Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3133342e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3133342e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          RkjCfQvFKO7QdzrVpvJvjF2VKglEgNANCEbRwAqF+v0=
Subject key identifier:   6E:45:A6:87:55:96:53:FE:40:EF:C9:C9:02:A9:B8:B3:DE:49:81:EC
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       7C9369AF47DE168C2FB7C08A0E2A06D5FFE2CCA0
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3133342e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:38 +0000
ROA not before:           Tue 05 Mar 2024 18:09:38 +0000
ROA not after:            Tue 04 Mar 2025 18:14:38 +0000
asID:                     23520
IP address blocks:        190.242.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:93:69:af:47:de:16:8c:2f:b7:c0:8a:0e:2a:06:d5:ff:e2:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:38 2024 GMT
            Not After : Mar  4 18:14:38 2025 GMT
        Subject: CN=6E45A687559653FE40EFC9C902A9B8B3DE4981EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:af:8d:70:09:9e:3f:be:ff:dc:77:26:d9:
                    2b:2b:d2:45:e1:39:ff:61:d0:c9:2e:2e:bd:6f:8b:
                    90:02:2e:dc:20:79:d4:9d:40:10:25:2d:32:76:11:
                    d5:41:ca:5c:4d:04:61:fd:20:14:2c:7a:3b:7b:fa:
                    3f:fd:61:df:66:b2:42:42:97:0d:19:cd:c1:27:d5:
                    4a:5b:ae:8c:6f:ca:a9:d3:79:e0:89:92:d6:b4:79:
                    6f:07:39:b1:f6:c3:92:a7:b3:3c:8b:9a:3e:98:98:
                    ef:91:d4:8e:c2:8f:09:2d:2d:ec:18:b9:0d:25:2f:
                    b5:8f:27:4a:da:a0:8d:02:6b:03:8a:56:fd:38:1b:
                    75:b8:e3:3e:3a:2a:b8:f3:dc:6c:cf:31:1e:6f:1e:
                    5c:57:ef:eb:ab:71:1b:95:6b:c7:7c:8f:d7:09:e2:
                    fb:13:26:d8:e4:a2:05:a6:10:8a:9b:b0:67:43:1d:
                    02:0a:23:2b:15:fb:fa:68:f6:b5:6a:50:6f:cd:55:
                    02:45:a1:c7:47:3f:6b:89:ae:97:39:85:fd:8e:d6:
                    c5:37:7a:6d:45:dc:38:22:ae:a4:9f:10:d5:b3:02:
                    c5:c2:34:20:0f:a7:86:b4:ab:62:cf:ca:6c:76:46:
                    14:aa:fa:a4:0f:d8:1c:fe:e6:2b:f0:6f:4a:b2:89:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:A6:87:55:96:53:FE:40:EF:C9:C9:02:A9:B8:B3:DE:49:81:EC
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3133342e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:50:cc:f5:44:3d:7f:07:a6:75:43:08:8d:9f:8c:a3:2f:
         75:27:d2:ed:2f:97:19:b5:56:5f:c5:33:91:59:d1:d2:aa:3b:
         b1:06:42:26:09:79:df:b0:9f:aa:55:5e:dd:75:f6:b4:0c:cc:
         ee:8d:71:0e:21:c9:37:db:22:e1:2f:94:c1:93:86:a3:82:f0:
         c3:7c:a2:0c:f4:37:b9:18:ae:c6:08:53:6f:17:ae:95:da:37:
         ca:59:e7:6a:24:86:8a:bb:ae:19:bd:bc:0d:f0:b3:e9:04:a1:
         73:a6:27:7f:0e:e1:b3:fb:13:90:7c:30:97:40:2e:08:9b:06:
         a9:1b:04:43:e2:66:a6:eb:e9:a5:f7:f9:a9:95:21:32:f1:8d:
         03:53:c3:8b:fc:f1:e4:b4:5d:d8:46:87:73:1a:5f:2a:ee:32:
         76:db:98:48:dd:6a:f6:d6:43:0b:68:28:01:a0:b4:7d:86:79:
         e8:6f:93:13:8a:76:07:3e:56:04:a3:41:d5:67:b8:24:0d:4b:
         a9:a6:04:72:7e:7e:29:cd:1d:f7:56:26:43:b4:3d:b9:75:94:
         50:f3:1a:94:46:b9:6e:e7:b5:4e:e2:54:66:06:36:2c:88:2b:
         c7:b5:75:b9:ee:a5:39:e6:8a:14:03:4d:b0:bb:48:62:44:58:
         6a:78:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org