Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134322e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3134322e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          G1xON7tSyiUee172jHE56CDkmZ/vbfkYssKpPPYrsMs=
Subject key identifier:   8F:F5:3C:9E:23:DB:EA:77:DA:DD:5D:09:1E:D3:F0:F9:55:3B:2E:A0
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       5190E2506BD8B6D4C60AE72EACBBFC112CF3488D
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134322e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:36 +0000
ROA not before:           Tue 05 Mar 2024 18:09:36 +0000
ROA not after:            Tue 04 Mar 2025 18:14:36 +0000
asID:                     23520
IP address blocks:        190.242.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:90:e2:50:6b:d8:b6:d4:c6:0a:e7:2e:ac:bb:fc:11:2c:f3:48:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:36 2024 GMT
            Not After : Mar  4 18:14:36 2025 GMT
        Subject: CN=8FF53C9E23DBEA77DADD5D091ED3F0F9553B2EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:a5:ed:b2:3d:22:f1:ea:87:81:07:e4:07:
                    90:f1:8f:0b:c5:af:c9:03:fa:78:cf:08:5a:7c:97:
                    97:3b:45:68:06:ad:3e:c3:79:12:06:83:62:75:1d:
                    cc:6d:53:33:1c:94:20:0e:de:ef:ee:a6:2f:3e:16:
                    89:6f:bf:01:3e:d5:3d:33:f6:53:f8:4b:2f:8d:40:
                    dc:88:df:49:fa:ef:9c:bc:db:05:d7:b3:5d:6c:c2:
                    ce:14:9a:df:2b:e0:6f:03:6e:95:3f:fa:47:76:e3:
                    08:9f:a7:75:c6:c1:dc:56:5a:cf:99:57:37:fb:d2:
                    47:1d:d8:ed:5f:50:65:8d:bd:35:26:02:3d:69:81:
                    e8:88:2f:ed:4f:77:4b:8f:01:10:04:18:cb:90:e7:
                    be:65:53:3d:00:9f:c2:4c:90:7f:c4:ea:72:3f:89:
                    82:0a:0a:22:85:7b:ec:bb:f8:30:3b:91:47:6f:3e:
                    4d:c8:58:2c:37:bf:d1:67:8a:e3:96:ab:fe:54:15:
                    81:76:d1:81:30:e4:67:c5:44:fa:56:01:5b:62:41:
                    04:0c:be:34:2a:04:4f:62:1c:8d:ab:06:7d:32:e7:
                    3f:3c:26:8b:64:c4:41:ef:e5:5a:ff:e8:c2:f9:20:
                    7f:60:7d:13:fd:11:45:61:9a:5e:9f:aa:75:d1:48:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F5:3C:9E:23:DB:EA:77:DA:DD:5D:09:1E:D3:F0:F9:55:3B:2E:A0
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134322e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:dd:a0:96:2d:80:4c:6f:89:6d:71:25:74:50:57:bd:8a:a2:
         cb:33:d7:16:1e:48:06:d4:5e:cf:f0:f9:40:30:84:0e:68:8c:
         b6:e0:8a:ba:bf:2a:58:60:66:bb:a1:3e:13:35:b1:e1:5e:81:
         11:cf:a4:ae:48:a8:e9:6e:7f:86:92:63:81:46:78:6d:9f:50:
         15:b9:3c:51:82:a2:e0:55:22:b9:64:b0:9a:b3:7e:12:17:75:
         1d:97:e9:12:c2:cf:dd:d4:9a:9a:29:13:5b:5b:04:91:3f:14:
         3e:de:09:90:e6:f6:57:20:cc:e2:ff:6e:58:b9:e7:cf:ef:fe:
         c8:62:01:f3:2d:2f:5c:1a:05:93:40:28:62:00:62:16:36:16:
         2c:99:78:b9:60:68:98:8e:18:40:86:a9:11:78:53:9d:3e:c7:
         66:91:7d:a7:91:97:b7:95:42:bb:f7:d3:a2:6a:2a:b6:e1:df:
         88:10:af:96:62:5d:b2:23:39:6c:e9:c0:12:43:19:e8:90:50:
         85:de:20:53:31:b2:a0:e4:97:a4:dc:1f:73:0c:e7:4c:e1:0b:
         68:a1:dd:d3:cf:ca:03:db:80:b0:de:3f:d2:4e:f1:39:56:3e:
         5c:a1:27:8e:5a:a7:61:57:a8:bb:d1:12:50:97:ba:24:74:2e:
         54:37:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org