Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134352e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3134352e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          1A7F9KdUD21qjMx1nZk+1PefSYl2wc6rTaxT7tgYKZ8=
Subject key identifier:   FE:82:83:D4:52:BB:B9:D0:31:94:AC:67:BB:8D:55:F9:17:A0:00:E2
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       39AECFA5D5F3A505EB71B3DCBAA9B75F4BDE3D79
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134352e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:46 +0000
ROA not before:           Tue 05 Mar 2024 18:09:46 +0000
ROA not after:            Tue 04 Mar 2025 18:14:46 +0000
asID:                     23520
IP address blocks:        190.242.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ae:cf:a5:d5:f3:a5:05:eb:71:b3:dc:ba:a9:b7:5f:4b:de:3d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:46 2024 GMT
            Not After : Mar  4 18:14:46 2025 GMT
        Subject: CN=FE8283D452BBB9D03194AC67BB8D55F917A000E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:04:fe:57:63:bf:80:e7:a7:6c:80:c6:03:4f:
                    99:0e:d7:cd:c6:56:44:0d:46:1c:75:a9:c9:8e:67:
                    e8:18:a4:c9:da:d8:85:93:42:74:57:d0:39:31:9d:
                    a0:29:1e:a1:21:ff:a5:b7:4e:d4:23:02:9a:e8:4c:
                    0b:6f:b8:fb:93:01:e0:bc:f3:e2:cf:b7:3c:15:9a:
                    f0:e4:99:5a:b3:75:ea:65:32:67:91:6c:18:5f:65:
                    a5:dd:6f:19:13:b9:45:0e:6f:da:1b:05:c7:82:2d:
                    d4:93:01:37:97:e4:4c:72:12:7e:81:54:5a:5b:88:
                    f4:fc:1b:8b:14:1c:f9:ea:82:b6:37:76:b0:0b:fc:
                    33:41:5b:f5:89:db:af:8f:af:49:81:23:42:ba:fc:
                    55:fa:af:9a:7e:e0:b2:0c:78:60:54:de:4b:1e:be:
                    1e:19:90:bd:18:45:82:9e:6d:b8:6d:ee:34:af:b3:
                    3e:6d:32:df:a3:78:4e:28:f2:2d:9b:d9:5a:38:b6:
                    2f:e3:dc:46:3f:bc:71:79:23:66:30:eb:a0:74:a2:
                    58:94:70:18:df:67:5e:03:8f:1c:0c:96:73:2d:af:
                    7e:5a:88:84:1d:ff:7a:e5:d9:c4:a8:1a:91:33:3b:
                    25:62:4f:c1:bc:26:8c:24:f0:8a:4e:72:ef:bc:f6:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:83:D4:52:BB:B9:D0:31:94:AC:67:BB:8D:55:F9:17:A0:00:E2
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134352e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:09:63:dc:dd:7c:bd:b5:d0:e7:22:2a:1d:a1:c4:9d:c9:
         af:b7:fe:e8:2b:29:5e:47:22:21:d9:37:f8:d8:b7:21:b7:0d:
         e3:38:29:ae:93:50:6e:c8:d3:39:15:5e:c5:e4:67:5d:b6:63:
         14:b0:83:e8:44:db:7d:c4:14:15:43:bc:c6:6b:ad:b8:83:80:
         cb:44:10:a1:b6:9e:b5:4f:f8:e3:e3:ff:72:d4:ad:98:9e:fd:
         0e:b4:29:fe:f5:f3:0f:b1:c8:82:c1:67:39:84:91:75:c6:b9:
         6d:83:01:cf:de:b1:8e:97:1a:50:91:97:81:8a:60:1f:b3:af:
         92:80:18:08:cc:de:96:0e:7f:6b:cd:bf:13:15:bb:2e:9b:25:
         84:93:c4:4f:e2:58:b7:af:3b:90:e5:04:f8:43:1d:02:be:41:
         b7:9f:56:27:52:37:24:5b:29:9a:d6:da:10:9c:0f:88:8c:67:
         d9:76:d4:90:bd:59:b1:6d:7c:17:fa:81:5f:a0:55:9a:5c:06:
         32:79:44:cc:cd:37:75:35:6f:af:84:ba:ff:d1:2a:2a:94:82:
         ea:4b:af:54:34:01:e8:97:65:00:f1:39:e9:db:f0:e8:cf:96:
         73:50:69:36:32:a0:ec:b5:89:54:79:94:b2:85:41:b0:80:ed:
         9a:0b:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org