Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3133392e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3133392e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          i8kDOL7uKeulw+rR07mjaW5DejFoPhG5+wWG6FsvWQU=
Subject key identifier:   83:E3:96:57:BE:F5:AC:D2:6D:62:32:75:8C:89:D0:C5:B2:6D:68:A2
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       4D35923C518FEAD3A4B884AD19971469560EF79A
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3133392e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:40 +0000
ROA not before:           Tue 05 Mar 2024 18:09:40 +0000
ROA not after:            Tue 04 Mar 2025 18:14:40 +0000
asID:                     262191
IP address blocks:        190.242.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Jun 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:35:92:3c:51:8f:ea:d3:a4:b8:84:ad:19:97:14:69:56:0e:f7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:40 2024 GMT
            Not After : Mar  4 18:14:40 2025 GMT
        Subject: CN=83E39657BEF5ACD26D6232758C89D0C5B26D68A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:db:55:35:48:70:8f:2c:94:31:4c:ca:3d:
                    75:d4:bd:d3:04:0f:e2:79:b8:58:d1:a5:00:b7:0f:
                    87:f0:a6:73:b8:f7:7d:be:21:76:3a:5f:9d:ea:ee:
                    41:75:df:0a:39:fb:6d:20:f4:54:ff:ef:65:9a:5e:
                    36:1f:cd:7f:ff:7f:a4:77:49:02:f1:f4:c5:46:11:
                    7b:3c:8b:44:9e:a0:7d:a1:91:9d:de:4a:34:f2:6d:
                    90:97:4a:e0:04:dc:0b:f9:21:b1:60:54:a3:c9:ba:
                    ae:86:57:68:e6:f4:4e:38:d7:62:c3:3b:58:f1:f0:
                    12:ae:41:8a:fd:49:9f:c9:f2:12:ef:43:15:b8:bf:
                    79:1f:a3:75:44:65:5f:40:ce:e7:47:f8:54:ca:95:
                    ed:54:fa:5e:bc:c6:4b:13:4b:60:ff:42:b2:ec:4f:
                    d2:b3:6d:de:74:45:99:32:ee:c7:0a:d0:62:ff:b4:
                    e7:55:0c:16:5f:2d:7f:07:1f:16:3c:ea:13:c5:0d:
                    8a:65:34:bc:c6:c8:11:00:2f:fb:de:cd:62:eb:54:
                    44:84:34:e3:9f:be:2d:a7:4d:43:fa:a7:dc:d3:39:
                    fc:33:22:31:e2:9f:8c:5b:6b:6b:54:57:15:cd:4c:
                    12:ce:c7:d6:f2:d4:ab:5a:7e:6f:1a:a8:fe:58:c0:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E3:96:57:BE:F5:AC:D2:6D:62:32:75:8C:89:D0:C5:B2:6D:68:A2
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3133392e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:70:e7:1b:bc:87:21:01:e4:fa:a9:af:91:6e:0e:62:fe:c6:
         d1:9b:05:d1:79:8c:e0:23:91:e9:6a:a9:49:7e:7e:4a:a6:c8:
         c2:e0:3c:9e:89:03:06:98:a5:6f:cc:93:80:df:6a:45:77:a3:
         0d:ce:39:f7:43:65:39:e4:67:64:5e:e0:d0:76:52:98:b5:0c:
         00:b5:4d:28:d3:b4:09:ce:b0:6a:36:58:95:13:df:dc:21:5a:
         dd:e4:71:9e:14:8f:02:b3:b7:aa:f2:de:7d:3d:df:e1:8a:e3:
         d0:d6:17:b0:9d:ee:5d:ff:bb:83:da:f5:a3:de:8e:63:73:4e:
         da:01:52:3d:cf:56:0b:ca:e4:48:49:b9:c6:79:7b:74:9a:5e:
         6a:91:05:5c:9b:30:47:e4:33:d6:97:82:a3:f2:14:e1:4f:33:
         cf:42:38:4d:52:69:e9:b3:54:81:1b:4e:73:44:ea:19:ad:51:
         84:05:b7:28:78:1e:e0:0c:6f:a7:62:a4:75:b9:f2:f3:ee:35:
         63:5a:50:aa:06:81:32:5c:d5:b0:60:49:c1:68:b3:b9:a8:3a:
         f2:93:53:52:a5:7e:5f:be:ec:58:09:30:80:ec:92:ca:4b:a6:
         5e:76:58:c4:5c:96:5b:13:cd:bd:7a:81:4a:6b:ec:fd:ed:a0:
         62:c6:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:10:54 2024 by rpki-client on console-ams.rpki-client.org