634A034
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3132352e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:38 +0000
ROA not before:           Tue 05 Mar 2024 18:09:38 +0000
ROA not after:            Tue 04 Mar 2025 18:14:38 +0000
asID:                     262191
IP address blocks:        190.242.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6a:a5:9a:e4:d0:b7:ab:94:71:92:e7:6d:7f:61:91:46:34:a0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:38 2024 GMT
            Not After : Mar  4 18:14:38 2025 GMT
        Subject: CN=C01989A012EBF3C2E0D04DC627CCEAB123B2508C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:18:8e:96:75:26:f9:55:96:51:4f:c6:4c:
                    d2:77:cc:44:cf:68:60:5b:54:89:7d:de:71:60:6a:
                    41:cd:3a:1b:e1:9c:67:83:30:8a:50:32:64:13:d7:
                    d7:ef:81:91:19:3b:51:e1:b9:9c:fd:b6:14:ad:3a:
                    c8:f3:c7:28:14:dc:d4:00:ab:88:f4:ec:41:80:b4:
                    01:49:08:bc:e1:d5:2a:fe:90:c1:4b:61:58:e8:6f:
                    6f:e6:61:06:34:1a:15:a8:71:e2:85:3e:9f:f9:b5:
                    ac:26:3a:41:04:e1:b1:2f:be:c6:c4:b3:83:0f:ba:
                    f0:cd:2a:c7:97:5e:87:6e:57:fd:2b:ee:66:bd:ec:
                    29:2f:a0:81:a1:1a:06:f9:af:d9:e8:ec:cb:65:18:
                    0f:7d:c8:2f:d9:19:70:05:46:6e:8d:e5:84:ab:31:
                    70:fb:36:0a:e0:2d:93:cd:d6:70:14:94:88:ce:50:
                    df:6a:a5:68:52:8e:ce:6a:ef:5d:e7:d0:88:d2:21:
                    29:ca:0a:79:b6:21:33:4c:65:8e:ba:60:a4:21:c9:
                    f2:4f:3d:b2:3a:26:86:ff:45:2d:c5:c1:3c:14:33:
                    4d:96:47:1c:7f:d7:68:b7:a9:40:6e:5e:66:6e:5e:
                    9e:95:1f:f0:59:29:21:aa:13:09:d0:2d:ed:5d:04:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:19:89:A0:12:EB:F3:C2:E0:D0:4D:C6:27:CC:EA:B1:23:B2:50:8C
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3132352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:67:bc:02:c0:5e:75:83:b1:df:d9:1e:eb:67:86:78:fa:46:
         02:ee:b9:6f:5d:bb:b6:d7:01:11:7c:60:cf:68:00:a3:21:b6:
         c1:d1:7b:73:52:11:2e:39:b5:b1:59:3e:d7:49:8d:b9:d8:d5:
         82:53:ae:bc:25:76:ad:c4:73:df:49:f8:39:64:30:4f:d4:2f:
         e4:08:c7:93:1a:b4:28:b5:1d:1c:dc:61:03:06:41:76:bd:6e:
         6f:13:2e:74:1e:44:8e:46:8f:70:e1:35:c5:a2:75:5d:f2:7f:
         b8:0d:fb:e5:f7:c8:af:b2:b1:f7:10:2c:fa:c1:2a:65:e7:a4:
         2f:d3:d5:3b:4c:7a:02:ab:2c:ce:50:62:b4:ba:e3:72:99:0f:
         01:8c:ab:33:0f:92:c7:99:31:11:ae:89:d3:b2:2a:91:bd:00:
         14:d2:11:9b:21:d4:dc:a5:07:78:55:3d:d9:0e:fe:02:01:e8:
         bc:7a:50:45:48:a2:48:ac:2b:e7:bd:ff:6c:37:d4:6c:f2:4d:
         f1:96:3a:73:28:d0:15:73:58:d8:f8:ca:6b:2a:9f:86:50:53:
         1f:39:87:ca:96:b1:8b:d1:cd:ac:57:9b:a0:5f:1f:fd:67:7d:
         61:8e:aa:d7:42:dc:57:5d:1e:5d:1a:10:44:34:34:80:98:9f:
         94:c3:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:07:39 2024 by rpki-client on console-fra.rpki-client.org