Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134382e302f32322d3232203d3e20323632313939.roa
File:                     3139302e3234322e3134382e302f32322d3232203d3e20323632313939.roa (raw, json)
Hash identifier:          f489iwQp6Pl8ZQvmJlnPpmToUVP4pPokC+eN/Kd5oQs=
Subject key identifier:   D5:FC:57:25:6E:2B:95:7E:48:47:04:90:8A:6D:8A:6A:F0:58:73:93
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       3EE2A35D41B55335806ABADC4D060499D4A7208E
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134382e302f32322d3232203d3e20323632313939.roa
Signing time:             Tue 05 Mar 2024 18:14:30 +0000
ROA not before:           Tue 05 Mar 2024 18:09:30 +0000
ROA not after:            Tue 04 Mar 2025 18:14:30 +0000
asID:                     262199
IP address blocks:        190.242.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e2:a3:5d:41:b5:53:35:80:6a:ba:dc:4d:06:04:99:d4:a7:20:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:30 2024 GMT
            Not After : Mar  4 18:14:30 2025 GMT
        Subject: CN=D5FC57256E2B957E484704908A6D8A6AF0587393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:ad:58:5c:93:be:7a:50:0d:8e:ad:27:d8:
                    c3:81:ca:85:89:3d:a2:3f:df:48:54:b6:2a:ef:62:
                    af:4f:d0:06:1e:b6:e5:ad:ab:64:8d:0b:ca:27:a8:
                    27:f7:1e:ce:19:52:0c:30:91:17:99:29:48:aa:d4:
                    a0:53:e3:d4:05:56:95:d1:e7:57:fd:77:51:00:f9:
                    a7:f9:03:a4:53:74:12:c8:45:d8:a5:e4:25:2e:69:
                    b9:60:6d:2c:9e:3a:79:37:1c:0c:c0:fb:17:05:5e:
                    ab:c0:3b:6c:a9:64:d5:6c:81:8a:d3:6d:fc:07:58:
                    c8:c1:97:9a:02:96:3c:2e:a1:21:20:c0:e8:cc:f8:
                    27:5f:41:0d:81:35:c9:d3:6e:fa:63:aa:1d:9b:5f:
                    47:e3:aa:d8:29:6e:a2:ef:17:d8:30:8b:a9:af:a7:
                    65:10:c2:f6:ff:b8:5b:4d:6e:39:21:2d:ca:30:84:
                    c1:bc:7f:51:17:76:5b:b6:f3:45:52:e8:3e:69:1c:
                    fc:ae:7e:36:7f:56:ec:9d:56:16:4d:a3:d3:0b:84:
                    ec:07:c4:ad:e6:23:39:b9:c9:ab:06:44:66:2d:f8:
                    9d:fa:e4:0a:40:6d:46:2a:db:28:f9:08:5d:dd:4f:
                    c1:a3:45:e6:71:90:ff:1e:3c:6a:d1:b6:22:de:fe:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FC:57:25:6E:2B:95:7E:48:47:04:90:8A:6D:8A:6A:F0:58:73:93
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3134382e302f32322d3232203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:fd:36:db:bf:97:93:04:53:63:28:fb:0a:f9:c5:79:bc:
         40:0a:b2:96:3f:51:8a:d6:78:76:ae:fa:ae:9a:5b:5b:dc:92:
         3f:91:b9:db:00:85:0d:3d:2d:f4:f0:d8:d7:a1:34:0f:3d:96:
         a7:d1:96:d1:f5:90:d4:49:bc:8b:5c:87:80:b2:4f:4d:62:24:
         3c:01:32:f5:7d:fd:6e:68:8a:c5:a5:e2:40:5c:c7:e2:83:11:
         9e:84:ef:f2:67:5f:a0:b5:34:02:70:d4:0e:f2:0e:de:d3:ee:
         4c:17:3f:42:c9:b7:e3:73:7e:dd:23:ca:c8:93:ef:18:0a:3a:
         88:9e:be:15:fc:5b:6d:78:d5:93:35:d5:30:a8:d3:e3:7f:08:
         5c:1f:a3:53:41:0b:a7:24:a7:63:b9:85:fc:b5:e8:f1:c0:90:
         d7:34:a1:4c:35:c7:ba:db:3a:d5:94:7a:84:bc:3d:3c:98:74:
         0e:a0:ef:8f:61:23:2e:2b:13:f2:41:da:6a:ba:46:ca:4a:d7:
         1b:c0:38:f0:c4:09:57:1f:a9:1f:b4:95:44:12:4b:ef:79:73:
         41:13:50:fd:32:45:90:e0:39:5c:e6:7b:7e:71:11:a9:3a:b0:
         1e:27:68:3d:6a:9b:b7:73:b5:69:9c:4b:ec:b2:6f:a8:22:90:
         44:d4:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org